From null at suse.de Thu Oct 1 12:30:45 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 12:30:45 -0000 Subject: SUSE-SU-2026:4409-1: important: Security update for gimp Message-ID: <179085784569.22608.1262074794311473462@c47cdf24d69a> # Security update for gimp Announcement ID: SUSE-SU-2026:4409-1 Release Date: 2026-10-01T07:07:36Z Rating: important References: * bsc#1276230 * bsc#1276231 * bsc#1276232 * bsc#1276233 * bsc#1276234 * bsc#1276235 * bsc#1276236 * bsc#1280511 * bsc#1280512 * bsc#1280739 Cross-References: * CVE-2026-18301 * CVE-2026-18302 * CVE-2026-18303 * CVE-2026-18304 * CVE-2026-18305 * CVE-2026-18306 * CVE-2026-18307 * CVE-2026-90947 * CVE-2026-90948 * CVE-2026-92248 CVSS scores: * CVE-2026-18301 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18301 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18302 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18303 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18303 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18304 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18304 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18305 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18305 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18306 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18306 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18307 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90947 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90947 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90948 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90948 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90948 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-92248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92248 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for gimp fixes the following issues: * CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). * CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). * CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow (bsc#1276232). * CVE-2026-18304: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233). * CVE-2026-18305: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276234). * CVE-2026-18306: SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276235). * CVE-2026-18307: File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1276236). * CVE-2026-90947: out-of-bounds write in the lighting effects plugin when processing a crafted preset file due to improper validation of the number of light sources (bsc#1280511). * CVE-2026-90948: heap buffer overflow in the ICO loader when processing ICO files with embedded PNG images due to an integer overflow during calculation of buffer sizes (bsc#1280512). * CVE-2026-92248: integer overflow when generating a thumbnail preview for a PSD file can lead to a heap buffer overflow (bsc#1280739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4409 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4409 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4409 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-devel-2.10.30-150400.3.79.1 * gimp-plugin-aa-2.10.30-150400.3.79.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (x86_64) * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.79.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.79.1 * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-32bit-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-64bit-2.10.30-150400.3.79.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-devel-2.10.30-150400.3.79.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-devel-2.10.30-150400.3.79.1 * gimp-plugin-aa-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.79.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18301.html * https://www.suse.com/security/cve/CVE-2026-18302.html * https://www.suse.com/security/cve/CVE-2026-18303.html * https://www.suse.com/security/cve/CVE-2026-18304.html * https://www.suse.com/security/cve/CVE-2026-18305.html * https://www.suse.com/security/cve/CVE-2026-18306.html * https://www.suse.com/security/cve/CVE-2026-18307.html * https://www.suse.com/security/cve/CVE-2026-90947.html * https://www.suse.com/security/cve/CVE-2026-90948.html * https://www.suse.com/security/cve/CVE-2026-92248.html * https://bugzilla.suse.com/show_bug.cgi?id=1276230 * https://bugzilla.suse.com/show_bug.cgi?id=1276231 * https://bugzilla.suse.com/show_bug.cgi?id=1276232 * https://bugzilla.suse.com/show_bug.cgi?id=1276233 * https://bugzilla.suse.com/show_bug.cgi?id=1276234 * https://bugzilla.suse.com/show_bug.cgi?id=1276235 * https://bugzilla.suse.com/show_bug.cgi?id=1276236 * https://bugzilla.suse.com/show_bug.cgi?id=1280511 * https://bugzilla.suse.com/show_bug.cgi?id=1280512 * https://bugzilla.suse.com/show_bug.cgi?id=1280739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 12:32:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 12:32:03 -0000 Subject: SUSE-SU-2026:4408-1: important: Security update for alloy Message-ID: <179085792302.22608.11611427351366303832@c47cdf24d69a> # Security update for alloy Announcement ID: SUSE-SU-2026:4408-1 Release Date: 2026-10-01T07:07:12Z Rating: important References: * bsc#1267482 * bsc#1267483 * bsc#1267484 * bsc#1267486 * bsc#1267487 * bsc#1268982 * bsc#1269861 * bsc#1272028 * bsc#1272418 * bsc#1276742 * bsc#1276982 * bsc#1276992 * bsc#1277429 * bsc#1277996 * bsc#1278671 * bsc#1278693 * bsc#1280671 Cross-References: * CVE-2026-2303 * CVE-2026-37236 * CVE-2026-41178 * CVE-2026-45679 * CVE-2026-45680 * CVE-2026-45681 * CVE-2026-45683 * CVE-2026-45684 * CVE-2026-46600 * CVE-2026-48496 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-75889 * CVE-2026-78662 * CVE-2026-81521 * CVE-2026-89090 CVSS scores: * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-37236 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-37236 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-37236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45679 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-45679 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45679 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45680 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45680 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45681 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( NVD ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2026-45684 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45684 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-46600 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46600 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-75889 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-75889 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-75889 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81521 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-81521 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81521 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for alloy fixes the following issues: * CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of- Bounds Read in GSSAPI Error Handling (bsc#1269861). * CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method- Override header and bypass established access control (bsc#1277996). * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276742). * CVE-2026-45679: go.opentelemetry.io/obi: Redis error text is exported in span status messages and can lead to exfiltration of sensitive data (bsc#1267482). * CVE-2026-45680: go.opentelemetry.io/obi: unbounded BPF internal metrics replay can exhaust CPU and cause a DoS (bsc#1267483). * CVE-2026-45681: go.opentelemetry.io/obi: CPU-mismatch fallback uses 256-byte buffer with 8KB size and can cause OBI out-of-bounds reads to leak memory into telemetry (bsc#1267484). * CVE-2026-45683: go.opentelemetry.io/obi: Java TLS ioctl kprobe allows a user to point OBI at kernel memory and cause that memory to be copied into telemetry (bsc#1267486). * CVE-2026-45684: go.opentelemetry.io/obi: log enricher mishandled `writev` buffers and allows multi-segment calls to read and overwrite memory beyond the first segment (bsc#1267487). * CVE-2026-46600: golang.org/x/net/dns/dnsmessage: Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer (bsc#1272418). * CVE-2026-48496: opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent (bsc#1268982). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272028). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278671). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276982). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276992). * CVE-2026-75889: arbitrary file reads due to the `prometheus.operator.servicemonitors` component allowing users who can modify `ServiceMonitor` resources in a watched namespace to specify an arbitrary local file through `bearerTokenFile` (bsc#1277429). * CVE-2026-81521: go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (bsc#1278693). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280671). Changes for alloy: * Update to version 1.19.2. * Update to version 1.19.1. * Update to version 1.19.0: * BREAKING CHANGE: prometheus.operator.servicemonitors now rejects endpoints that reference local files by default. Set allow_arbitrary_file_access = true to preserve previous behavior. * prometheus.enrich: Support multi-label matching * prometheus.relabel: Add opt-in TTL cache mode * telemetry: Add new metrics for graph connections and pyroscope forwarded entries * database_observability: Exclude system schemas from MySQL health checks and redact query text in explain_plans * Update to version 1.18.1: * Add nop receiver to OTel Engine ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4408 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * alloy-debuginfo-1.19.2-150700.15.29.1 * alloy-1.19.2-150700.15.29.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-37236.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-45679.html * https://www.suse.com/security/cve/CVE-2026-45680.html * https://www.suse.com/security/cve/CVE-2026-45681.html * https://www.suse.com/security/cve/CVE-2026-45683.html * https://www.suse.com/security/cve/CVE-2026-45684.html * https://www.suse.com/security/cve/CVE-2026-46600.html * https://www.suse.com/security/cve/CVE-2026-48496.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-75889.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81521.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1267482 * https://bugzilla.suse.com/show_bug.cgi?id=1267483 * https://bugzilla.suse.com/show_bug.cgi?id=1267484 * https://bugzilla.suse.com/show_bug.cgi?id=1267486 * https://bugzilla.suse.com/show_bug.cgi?id=1267487 * https://bugzilla.suse.com/show_bug.cgi?id=1268982 * https://bugzilla.suse.com/show_bug.cgi?id=1269861 * https://bugzilla.suse.com/show_bug.cgi?id=1272028 * https://bugzilla.suse.com/show_bug.cgi?id=1272418 * https://bugzilla.suse.com/show_bug.cgi?id=1276742 * https://bugzilla.suse.com/show_bug.cgi?id=1276982 * https://bugzilla.suse.com/show_bug.cgi?id=1276992 * https://bugzilla.suse.com/show_bug.cgi?id=1277429 * https://bugzilla.suse.com/show_bug.cgi?id=1277996 * https://bugzilla.suse.com/show_bug.cgi?id=1278671 * https://bugzilla.suse.com/show_bug.cgi?id=1278693 * https://bugzilla.suse.com/show_bug.cgi?id=1280671 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:30:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:30:27 -0000 Subject: SUSE-SU-2026:23968-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179087222754.12922.16564310999298167277@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23968-1 Release Date: 2026-09-29T19:46:32Z Rating: important References: * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1787 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:31:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:31:13 -0000 Subject: SUSE-SU-2026:23967-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179087227351.12922.9095834318927192064@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23967-1 Release Date: 2026-09-29T16:11:29Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1780 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:31:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:31:58 -0000 Subject: SUSE-SU-2026:23966-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179087231879.12922.9091970761795238403@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23966-1 Release Date: 2026-09-29T14:48:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1777 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:32:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:32:54 -0000 Subject: SUSE-SU-2026:23965-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179087237426.12922.1274662310540635214@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23965-1 Release Date: 2026-09-29T14:33:00Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1776 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:33:40 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:33:40 -0000 Subject: SUSE-SU-2026:23964-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179087242026.12922.5845537165643777537@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23964-1 Release Date: 2026-09-29T14:07:25Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1775 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:34:25 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:34:25 -0000 Subject: SUSE-SU-2026:23963-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179087246580.12922.3641912401208374647@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23963-1 Release Date: 2026-09-29T14:07:25Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1774 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:35:15 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:35:15 -0000 Subject: SUSE-SU-2026:23962-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179087251541.12922.10136774070143799209@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23962-1 Release Date: 2026-09-29T13:13:08Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1773 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:36:00 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:36:00 -0000 Subject: SUSE-SU-2026:23961-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179087256057.12922.15052893287832407457@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23961-1 Release Date: 2026-09-29T13:13:08Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1772 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:36:42 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:36:42 -0000 Subject: SUSE-SU-2026:23960-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179087260263.12922.6083184099117412562@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23960-1 Release Date: 2026-09-29T12:42:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1771 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:37:21 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:37:21 -0000 Subject: SUSE-SU-2026:23959-1: important: Security update for rpcbind Message-ID: <179087264135.12922.10531617959192364493@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:23959-1 Release Date: 2026-09-29T16:14:19Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1784 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:37:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:37:58 -0000 Subject: SUSE-RU-2026:23958-1: important: Recommended update for scap-security-guide Message-ID: <179087267843.12922.8904837935003066882@e7f4ad8d9866> # Recommended update for scap-security-guide Announcement ID: SUSE-RU-2026:23958-1 Release Date: 2026-09-29T12:13:52Z Rating: important References: * jsc#ECO-3319 Affected Products: * SUSE Linux Micro 6.2 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: Changes in scap-security-guide: * updated to 0.1.82: (jsc#ECO-3319): * Add KylinSecServer6 OS baseline support * Add new product for Ubuntu 26.04 and a default profile * Create RHEL 10 STIG control file * Debian13 20260702 * Various updates for SLE 12/15/16 * Various updates for SLEM 5/6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1770 ## Package List: * SUSE Linux Micro 6.2 (noarch) * scap-security-guide-0.1.82-160000.1.1 ## References: * https://jira.suse.com/browse/ECO-3319 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:38:32 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:38:32 -0000 Subject: SUSE-SU-2026:23957-1: important: Security update for glibc Message-ID: <179087271206.12922.13242105163574086046@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23957-1 Release Date: 2026-09-29T12:13:52Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1769 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * glibc-devel-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-locale-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:39:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:39:12 -0000 Subject: SUSE-RU-2026:23956-1: important: Recommended update for pcr-oracle Message-ID: <179087275258.12922.572196519231294354@e7f4ad8d9866> # Recommended update for pcr-oracle Announcement ID: SUSE-RU-2026:23956-1 Release Date: 2026-09-29T09:38:28Z Rating: important References: * bsc#1279916 * bsc#1279917 Affected Products: * SUSE Linux Micro 6.2 An update that has two fixes can now be installed. ## Description: This update for pcr-oracle fixes the following issues: Changes in pcr-oracle: * Update to 0.6.6 * Add --nvindex option by * Remove tagged policy check on TPM Owner handle (bsc#1279916) * Introduce tpm2key-tool to parse and compare tpm2.0 key files (bsc#1279917) * Add load-test action for SRK detection (bsc#1279917) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1768 ## Package List: * SUSE Linux Micro 6.2 (aarch64 x86_64) * pcr-oracle-debuginfo-0.6.6-160000.1.1 * pcr-oracle-debugsource-0.6.6-160000.1.1 * pcr-oracle-0.6.6-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279916 * https://bugzilla.suse.com/show_bug.cgi?id=1279917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:39:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:39:35 -0000 Subject: SUSE-RU-2026:23955-1: moderate: Recommended update for selinux-policy Message-ID: <179087277583.12922.14197787342909876549@e7f4ad8d9866> # Recommended update for selinux-policy Announcement ID: SUSE-RU-2026:23955-1 Release Date: 2026-09-29T08:34:31Z Rating: moderate References: * bsc#1279051 * bsc#1282303 Affected Products: * SUSE Linux Micro 6.2 An update that has two fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Changes in selinux-policy: Update to version 20250627+git405.e266baf49: * Add common criteria banner labels (bsc#1282303) * Fix corrupted formatting in files.if * Allow rsync to getattr pipes and sockes if rsync_export_all_ro is set (bsc#1279051) * Introduce files_getattr_non_auth_sockets * Introduce files_getattr_non_auth_pipes interface ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1767 ## Package List: * SUSE Linux Micro 6.2 (noarch) * selinux-policy-devel-20250627+git405.e266baf49-160000.1.1 * selinux-policy-targeted-20250627+git405.e266baf49-160000.1.1 * selinux-policy-20250627+git405.e266baf49-160000.1.1 * selinux-policy-minimum-20250627+git405.e266baf49-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279051 * https://bugzilla.suse.com/show_bug.cgi?id=1282303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:39:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:39:58 -0000 Subject: SUSE-RU-2026:23954-1: moderate: Recommended update for libzypp, libsolv Message-ID: <179087279809.12922.17169545916084836037@e7f4ad8d9866> # Recommended update for libzypp, libsolv Announcement ID: SUSE-RU-2026:23954-1 Release Date: 2026-09-28T09:48:10Z Rating: moderate References: * bsc#1279541 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for libzypp, libsolv fixes the following issues: Changes in libzypp: version 17.38.16 (35): * This fix resolves issues in online migrations to SLES 16.1. (bsc#1279541) Changes in libsolv: bump version to 0.7.39: * improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] * fix possible segfault in the SUSE namespace dependency generation ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1766 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libzypp-17.38.16-160000.1.1 * libsolv-tools-base-0.7.40-160000.1.1 * libzypp-debuginfo-17.38.16-160000.1.1 * libsolv-tools-base-debuginfo-0.7.40-160000.1.1 * libsolv-debugsource-0.7.40-160000.1.1 * libzypp-debugsource-17.38.16-160000.1.1 * libsolv-debuginfo-0.7.40-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279541 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:40:21 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:40:21 -0000 Subject: SUSE-RU-2026:23953-1: moderate: Recommended update for tar Message-ID: <179087282126.12922.10689189607913916436@e7f4ad8d9866> # Recommended update for tar Announcement ID: SUSE-RU-2026:23953-1 Release Date: 2026-09-25T09:08:29Z Rating: moderate References: * bsc#1271272 * bsc#1280941 Affected Products: * SUSE Linux Micro 6.2 An update that has two fixes can now be installed. ## Description: This update for tar fixes the following issues: Changes in tar: * Fixes tar incorrectly skipping members in certain archives containing dirs with non-zero sizes. (bsc#1271272) * Avoid acl_ prefix for functions: * The acl.h header from libacl uses acl_ prefix for its functions. Avoid defining functions with the same name in order to protect its namespace. (bsc#1280941) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1762 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * tar-debuginfo-1.35-160000.5.1 * tar-1.35-160000.5.1 * tar-debugsource-1.35-160000.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1271272 * https://bugzilla.suse.com/show_bug.cgi?id=1280941 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:40:43 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:40:43 -0000 Subject: SUSE-SU-2026:23952-1: important: Security update for perl-DBI Message-ID: <179087284313.12922.8424564358476107399@e7f4ad8d9866> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:23952-1 Release Date: 2026-09-25T07:38:28Z Rating: important References: * bsc#1281704 Cross-References: * CVE-2026-78030 CVSS scores: * CVE-2026-78030 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78030 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78030 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for perl-DBI fixes the following issue: * CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1761 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * perl-DBI-1.647.0-160000.6.1 * perl-DBI-debugsource-1.647.0-160000.6.1 * perl-DBI-debuginfo-1.647.0-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78030.html * https://bugzilla.suse.com/show_bug.cgi?id=1281704 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:41:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:41:26 -0000 Subject: SUSE-SU-2026:23951-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179087288666.12922.3521782926935212508@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23951-1 Release Date: 2026-09-29T19:40:12Z Rating: important References: * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1787 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1787 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:42:05 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:42:05 -0000 Subject: SUSE-SU-2026:23950-1: moderate: Security update for gnome-shell Message-ID: <179087292548.12922.4996843042180324625@e7f4ad8d9866> # Security update for gnome-shell Announcement ID: SUSE-SU-2026:23950-1 Release Date: 2026-09-29T17:39:58Z Rating: moderate References: * bsc#1280619 Cross-References: * CVE-2026-91786 CVSS scores: * CVE-2026-91786 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91786 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-91786 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-shell fixes the following issue: * CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1786 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1786 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * gnome-shell-devel-48.4-160000.2.1 * gnome-shell-debuginfo-48.4-160000.2.1 * gnome-shell-48.4-160000.2.1 * gnome-extensions-48.4-160000.2.1 * gnome-shell-debugsource-48.4-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * gnome-shell-lang-48.4-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * gnome-shell-devel-48.4-160000.2.1 * gnome-shell-debuginfo-48.4-160000.2.1 * gnome-shell-48.4-160000.2.1 * gnome-extensions-48.4-160000.2.1 * gnome-shell-debugsource-48.4-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * gnome-shell-lang-48.4-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-91786.html * https://bugzilla.suse.com/show_bug.cgi?id=1280619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:42:44 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:42:44 -0000 Subject: SUSE-SU-2026:23949-1: important: Security update for emacs Message-ID: <179087296407.12922.8916132591242258594@e7f4ad8d9866> # Security update for emacs Announcement ID: SUSE-SU-2026:23949-1 Release Date: 2026-09-29T17:24:16Z Rating: important References: * bsc#1282390 Cross-References: * CVE-2026-96442 CVSS scores: * CVE-2026-96442 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96442 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96442 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issue: * CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1783 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1783 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * emacs-nox-debuginfo-30.2-160000.4.1 * emacs-nox-30.2-160000.4.1 * etags-debuginfo-30.2-160000.4.1 * emacs-debuginfo-30.2-160000.4.1 * emacs-x11-30.2-160000.4.1 * emacs-30.2-160000.4.1 * etags-30.2-160000.4.1 * emacs-x11-debuginfo-30.2-160000.4.1 * emacs-eln-30.2-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * emacs-info-30.2-160000.4.1 * emacs-el-30.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-30.2-160000.4.1 * emacs-nox-30.2-160000.4.1 * etags-debuginfo-30.2-160000.4.1 * emacs-debuginfo-30.2-160000.4.1 * emacs-x11-30.2-160000.4.1 * emacs-30.2-160000.4.1 * etags-30.2-160000.4.1 * emacs-x11-debuginfo-30.2-160000.4.1 * emacs-eln-30.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * emacs-info-30.2-160000.4.1 * emacs-el-30.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96442.html * https://bugzilla.suse.com/show_bug.cgi?id=1282390 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:43:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:43:28 -0000 Subject: SUSE-SU-2026:23948-1: important: Security update for ImageMagick Message-ID: <179087300842.12922.7801510540911616219@e7f4ad8d9866> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:23948-1 Release Date: 2026-09-29T16:58:54Z Rating: important References: * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1281913 Cross-References: * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 * CVE-2026-93590 CVSS scores: * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93590 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93590 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93590 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93590 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-93590: failure to perform policy checks during buffer allocation for image pixels in the UHDR encoder can lead to denial of service (bsc#1281913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1782 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1782 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libMagickCore-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-7.1.2.0-160000.16.1 * perl-PerlMagick-7.1.2.0-160000.16.1 * ImageMagick-extra-7.1.2.0-160000.16.1 * ImageMagick-debugsource-7.1.2.0-160000.16.1 * ImageMagick-extra-debuginfo-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.2.0-160000.16.1 * libMagick++-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * perl-PerlMagick-debuginfo-7.1.2.0-160000.16.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * ImageMagick-debuginfo-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ImageMagick-doc-7.1.2.0-160000.16.1 * ImageMagick-config-7-SUSE-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-secure-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-open-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-limited-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libMagickCore-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-7.1.2.0-160000.16.1 * perl-PerlMagick-7.1.2.0-160000.16.1 * ImageMagick-extra-7.1.2.0-160000.16.1 * ImageMagick-debugsource-7.1.2.0-160000.16.1 * ImageMagick-extra-debuginfo-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.2.0-160000.16.1 * libMagick++-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * perl-PerlMagick-debuginfo-7.1.2.0-160000.16.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * ImageMagick-debuginfo-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ImageMagick-doc-7.1.2.0-160000.16.1 * ImageMagick-config-7-SUSE-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-secure-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-open-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-limited-7.1.2.0-160000.16.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://www.suse.com/security/cve/CVE-2026-93590.html * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1281913 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:44:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:44:11 -0000 Subject: SUSE-RU-2026:23947-1: moderate: Recommended update for apache2 Message-ID: <179087305113.12922.15035015292348353934@e7f4ad8d9866> # Recommended update for apache2 Announcement ID: SUSE-RU-2026:23947-1 Release Date: 2026-09-29T16:58:53Z Rating: moderate References: * bsc#1252972 * bsc#1273203 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has two fixes can now be installed. ## Description: This update for apache2 fixes the following issues: Changes in apache2: * Rename the worker and event 'mod_cgi' entries to 'mod_cgid' in loadmodule.conf, as that is what the threaded MPMs ship. * Fix: apache2: loadmodule.conf still loads mod_cgi for the worker MPM (relates to bsc#1252972) - httpd -t fails (bsc#1273203) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1779 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1779 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * apache2-utils-debuginfo-2.4.66-160000.4.1 * apache2-prefork-2.4.66-160000.4.1 * apache2-debugsource-2.4.66-160000.4.1 * apache2-prefork-debuginfo-2.4.66-160000.4.1 * apache2-worker-debugsource-2.4.66-160000.4.1 * apache2-utils-2.4.66-160000.4.1 * apache2-2.4.66-160000.4.1 * apache2-event-2.4.66-160000.4.1 * apache2-event-debugsource-2.4.66-160000.4.1 * apache2-worker-debuginfo-2.4.66-160000.4.1 * apache2-event-debuginfo-2.4.66-160000.4.1 * apache2-prefork-debugsource-2.4.66-160000.4.1 * apache2-utils-debugsource-2.4.66-160000.4.1 * apache2-devel-2.4.66-160000.4.1 * apache2-debuginfo-2.4.66-160000.4.1 * apache2-worker-2.4.66-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * apache2-manual-2.4.66-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * apache2-utils-debuginfo-2.4.66-160000.4.1 * apache2-prefork-2.4.66-160000.4.1 * apache2-debugsource-2.4.66-160000.4.1 * apache2-prefork-debuginfo-2.4.66-160000.4.1 * apache2-worker-debugsource-2.4.66-160000.4.1 * apache2-utils-2.4.66-160000.4.1 * apache2-2.4.66-160000.4.1 * apache2-event-2.4.66-160000.4.1 * apache2-event-debugsource-2.4.66-160000.4.1 * apache2-worker-debuginfo-2.4.66-160000.4.1 * apache2-event-debuginfo-2.4.66-160000.4.1 * apache2-prefork-debugsource-2.4.66-160000.4.1 * apache2-utils-debugsource-2.4.66-160000.4.1 * apache2-devel-2.4.66-160000.4.1 * apache2-debuginfo-2.4.66-160000.4.1 * apache2-worker-2.4.66-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * apache2-manual-2.4.66-160000.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252972 * https://bugzilla.suse.com/show_bug.cgi?id=1273203 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:44:33 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:44:33 -0000 Subject: SUSE-SU-2026:23946-1: important: Security update for rpcbind Message-ID: <179087307339.12922.15132611700118291232@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:23946-1 Release Date: 2026-09-29T16:14:34Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1784 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1784 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:45:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:45:12 -0000 Subject: SUSE-SU-2026:23945-1: important: Security update for perl-Protocol-HTTP2 Message-ID: <179087311203.12922.12947179047938429676@e7f4ad8d9866> # Security update for perl-Protocol-HTTP2 Announcement ID: SUSE-SU-2026:23945-1 Release Date: 2026-09-29T16:11:16Z Rating: important References: * bsc#1279629 Cross-References: * CVE-2026-16028 CVSS scores: * CVE-2026-16028 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-16028 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-16028 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for perl-Protocol-HTTP2 fixes the following issue: * CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1781 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1781 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * perl-Protocol-HTTP2-1.10-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * perl-Protocol-HTTP2-1.10-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16028.html * https://bugzilla.suse.com/show_bug.cgi?id=1279629 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:45:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:45:58 -0000 Subject: SUSE-SU-2026:23944-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179087315808.12922.14409982889043675851@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23944-1 Release Date: 2026-09-29T16:11:16Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1780 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1780 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:46:38 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:46:38 -0000 Subject: SUSE-SU-2026:23943-1: moderate: Security update for php-composer2 Message-ID: <179087319821.12922.6819681263732246218@e7f4ad8d9866> # Security update for php-composer2 Announcement ID: SUSE-SU-2026:23943-1 Release Date: 2026-09-29T14:57:30Z Rating: moderate References: * bsc#1279898 * bsc#1280019 Cross-References: * CVE-2026-45793 * CVE-2026-59944 * CVE-2026-59947 CVSS scores: * CVE-2026-45793 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-45793 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59944 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59944 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59944 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59947 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59947 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59947 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1778 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1778 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php-composer2-2.8.9-160000.6.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php-composer2-2.8.9-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-45793.html * https://www.suse.com/security/cve/CVE-2026-59944.html * https://www.suse.com/security/cve/CVE-2026-59947.html * https://bugzilla.suse.com/show_bug.cgi?id=1279898 * https://bugzilla.suse.com/show_bug.cgi?id=1280019 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:47:23 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:47:23 -0000 Subject: SUSE-SU-2026:23942-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179087324364.12922.16627634602405390040@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23942-1 Release Date: 2026-09-29T14:57:30Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1777 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1777 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:48:10 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:48:10 -0000 Subject: SUSE-SU-2026:23941-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179087329019.12922.16930132334545839293@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23941-1 Release Date: 2026-09-29T14:38:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1776 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1776 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:48:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:48:55 -0000 Subject: SUSE-SU-2026:23940-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179087333530.12922.8273406471153950610@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23940-1 Release Date: 2026-09-29T14:20:34Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1775 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1775 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:49:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:49:41 -0000 Subject: SUSE-SU-2026:23939-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179087338121.12922.2456006182108463011@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23939-1 Release Date: 2026-09-29T14:20:34Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1774 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1774 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:50:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:50:26 -0000 Subject: SUSE-SU-2026:23938-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179087342617.12922.5445094832165789441@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23938-1 Release Date: 2026-09-29T13:12:03Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1772 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1772 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:51:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:51:12 -0000 Subject: SUSE-SU-2026:23937-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179087347247.12922.9220377439021936139@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23937-1 Release Date: 2026-09-29T13:09:45Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1773 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1773 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:51:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:51:58 -0000 Subject: SUSE-SU-2026:23936-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179087351815.12922.14115060742644020817@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23936-1 Release Date: 2026-09-29T12:48:41Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1771 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1771 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:52:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:52:35 -0000 Subject: SUSE-RU-2026:23935-1: important: Recommended update for scap-security-guide Message-ID: <179087355554.12922.11230143078482897341@e7f4ad8d9866> # Recommended update for scap-security-guide Announcement ID: SUSE-RU-2026:23935-1 Release Date: 2026-09-29T11:40:49Z Rating: important References: * jsc#ECO-3319 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: Changes in scap-security-guide: * updated to 0.1.82: (jsc#ECO-3319): * Add KylinSecServer6 OS baseline support * Add new product for Ubuntu 26.04 and a default profile * Create RHEL 10 STIG control file * Debian13 20260702 * Various updates for SLE 12/15/16 * Various updates for SLEM 5/6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1770 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1770 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * scap-security-guide-0.1.82-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * scap-security-guide-0.1.82-160000.1.1 ## References: * https://jira.suse.com/browse/ECO-3319 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:53:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:53:09 -0000 Subject: SUSE-SU-2026:23934-1: important: Security update for glibc Message-ID: <179087358998.12922.12587164229307997238@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23934-1 Release Date: 2026-09-29T11:23:34Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1769 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1769 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * glibc-locale-2.40-160000.7.1 * glibc-utils-2.40-160000.7.1 * glibc-extra-debuginfo-2.40-160000.7.1 * glibc-devel-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-utils-src-debugsource-2.40-160000.7.1 * glibc-profile-2.40-160000.7.1 * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-devel-static-2.40-160000.7.1 * glibc-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * glibc-utils-debuginfo-2.40-160000.7.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * glibc-html-2.40-160000.7.1 * glibc-i18ndata-2.40-160000.7.1 * glibc-lang-2.40-160000.7.1 * glibc-info-2.40-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.40-160000.7.1 * glibc-utils-2.40-160000.7.1 * glibc-extra-debuginfo-2.40-160000.7.1 * glibc-devel-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-utils-src-debugsource-2.40-160000.7.1 * glibc-profile-2.40-160000.7.1 * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-devel-static-2.40-160000.7.1 * glibc-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * glibc-utils-debuginfo-2.40-160000.7.1 * SUSE Linux Enterprise Server 16.0 (noarch) * glibc-html-2.40-160000.7.1 * glibc-i18ndata-2.40-160000.7.1 * glibc-lang-2.40-160000.7.1 * glibc-info-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:53:49 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:53:49 -0000 Subject: SUSE-RU-2026:23933-1: important: Recommended update for pcr-oracle Message-ID: <179087362977.12922.8650356904785724851@e7f4ad8d9866> # Recommended update for pcr-oracle Announcement ID: SUSE-RU-2026:23933-1 Release Date: 2026-09-29T09:48:12Z Rating: important References: * bsc#1279916 * bsc#1279917 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has two fixes can now be installed. ## Description: This update for pcr-oracle fixes the following issues: Changes in pcr-oracle: * Update to 0.6.6 * Add --nvindex option by * Remove tagged policy check on TPM Owner handle (bsc#1279916) * Introduce tpm2key-tool to parse and compare tpm2.0 key files (bsc#1279917) * Add load-test action for SRK detection (bsc#1279917) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1768 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1768 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * pcr-oracle-debuginfo-0.6.6-160000.1.1 * pcr-oracle-debugsource-0.6.6-160000.1.1 * pcr-oracle-0.6.6-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * pcr-oracle-debuginfo-0.6.6-160000.1.1 * pcr-oracle-debugsource-0.6.6-160000.1.1 * pcr-oracle-0.6.6-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279916 * https://bugzilla.suse.com/show_bug.cgi?id=1279917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:54:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:54:13 -0000 Subject: SUSE-RU-2026:23932-1: moderate: Recommended update for selinux-policy Message-ID: <179087365331.12922.17943052978275639888@e7f4ad8d9866> # Recommended update for selinux-policy Announcement ID: SUSE-RU-2026:23932-1 Release Date: 2026-09-29T08:34:32Z Rating: moderate References: * bsc#1279051 * bsc#1282303 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has two fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Changes in selinux-policy: Update to version 20250627+git405.e266baf49: * Add common criteria banner labels (bsc#1282303) * Fix corrupted formatting in files.if * Allow rsync to getattr pipes and sockes if rsync_export_all_ro is set (bsc#1279051) * Introduce files_getattr_non_auth_sockets * Introduce files_getattr_non_auth_pipes interface ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1767 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1767 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * selinux-policy-sandbox-20250627+git405.e266baf49-160000.1.1 * selinux-policy-targeted-20250627+git405.e266baf49-160000.1.1 * selinux-policy-doc-20250627+git405.e266baf49-160000.1.1 * selinux-policy-devel-20250627+git405.e266baf49-160000.1.1 * selinux-policy-20250627+git405.e266baf49-160000.1.1 * selinux-policy-minimum-20250627+git405.e266baf49-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * selinux-policy-sandbox-20250627+git405.e266baf49-160000.1.1 * selinux-policy-targeted-20250627+git405.e266baf49-160000.1.1 * selinux-policy-doc-20250627+git405.e266baf49-160000.1.1 * selinux-policy-devel-20250627+git405.e266baf49-160000.1.1 * selinux-policy-20250627+git405.e266baf49-160000.1.1 * selinux-policy-minimum-20250627+git405.e266baf49-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279051 * https://bugzilla.suse.com/show_bug.cgi?id=1282303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:54:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:54:35 -0000 Subject: SUSE-RU-2026:23931-1: moderate: Recommended update for libzypp, libsolv Message-ID: <179087367577.12922.14248155402303850141@e7f4ad8d9866> # Recommended update for libzypp, libsolv Announcement ID: SUSE-RU-2026:23931-1 Release Date: 2026-09-28T10:02:19Z Rating: moderate References: * bsc#1279541 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for libzypp, libsolv fixes the following issues: Changes in libzypp: version 17.38.16 (35): * This fix resolves issues in online migrations to SLES 16.1. (bsc#1279541) Changes in libsolv: bump version to 0.7.39: * improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] * fix possible segfault in the SUSE namespace dependency generation ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1766 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1766 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libsolv-devel-static-0.7.40-160000.1.1 * libzypp-devel-17.38.16-160000.1.1 * libzypp-17.38.16-160000.1.1 * libsolv-devel-debuginfo-0.7.40-160000.1.1 * perl-solv-debuginfo-0.7.40-160000.1.1 * libsolv-tools-debuginfo-0.7.40-160000.1.1 * perl-solv-0.7.40-160000.1.1 * libsolv-debuginfo-0.7.40-160000.1.1 * libsolv-tools-0.7.40-160000.1.1 * libsolv-devel-0.7.40-160000.1.1 * ruby-solv-0.7.40-160000.1.1 * libsolv-demo-0.7.40-160000.1.1 * libsolv1-debuginfo-0.7.40-160000.1.1 * libsolv-tools-base-0.7.40-160000.1.1 * libzypp-devel-doc-17.38.16-160000.1.1 * libsolv-tools-base-debuginfo-0.7.40-160000.1.1 * libsolv-demo-debuginfo-0.7.40-160000.1.1 * python313-solv-debuginfo-0.7.40-160000.1.1 * ruby-solv-debuginfo-0.7.40-160000.1.1 * libsolv-debugsource-0.7.40-160000.1.1 * libzypp-debugsource-17.38.16-160000.1.1 * python313-solv-0.7.40-160000.1.1 * libsolv1-0.7.40-160000.1.1 * libzypp-debuginfo-17.38.16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libsolv-devel-static-0.7.40-160000.1.1 * libzypp-devel-17.38.16-160000.1.1 * libzypp-17.38.16-160000.1.1 * libsolv-devel-debuginfo-0.7.40-160000.1.1 * perl-solv-debuginfo-0.7.40-160000.1.1 * libsolv-tools-debuginfo-0.7.40-160000.1.1 * perl-solv-0.7.40-160000.1.1 * libsolv-debuginfo-0.7.40-160000.1.1 * libsolv-tools-0.7.40-160000.1.1 * libsolv-devel-0.7.40-160000.1.1 * ruby-solv-0.7.40-160000.1.1 * libsolv-demo-0.7.40-160000.1.1 * libsolv1-debuginfo-0.7.40-160000.1.1 * libsolv-tools-base-0.7.40-160000.1.1 * libzypp-devel-doc-17.38.16-160000.1.1 * libsolv-tools-base-debuginfo-0.7.40-160000.1.1 * libsolv-demo-debuginfo-0.7.40-160000.1.1 * python313-solv-debuginfo-0.7.40-160000.1.1 * ruby-solv-debuginfo-0.7.40-160000.1.1 * libsolv-debugsource-0.7.40-160000.1.1 * libzypp-debugsource-17.38.16-160000.1.1 * python313-solv-0.7.40-160000.1.1 * libsolv1-0.7.40-160000.1.1 * libzypp-debuginfo-17.38.16-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279541 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:54:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:54:57 -0000 Subject: SUSE-RU-2026:23930-1: moderate: Recommended update for google-guest-configs Message-ID: <179087369754.12922.15287811572814119689@e7f4ad8d9866> # Recommended update for google-guest-configs Announcement ID: SUSE-RU-2026:23930-1 Release Date: 2026-09-25T15:18:22Z Rating: moderate References: * bsc#1281946 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for google-guest-configs fixes the following issues: Changes in google-guest-configs: * Update to version 20260918.01 (bsc#1281946) * Update SR-IOV udev rule for idpf network devices. * nic-naming: Fix IDPF VF device rename * set_multiqueue: Stop setting XPS at all on a4x/a5x * set_multiqueue: Fix awk parsing for idpf ring len * set_multiqueue: Set IDPF ring length to 4096 by default * nic-naming: Improve handling of BM IRDMA devices ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1765 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1765 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * google-guest-configs-20260918.01-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * google-guest-configs-20260918.01-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281946 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:55:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 16:55:31 -0000 Subject: SUSE-SU-2026:23929-1: important: Security update for glibc Message-ID: <179087373148.12922.4938138780107054377@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23929-1 Release Date: 2026-09-29T12:22:22Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1769 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 20:30:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 20:30:26 -0000 Subject: SUSE-SU-2026:4411-1: moderate: Security update for python Message-ID: <179088662624.13136.250229880406974866@32be4de442c6> # Security update for python Announcement ID: SUSE-SU-2026:4411-1 Release Date: 2026-10-01T15:38:59Z Rating: moderate References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 Cross-References: * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-6879 * CVE-2026-9669 CVSS scores: * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for python fixes the following issues: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: * Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4411 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python-xml-debuginfo-2.7.18-150000.133.1 * python-gdbm-debuginfo-2.7.18-150000.133.1 * libpython2_7-1_0-2.7.18-150000.133.1 * python-debuginfo-2.7.18-150000.133.1 * python-xml-2.7.18-150000.133.1 * python-base-debugsource-2.7.18-150000.133.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.133.1 * python-debugsource-2.7.18-150000.133.1 * python-curses-2.7.18-150000.133.1 * python-base-debuginfo-2.7.18-150000.133.1 * python-gdbm-2.7.18-150000.133.1 * python-curses-debuginfo-2.7.18-150000.133.1 * python-base-2.7.18-150000.133.1 * python-2.7.18-150000.133.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 20:31:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 01 Oct 2026 20:31:09 -0000 Subject: SUSE-SU-2026:4410-1: important: Security update for libX11 Message-ID: <179088666930.13136.12902961502444212539@32be4de442c6> # Security update for libX11 Announcement ID: SUSE-SU-2026:4410-1 Release Date: 2026-10-01T14:41:50Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4410 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4410 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libX11-debugsource-1.6.2-12.41.1 * libX11-xcb1-debuginfo-1.6.2-12.41.1 * libX11-6-1.6.2-12.41.1 * libX11-xcb1-1.6.2-12.41.1 * libX11-6-debuginfo-1.6.2-12.41.1 * libX11-devel-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libX11-6-debuginfo-32bit-1.6.2-12.41.1 * libX11-xcb1-debuginfo-32bit-1.6.2-12.41.1 * libX11-6-32bit-1.6.2-12.41.1 * libX11-xcb1-32bit-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * libX11-data-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libX11-6-debuginfo-32bit-1.6.2-12.41.1 * libX11-debugsource-1.6.2-12.41.1 * libX11-devel-1.6.2-12.41.1 * libX11-xcb1-debuginfo-32bit-1.6.2-12.41.1 * libX11-xcb1-debuginfo-1.6.2-12.41.1 * libX11-6-32bit-1.6.2-12.41.1 * libX11-xcb1-1.6.2-12.41.1 * libX11-6-debuginfo-1.6.2-12.41.1 * libX11-6-1.6.2-12.41.1 * libX11-xcb1-32bit-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * libX11-data-1.6.2-12.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:30:48 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 12:30:48 -0000 Subject: SUSE-SU-2026:4414-1: important: Security update for openssl-3 Message-ID: <179094424804.14515.15773206196278194668@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4414-1 Release Date: 2026-10-02T07:37:36Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 * bsc#1281125 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 11 vulnerabilities and has one security fix can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). Other non-security fixes: \- Add a conflicts with previous crypto-policies versions (bsc#1281125) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4414 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-150700.5.53.2 * libopenssl3-3.5.0-150700.5.53.2 * openssl-3-debugsource-3.5.0-150700.5.53.2 * libopenssl-3-devel-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-debuginfo-3.5.0-150700.5.53.2 * openssl-3-debuginfo-3.5.0-150700.5.53.2 * openssl-3-3.5.0-150700.5.53.2 * Basesystem Module 15-SP7 (x86_64) * libopenssl3-32bit-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-32bit-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-32bit-debuginfo-3.5.0-150700.5.53.2 * libopenssl3-32bit-debuginfo-3.5.0-150700.5.53.2 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 * https://bugzilla.suse.com/show_bug.cgi?id=1281125 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:31:33 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 12:31:33 -0000 Subject: SUSE-SU-2026:4413-1: important: Security update for openssl-3 Message-ID: <179094429367.14515.6110807820304388665@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4413-1 Release Date: 2026-10-02T07:37:18Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4413 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4413 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4413 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4413 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4413 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4413 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4413 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4413 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4413 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (x86_64) * libopenssl3-32bit-debuginfo-3.0.8-150400.4.101.1 * libopenssl-3-devel-32bit-3.0.8-150400.4.101.1 * libopenssl3-32bit-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150400.4.101.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-64bit-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:32:35 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 12:32:35 -0000 Subject: SUSE-SU-2026:4412-1: important: Security update for openssl-3 Message-ID: <179094435599.14515.11051234283617774216@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4412-1 Release Date: 2026-10-02T07:36:26Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4412 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4412 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4412 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4412 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4412 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-3.0.8-150500.5.80.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.80.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150500.5.80.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.80.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.80.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:30:50 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 16:30:50 -0000 Subject: SUSE-SU-2026:4415-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) Message-ID: <179095865042.14856.687538060426806328@32be4de442c6> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4415-1 Release Date: 2026-10-02T08:33:43Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4415 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-SLE15-SP7-RT_Update_13-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-debuginfo-8-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:31:28 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 16:31:28 -0000 Subject: SUSE-SU-2026:4419-1: important: Security update for openssl-3 Message-ID: <179095868858.14856.9924552341149978083@32be4de442c6> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4419-1 Release Date: 2026-10-02T10:23:35Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4419 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4419 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4419 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-devel-32bit-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-64bit-3.1.4-150600.5.67.1 * libopenssl3-64bit-3.1.4-150600.5.67.1 * libopenssl-3-devel-64bit-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-64bit-debuginfo-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (noarch) * openssl-3-doc-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:32:26 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 16:32:26 -0000 Subject: SUSE-SU-2026:4418-1: important: Security update for openssl-3-livepatches Message-ID: <179095874604.14856.2590972392795997452@32be4de442c6> # Security update for openssl-3-livepatches Announcement ID: SUSE-SU-2026:4418-1 Release Date: 2026-10-02T10:23:18Z Rating: important References: * bsc#1280587 * bsc#1282798 Cross-References: * CVE-2026-84782 CVSS scores: * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-3-livepatches fixes the following issue: * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4418 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4418 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * openssl-3-livepatches-0.7-150600.13.22.1 * openssl-3-livepatches-debuginfo-0.7-150600.13.22.1 * openssl-3-livepatches-debugsource-0.7-150600.13.22.1 * openSUSE Leap 15.6 (x86_64) * openssl-3-livepatches-0.7-150600.13.22.1 * openssl-3-livepatches-debuginfo-0.7-150600.13.22.1 * openssl-3-livepatches-debugsource-0.7-150600.13.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1282798 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:33:23 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 16:33:23 -0000 Subject: SUSE-SU-2026:4417-1: important: Security update for helm Message-ID: <179095880302.14856.6144213319164243827@32be4de442c6> # Security update for helm Announcement ID: SUSE-SU-2026:4417-1 Release Date: 2026-10-02T09:20:20Z Rating: important References: * bsc#1281104 * bsc#1281112 Cross-References: * CVE-2026-85731 * CVE-2026-85732 CVSS scores: * CVE-2026-85731 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-85731 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-85731 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (bsc#1281104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). Changes for helm: * Update to version 3.22.0: * chore(deps): bump the k8s-io group across 1 directory with 6 updates * bump version to 3.22 (#32606) * fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) * chore(deps): bump the k8s-io group with 7 updates (#32573) * chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) * chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) * chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) * [dev-v3 backport] deps: bump google.golang.org/grpc at v1.82.1 for GO-2026-6061 (#32536) * fix: bump go.opentelemetry.io/otel at v1.44.0 for GO-2026-5158 (#32535) * chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 * fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 * chore(deps): bump the k8s-io group with 7 updates * chore(deps): bump github/codeql-action/upload-sarif (#32449) * chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) * chore(deps): bump github/codeql-action/upload-sarif (#32382) * ci: auto-label PRs targeting dev-v3 (#32340) * chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) * chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) * chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) * chore(deps): bump github/codeql-action/upload-sarif (#32360) * chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) * chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) * chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) * chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) * chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) * chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) * chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) * fix(engine): prevent Files.Lines panic on empty file * fix: drop containerd v1 dep to resolve govulncheck CVEs * chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 * chore(deps): bump github.com/cyphar/filepath-securejoin * chore(deps): bump the k8s-io group with 2 updates * chore(deps): bump the k8s-io group across 1 directory with 2 updates * fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 * chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 * chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 * chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 * chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 * ci: bump golangci-lint to v2.11.3 for go 1.26 * chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 * chore(deps): bump github.com/distribution/distribution/v3 * chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 * chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 * chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 * chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 * fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 * chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 * chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 * [v3] Bump to version v3.21 (#32103) * [v3 backport] Fix rollback for missing resources * fix(action): avoid nil REST client getter panic when installing CRDs ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4417 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4417 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4417 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4417 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4417 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4417 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4417 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4417 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4417 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4417 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4417 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4417 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4417 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * Containers Module 15-SP7 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Package Hub 15 15-SP7 (noarch) * helm-fish-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85731.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281104 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:34:03 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 16:34:03 -0000 Subject: SUSE-SU-2026:4416-1: important: Security update for python-anyio Message-ID: <179095884302.14856.5901805552151283509@32be4de442c6> # Security update for python-anyio Announcement ID: SUSE-SU-2026:4416-1 Release Date: 2026-10-02T09:18:10Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4416 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4416 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4416 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4416 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4416 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4416 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4416 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4416 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4416 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4416 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4416 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4416 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4416 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4416 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4416 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * openSUSE Leap 15.4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP6 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Python 3 Module 15-SP7 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:30:17 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 20:30:17 -0000 Subject: SUSE-SU-2026:4434-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097301728.29359.16565444877314587913@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4434-1 Release Date: 2026-10-02T15:04:03Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4434 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_75-rt-debuginfo-2-150700.2.1 * kernel-livepatch-6_4_0-150700_7_75-rt-2-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_20-debugsource-2-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:31:10 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 20:31:10 -0000 Subject: SUSE-SU-2026:4433-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097307028.29359.5521370295673881203@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4433-1 Release Date: 2026-10-02T15:03:58Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4433 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_72-rt-debuginfo-3-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_19-debugsource-3-150700.2.1 * kernel-livepatch-6_4_0-150700_7_72-rt-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:32:08 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 20:32:08 -0000 Subject: SUSE-SU-2026:4432-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097312805.29359.15834319956146078926@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4432-1 Release Date: 2026-10-02T14:33:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4432 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4431 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_67-rt-debuginfo-3-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-5-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_18-debugsource-3-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_17-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_7_67-rt-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:33:14 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 02 Oct 2026 20:33:14 -0000 Subject: SUSE-SU-2026:4426-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097319464.29359.1080428365481044643@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4426-1 Release Date: 2026-10-02T13:34:08Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4426 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4427 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4422 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4429 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4423 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4420 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4421 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4425 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4430 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4428 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4424 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_51-rt-debuginfo-7-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_15-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-debuginfo-10-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_12-debugsource-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-debuginfo-12-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-debuginfo-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_11-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_4-debugsource-18-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_8-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-debuginfo-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_10-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-18-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-10-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_6-debugsource-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-12-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_9-debugsource-12-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_14-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-debuginfo-18-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:31:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:31:06 -0000 Subject: SUSE-SU-2026:4440-1: important: Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Message-ID: <179118906675.18075.7867107430345899102@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4440-1 Release Date: 2026-10-04T13:03:56Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4440 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_290-default-14-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:32:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:32:27 -0000 Subject: SUSE-RU-2026:23992-1: important: Recommended update for s390-tools Message-ID: <179118914757.18075.10178408112974463847@e7f4ad8d9866> # Recommended update for s390-tools Announcement ID: SUSE-RU-2026:23992-1 Release Date: 2026-10-01T09:39:27Z Rating: important References: * bsc#1273204 * bsc#1273205 * bsc#1273206 * bsc#1273207 * bsc#1275476 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has five fixes can now be installed. ## Description: This update for s390-tools fixes the following issues: Changes in s390-tools: * Upgrade to version 2.44.1 (bsc#1273204, bsc#1273205, bsc#1273206, bsc#1273207, bsc#1275476): For Linux kernel version: 7.2 * Changes of existing tools: * cpumf/lshwc: Add -c as short option for --counters * cpumf/lspai: Handle CPU hotplug gracefully * dbginfo.sh: Change grep for OS name * dbginfo.sh: Change tar generation via temp file * dbginfo.sh: Correct dump counter * dbginfo.sh: Detect the openCryptoki STDLL directory at runtime * dbginfo.sh: Redirect stderr on command existence checks * dbginfo.sh: Replace deprecated backtick command substitution * dbginfo.sh: Secure the directory input variable * zipl: Detect and display partition table type for disk and device * Bug Fixes: * cmsfs-fuse: Fix out-of-bounds access when reading variable-length files * cpumf/lscpumf: Fix exit status and error reporting * cpumf/lshwc: Fix --allcpu to --all in man page * cpumf/lspai: Add input validation for interval parameter * cpumf/lspai: Fix --allcpu to --all in man page * cpumf/lspai: Fix integer overflow in file descriptor calculation * cpumf/lspai: Fix output formatting with minimum indent * dasdview: Fix buffer overflow in dasdview_read_vtoc() * dumpconf: Harden locking during delayed activation to prevent symlink attacks * fdasd: Fix potential buffer overflow in fdasd_change_part_type() * ipl_tools: Fix buffer overflow vulnerabilities in chreipl and is_lpar() * ip_watcher: Use mktemp for cleanup files to avoid collisions * libkmipclient: Fix NULL pointer dereference in kmip_v2_attr_from_v1_attr() * libkmipclient: Fix heap buffer overflow * libutil/util_lockfile: Prevent buffer overflow in lockfile handling * libzds: Add bounds checking and validate used_bytes in PDS directory parsing * pvattest: Write attestation request private key (arpk) with 0600 permissions * pvebc: Fix executable permission on sel-ebc-modules.conf * pvics: Fix incorrect exit values for --version and --help options * pvsecret: Write secret with 0600 permissions * sclpdbf: Harden against invalid trace data * vmur: Fix buffer over-read in get_minor() * zdump/dfi_s390: Add a check for zlib entry size in the dump header * zdump/dfi_s390: Fix out-of-bounds upon dump entry decompression * zdump/dfo_elf: Fix 32-bit truncation in ELF header allocation size * zdump: Reject multi-volume dumps with out-of-range vol_cnt * ziomon/ziomon_zfcpdd: Validate message lengths before processing * ziomon/ziorep_config: Replace unsafe open() and regex match with safer idioms * ziomon: Validate message layout and aggregate message lengths before processing * zipl: Fix memory leak in free_bootloader() * zipl: Replace popen(3) with safer invocation for targetbase scripts and ngdump * zkey-ekmfweb: Fix insecure default: TLS host name verification now enabled by default * zkey-kmip: Fix insecure default: TLS host name verification now enabled by default * zkey: Fix memory leaks when generating keys or reenciphering integrity volumes * zkey: Harden 'zkey kms unbind' command against symlink traversal * zkey: Harden KMS config directory handling against symlink attacks * zkey: Harden KMS plugin file handling against symlink attacks * zkey: Install initrd integration with the configured plugin directory * Full Changelog: v2.44.0...v2.44.1: https://github.com/ibm-s390-linux/s390-tools/compare/v2.44.0...v2.44.1 * Removed obsolete patches for Security vulnerabilities for zkey and friends * zkey: Harden KMS config directory handling - Commit `0eef784` * zkey: Harden 'zkey kms unbind' command - Commit `1b90d15` * zkey/ekmfweb, zkey/kmip: Harden KMS plugin file handling - Commit `bc81c32` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1799 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1799 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * s390-tools-2.44.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (s390x x86_64) * s390-tools-2.44.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (s390x) * osasnmpd-2.44.1-160000.1.1 * libkmipclient1-2.44.1-160000.1.1 * libekmfweb1-debuginfo-2.44.1-160000.1.1 * s390-tools-hmcdrvfs-debuginfo-2.44.1-160000.1.1 * s390-tools-hmcdrvfs-2.44.1-160000.1.1 * s390-tools-debugsource-2.44.1-160000.1.1 * s390-tools-zdsfs-2.44.1-160000.1.1 * libkmipclient1-debuginfo-2.44.1-160000.1.1 * osasnmpd-debuginfo-2.44.1-160000.1.1 * s390-tools-zdsfs-debuginfo-2.44.1-160000.1.1 * libekmfweb1-2.44.1-160000.1.1 * s390-tools-debuginfo-2.44.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * s390-tools-chreipl-fcp-mpath-2.44.1-160000.1.1 * s390-tools-genprotimg-data-2.44.1-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273204 * https://bugzilla.suse.com/show_bug.cgi?id=1273205 * https://bugzilla.suse.com/show_bug.cgi?id=1273206 * https://bugzilla.suse.com/show_bug.cgi?id=1273207 * https://bugzilla.suse.com/show_bug.cgi?id=1275476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:33:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:33:27 -0000 Subject: SUSE-SU-2026:23991-1: moderate: Security update for wget Message-ID: <179118920711.18075.13866382847675231546@e7f4ad8d9866> # Security update for wget Announcement ID: SUSE-SU-2026:23991-1 Release Date: 2026-10-01T12:43:37Z Rating: moderate References: * bsc#1276962 Cross-References: * CVE-2026-16599 CVSS scores: * CVE-2026-16599 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-16599 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-16599 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issue: * CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1802 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1802 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * wget-lang-1.25.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * wget-lang-1.25.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16599.html * https://bugzilla.suse.com/show_bug.cgi?id=1276962 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:34:26 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:34:26 -0000 Subject: SUSE-SU-2026:23990-1: moderate: Security update for distribution Message-ID: <179118926630.18075.8806456544125139313@e7f4ad8d9866> # Security update for distribution Announcement ID: SUSE-SU-2026:23990-1 Release Date: 2026-10-01T12:14:32Z Rating: moderate References: * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-81871 * CVE-2026-81872 CVSS scores: * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for distribution fixes the following issues: * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1801 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1801 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * distribution-registry-3.1.1-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:35:22 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:35:22 -0000 Subject: SUSE-SU-2026:23989-1: moderate: Security update for jline3 Message-ID: <179118932223.18075.5183802292644340940@e7f4ad8d9866> # Security update for jline3 Announcement ID: SUSE-SU-2026:23989-1 Release Date: 2026-10-01T12:14:32Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for jline3 fixes the following issue: Update to upstream version 3.30.17: * Security Fixes * Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) * Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) * Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3) * TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6) * Bug Fixes * strip control characters from file names in posix builtins * bound !# history expansion to prevent exponential blowup * verify server host keys in the ssh client builtin * address remaining security vulnerabilities reported by AFINE/CERT.PL * backport security fixes from master * backport security fixes to 3.x (path traversal + DSR plain text) * strip control characters from ssh banner and prompts * Dependency updates * bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.10.2 * bump slf4j.version from 2.0.18 to 2.0.19 * bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 * bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 * bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.2 * bump actions/setup-java from 5 to 6.0.0 * bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.3.4.1 * bump com.mycila:license-maven-plugin from 5.0.0 to 5.1.2 * bump org.easymock:easymock from 5.6.0 to 5.7.0 * bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2 * bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4 * bump org.apache.maven:apache-maven from 4.0.0-rc-3 to 4.0.0-rc-6 * bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to 0.9.10 * bump com.palantir.javaformat:palantir-java-format from 2.96.0 to 2.97.0 * bump release-drafter/release-drafter from 7.6.0 to 7.7.0 * bump groovy.version from 4.0.32 to 4.0.33 * bump release-drafter/release-drafter from 7 to 7.6.0 * bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 * Update to upstream version 3.30.16 * bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements. * Breaking Changes * SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it * reject overlong hex components in OSC color responses * strip OSC and other escape sequences in ansiAppend * search multiple lib paths for versioned libutil.so * use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF * check closed flag in PtyInputStream to prevent hang on empty input * confine ConfigurationPath lookups to the config directory * disable Read File command in nano restricted mode * drain buffered data before EOF in NonBlockingPumpInputStream * look up openpty in libc.so.6 for glibc 2.34+ * guard styleMatches and highlighter rules against ReDoS * backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) * propagate EOF in PtyInputStream to avoid infinite loop * bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 * bump actions/setup-node from 6 to 7 * bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 * bump sshd.version from 2.18.0 to 2.19.0 * bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 * bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 * bump com.diffplug.spotless:spotless-maven-plugin ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1800 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1800 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * jline3-3.30.17-160000.1.1 * jline3-debugsource-3.30.17-160000.1.1 * jline3-native-debuginfo-3.30.17-160000.1.1 * jline3-native-3.30.17-160000.1.1 * jline3-jansi-3.30.17-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * jline3-terminal-jni-3.30.17-160000.1.1 * jline3-terminal-jna-3.30.17-160000.1.1 * jline3-terminal-3.30.17-160000.1.1 * jline3-reader-3.30.17-160000.1.1 * jline3-console-ui-3.30.17-160000.1.1 * jline3-console-3.30.17-160000.1.1 * jline3-curses-3.30.17-160000.1.1 * jline3-javadoc-3.30.17-160000.1.1 * jline3-jansi-core-3.30.17-160000.1.1 * jline3-builtins-3.30.17-160000.1.1 * jline3-style-3.30.17-160000.1.1 * jline3-terminal-jansi-3.30.17-160000.1.1 * jline3-remote-telnet-3.30.17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * jline3-3.30.17-160000.1.1 * jline3-debugsource-3.30.17-160000.1.1 * jline3-native-debuginfo-3.30.17-160000.1.1 * jline3-native-3.30.17-160000.1.1 * jline3-jansi-3.30.17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * jline3-terminal-jni-3.30.17-160000.1.1 * jline3-terminal-jna-3.30.17-160000.1.1 * jline3-terminal-3.30.17-160000.1.1 * jline3-reader-3.30.17-160000.1.1 * jline3-console-ui-3.30.17-160000.1.1 * jline3-console-3.30.17-160000.1.1 * jline3-curses-3.30.17-160000.1.1 * jline3-javadoc-3.30.17-160000.1.1 * jline3-jansi-core-3.30.17-160000.1.1 * jline3-builtins-3.30.17-160000.1.1 * jline3-style-3.30.17-160000.1.1 * jline3-terminal-jansi-3.30.17-160000.1.1 * jline3-remote-telnet-3.30.17-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:36:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:36:21 -0000 Subject: SUSE-RU-2026:23988-1: moderate: Recommended update for raspberrypi-firmware Message-ID: <179118938159.18075.16169911147990670194@e7f4ad8d9866> # Recommended update for raspberrypi-firmware Announcement ID: SUSE-RU-2026:23988-1 Release Date: 2026-10-01T09:38:21Z Rating: moderate References: * bsc#1215134 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for raspberrypi-firmware fixes the following issues: Changes in raspberrypi-firmware: * Prevent -52 error message during wifi scan (bsc#1215134) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1798 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1798 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * raspberrypi-firmware-extra-pi4-2023.04.25-160000.3.1 * raspberrypi-firmware-config-2023.04.25-160000.3.1 * raspberrypi-firmware-config-camera-2023.04.25-160000.3.1 * raspberrypi-firmware-extra-2023.04.25-160000.3.1 * raspberrypi-firmware-2023.04.25-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * raspberrypi-firmware-extra-pi4-2023.04.25-160000.3.1 * raspberrypi-firmware-config-2023.04.25-160000.3.1 * raspberrypi-firmware-config-camera-2023.04.25-160000.3.1 * raspberrypi-firmware-extra-2023.04.25-160000.3.1 * raspberrypi-firmware-2023.04.25-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215134 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:37:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:37:06 -0000 Subject: SUSE-RU-2026:23987-1: moderate: Recommended update for dracut Message-ID: <179118942619.18075.12330478425199457575@e7f4ad8d9866> # Recommended update for dracut Announcement ID: SUSE-RU-2026:23987-1 Release Date: 2026-10-01T09:36:59Z Rating: moderate References: * jsc#PED-16110 * jsc#PED-16702 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains two features can now be installed. ## Description: This update for dracut fixes the following issues: Changes in dracut: * Support NTP configuration for airgapped scenarios (jsc#PED-16110) * Allow to easily apply CC compliant configuration when deploying SLES 16.0 (jsc#PED-16702) * feat(chrony): introducing the chrony module * feat(network-manager): write info about NTP servers in dhcpopts file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1797 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1797 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * dracut-059+suse.732.g39fc900f5-160000.1.1 * dracut-debugsource-059+suse.732.g39fc900f5-160000.1.1 * dracut-ima-059+suse.732.g39fc900f5-160000.1.1 * dracut-extra-059+suse.732.g39fc900f5-160000.1.1 * dracut-tools-059+suse.732.g39fc900f5-160000.1.1 * dracut-fips-059+suse.732.g39fc900f5-160000.1.1 * dracut-debuginfo-059+suse.732.g39fc900f5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * dracut-059+suse.732.g39fc900f5-160000.1.1 * dracut-debugsource-059+suse.732.g39fc900f5-160000.1.1 * dracut-ima-059+suse.732.g39fc900f5-160000.1.1 * dracut-extra-059+suse.732.g39fc900f5-160000.1.1 * dracut-tools-059+suse.732.g39fc900f5-160000.1.1 * dracut-fips-059+suse.732.g39fc900f5-160000.1.1 * dracut-debuginfo-059+suse.732.g39fc900f5-160000.1.1 ## References: * https://jira.suse.com/browse/PED-16110 * https://jira.suse.com/browse/PED-16702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:37:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:37:49 -0000 Subject: SUSE-SU-2026:23986-1: important: Security update for valkey Message-ID: <179118946941.18075.7613592046266885408@e7f4ad8d9866> # Security update for valkey Announcement ID: SUSE-SU-2026:23986-1 Release Date: 2026-09-30T20:24:10Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1796 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1796 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * valkey-debuginfo-8.0.10-160000.2.1 * valkey-debugsource-8.0.10-160000.2.1 * valkey-devel-8.0.10-160000.2.1 * valkey-8.0.10-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * valkey-compat-redis-8.0.10-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * valkey-debuginfo-8.0.10-160000.2.1 * valkey-debugsource-8.0.10-160000.2.1 * valkey-devel-8.0.10-160000.2.1 * valkey-8.0.10-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * valkey-compat-redis-8.0.10-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:39:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:39:17 -0000 Subject: SUSE-SU-2026:23985-1: critical: Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 Message-ID: <179118955774.18075.12134128493584447924@e7f4ad8d9866> # Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 Announcement ID: SUSE-SU-2026:23985-1 Release Date: 2026-09-30T17:58:26Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 15 vulnerabilities and has one fix can now be installed. ## Description: This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with (bsc#1282581). Non security issue fixed: * package libtcnative-1-0-devel houses link to libtcnative-1.so instead of package libtcnative-1-0 (bsc#622430). Changes for libtcnative-1-0: * Update to 1.3.9 * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for libtcnative-2-0: * Upgrade to version 2.0.16 * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Update: Remove support for Windows build on IA64 architecture (Itanium) * Update: Make x64 the default architecture for Windows build * Update: Make Windows 10 / 11 the default target version for Windows builds * Fix: Fix a potential crash when negotiating ALPN * Fix: If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Fix: Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) Changes for tomcat10: * Update to Tomcat 10.1.60 * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat11: * Update to Tomcat 11.0.26 * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: parsing of client certificates that specify more than one OCSP responder for configurations that use OpenSSL-FFM. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat: * Update to Tomcat 9.0.122 * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1795 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1795 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libtcnative-2-0-debugsource-2.0.16-160000.1.1 * libtcnative-1-0-1.3.9-160000.1.1 * libtcnative-2-0-2.0.16-160000.1.1 * libtcnative-1-0-debugsource-1.3.9-160000.1.1 * libtcnative-2-0-debuginfo-2.0.16-160000.1.1 * libtcnative-1-0-debuginfo-1.3.9-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * tomcat-javadoc-9.0.122-160000.1.1 * tomcat10-admin-webapps-10.1.60-160000.1.1 * tomcat-embed-9.0.122-160000.1.1 * tomcat10-doc-10.1.60-160000.1.1 * tomcat11-jsvc-11.0.26-160000.1.1 * tomcat11-doc-11.0.26-160000.1.1 * tomcat10-docs-webapp-10.1.60-160000.1.1 * tomcat10-lib-10.1.60-160000.1.1 * tomcat10-servlet-6_0-api-10.1.60-160000.1.1 * tomcat-servlet-4_0-api-9.0.122-160000.1.1 * tomcat-9.0.122-160000.1.1 * tomcat-jsp-2_3-api-9.0.122-160000.1.1 * tomcat11-admin-webapps-11.0.26-160000.1.1 * tomcat11-embed-11.0.26-160000.1.1 * tomcat11-jsp-4_0-api-11.0.26-160000.1.1 * tomcat11-el-6_0-api-11.0.26-160000.1.1 * tomcat11-webapps-11.0.26-160000.1.1 * tomcat-docs-webapp-9.0.122-160000.1.1 * tomcat-admin-webapps-9.0.122-160000.1.1 * tomcat-webapps-9.0.122-160000.1.1 * tomcat-el-3_0-api-9.0.122-160000.1.1 * tomcat10-jsvc-10.1.60-160000.1.1 * tomcat-jsvc-9.0.122-160000.1.1 * tomcat10-el-5_0-api-10.1.60-160000.1.1 * tomcat10-webapps-10.1.60-160000.1.1 * tomcat10-10.1.60-160000.1.1 * tomcat-lib-9.0.122-160000.1.1 * tomcat11-lib-11.0.26-160000.1.1 * tomcat11-servlet-6_1-api-11.0.26-160000.1.1 * tomcat10-embed-10.1.60-160000.1.1 * tomcat10-jsp-3_1-api-10.1.60-160000.1.1 * tomcat11-docs-webapp-11.0.26-160000.1.1 * tomcat11-11.0.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-debugsource-2.0.16-160000.1.1 * libtcnative-1-0-1.3.9-160000.1.1 * libtcnative-2-0-2.0.16-160000.1.1 * libtcnative-1-0-debugsource-1.3.9-160000.1.1 * libtcnative-2-0-debuginfo-2.0.16-160000.1.1 * libtcnative-1-0-debuginfo-1.3.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * tomcat-javadoc-9.0.122-160000.1.1 * tomcat10-admin-webapps-10.1.60-160000.1.1 * tomcat-embed-9.0.122-160000.1.1 * tomcat10-doc-10.1.60-160000.1.1 * tomcat11-jsvc-11.0.26-160000.1.1 * tomcat11-doc-11.0.26-160000.1.1 * tomcat10-docs-webapp-10.1.60-160000.1.1 * tomcat10-lib-10.1.60-160000.1.1 * tomcat10-servlet-6_0-api-10.1.60-160000.1.1 * tomcat-servlet-4_0-api-9.0.122-160000.1.1 * tomcat-9.0.122-160000.1.1 * tomcat-jsp-2_3-api-9.0.122-160000.1.1 * tomcat11-admin-webapps-11.0.26-160000.1.1 * tomcat11-embed-11.0.26-160000.1.1 * tomcat11-jsp-4_0-api-11.0.26-160000.1.1 * tomcat11-el-6_0-api-11.0.26-160000.1.1 * tomcat11-webapps-11.0.26-160000.1.1 * tomcat-docs-webapp-9.0.122-160000.1.1 * tomcat-admin-webapps-9.0.122-160000.1.1 * tomcat-webapps-9.0.122-160000.1.1 * tomcat-el-3_0-api-9.0.122-160000.1.1 * tomcat10-jsvc-10.1.60-160000.1.1 * tomcat-jsvc-9.0.122-160000.1.1 * tomcat10-el-5_0-api-10.1.60-160000.1.1 * tomcat10-webapps-10.1.60-160000.1.1 * tomcat10-10.1.60-160000.1.1 * tomcat-lib-9.0.122-160000.1.1 * tomcat11-lib-11.0.26-160000.1.1 * tomcat11-servlet-6_1-api-11.0.26-160000.1.1 * tomcat10-embed-10.1.60-160000.1.1 * tomcat10-jsp-3_1-api-10.1.60-160000.1.1 * tomcat11-docs-webapp-11.0.26-160000.1.1 * tomcat11-11.0.26-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:40:43 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:40:43 -0000 Subject: SUSE-SU-2026:23984-1: important: Security update for helm Message-ID: <179118964352.18075.10694647058733830223@e7f4ad8d9866> # Security update for helm Announcement ID: SUSE-SU-2026:23984-1 Release Date: 2026-09-30T17:58:26Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-78662 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426). * CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1794 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1794 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.1.1 * helm-fish-completion-4.3.0-160000.1.1 * helm-bash-completion-4.3.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.1.1 * helm-fish-completion-4.3.0-160000.1.1 * helm-bash-completion-4.3.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:42:07 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:42:07 -0000 Subject: SUSE-SU-2026:23983-1: important: Security update for sccache Message-ID: <179118972750.18075.165549994658647920@e7f4ad8d9866> # Security update for sccache Announcement ID: SUSE-SU-2026:23983-1 Release Date: 2026-09-30T17:58:26Z Rating: important References: * bsc#1243868 * bsc#1257923 * bsc#1270206 * bsc#1270512 * bsc#1270559 * bsc#1270693 * bsc#1270736 * bsc#1270869 * bsc#1270938 * bsc#1270948 * bsc#1273881 * bsc#1273884 * bsc#1273886 * bsc#1273888 * bsc#1274146 * bsc#1282211 Cross-References: * CVE-2024-12224 * CVE-2026-25541 * CVE-2026-25727 * CVE-2026-41676 * CVE-2026-41677 * CVE-2026-41678 * CVE-2026-41681 * CVE-2026-41898 * CVE-2026-42327 * CVE-2026-44662 * CVE-2026-45784 * CVE-2026-66746 * CVE-2026-66754 * CVE-2026-67181 * CVE-2026-67182 * CVE-2026-93599 * CVE-2026-93600 * CVE-2026-93601 * CVE-2026-93602 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-41676 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-41676 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-41676 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41676 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41677 ( SUSE ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U * CVE-2026-41677 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41677 ( NVD ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41677 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41678 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-41678 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-41678 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41678 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-41681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-41681 ( NVD ): 8.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41681 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41898 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41898 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-41898 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41898 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-42327 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42327 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42327 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44662 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-44662 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-44662 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45784 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-45784 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-66746 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-66746 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-66746 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66746 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-66754 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66754 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66754 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66754 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-67181 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-67181 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2026-67181 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-67181 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2026-67182 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-67182 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-67182 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-67182 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L * CVE-2026-93599 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93599 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93599 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93599 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93600 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-93600 ( SUSE ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93600 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93600 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93601 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93601 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93601 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93601 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93602 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93602 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93602 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93602 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for sccache fixes the following issues: * CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). * CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274146). * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257923). * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270206). * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270559). * CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust- openssl crate (bsc#1270693). * CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate (bsc#1270736). * CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent memory in rust-openssl crate (bsc#1270869). * CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate (bsc#1270512). * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key- wrap-with-padding in rust-openssl crate (bsc#1270938). * CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust- openssl crate (bsc#1270948). * CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values (bsc#1273881). * CVE-2026-66754: rouille: remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent- encoded URL (bsc#1273884). * CVE-2026-67181: rouille: HTTP Request Smuggling via Transfer-Encoding Desynchronization (bsc#1273886). * CVE-2026-67182: rouille: HTTP Request Smuggling Enables Front-End Access Control Bypass (bsc#1273888). * CVE-2026-93599: rustls-webpki: panic via empty BIT STRING (bsc#1282211). * CVE-2026-93600: rustls-webpki: name constraints URI validation bypass (bsc#1282211). * CVE-2026-93601: rustls-webpki: name constraint bypass (bsc#1282211). * CVE-2026-93602: rustls-webpki: CRL revocation check bypass (bsc#1282211). Changes for sccache: Update to version 0.18.0~2: * Add experimental concurrent cache support * chore: Remove dependency status badge (#2856) * Don't hand the jobserver to children that can't use it * dist: refuse to trim rlibs from crates that also emit a cdylib * fix(cache): avoid duplicate multilevel reads * Strip basedirs from the compiler arguments too * tests/integration: replace MinIO with Silo * ci: dump sccache logs on integration failures * multilevel: a chain with any writable level is writable * Fix parsing of #line directives * Release 0.18.0 * daemonize: use an allow-list approach to inherited FDs * gcc, clang: make the assembler part of the cache key * support cl.exe /openmp:llvm * support all current /fsanitize _, /fsanitize-coverage_ , and /fno-sanitize* args * support MSVC /feature argument * msvc: support lots of flags (#2832) * Update shlex dependency to version 2 (#2836) * gcc: mark flags as TooHard if need to cache something else (#2833) * clang: support more CLI options (#2834) * msvc: support arm64EC and fastfail flags (#2830) * chore: fix typo in comment (#2829) * nvcc: accept the --diag-error/--diag-suppress/--diag-warn family (#2816) * cache: allow skipping capability checks (#2822) * Bump opendal to 0.58.1 and fix fallout (fixes local GCS cache usage) (#2715) * nvcc (Windows): protect escaped quotes in dryrun lines before flattening backslashes (#2811) * Add an agent (#2812) * Add support for d20bforceinline. (#2807) * feat: add Microsoft Entra ID (passwordless) auth for the Azure Blob backend (#2802) * Bump MSRV to 1.91.0 (#2793) * Fix `nvcc` dryrun parsing for CUDA 13.3 (#2722) * test: Fixed hardcoded binary path in test * Release 0.17.0 * tests: pin libc in the dist test crate * doc: clarify server-side outputs and drop 'recommended mode' claim * doc: document SCCACHE_CLIENT_SIDE env var * doc: document client-side and direct modes in Architecture.md * Fix description of Unix socket-based Redis connection * server: remove redundant async block in start_compile_task * server: simplify bind() request loops with ? instead of manual match arms * Add support for arg files in Rust (#2782) * feat: support S3 SSE-KMS with AWS- managed and customer-managed keys (#2770) * abort compile tasks and associated subprocesses when a client disconnects * treat -ivfsoverlay as a preprocessor- only argument * gcc: refine response-file tokenizer visibility and whitespace handling * integration: convert cmake 4.x modules XFAIL test to a passing test * gcc/clang: cache and distribute builds using quoted @response files * fix: Fix ToolchainPackager cfg gate to build on ppc64le/s390x * fix: make gcc diagnostics color output work the same as for rustc * implement client-side mode * split handle_compile_response so that the compilation result can be handled separately * implement IpcStorage -- Storage backend over IPC * extend wire protocol with storage RPCs * implement AddAssign for ServerStats and related types * add Storage::get_path for direct file access * implement get_raw/put_raw on MultiLevelStorage * add client_side_mode config flag (SCCACHE_CLIENT_SIDE) * Extract new_client_runtime() helper to DRY up client runtime creation * Clarify single-threaded runtime rationale comment (grammar) * fix: use single-threaded tokio runtime in sccache dist-client * fix: use single-threaded tokio runtime in sccache client * fix: handle disabled cache backend features in multilevel chain * Fix ldd output parsing: remove .exists() check that failed on systems where the symlink source path does not exist locally (e.g. aarch64) * Fix cfg guard for PanicToolchainPackager to also cover non-x86_64 Linux architectures (e.g. aarch64) * Release 0.16.0 * fix: strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows (#2736) * Ignore empty-set environment values (#2639) * feat: all backends support making them as read-only (#2705) * Enable RE on Linux- aarch64 (#2668) * Slightly improve logging (#2734) * chore: encode jwt key and cert digest with base64 in logs (#2712) * chore: make clippy happy (#2727) * feat: avoid sccache wrapper when resolving compiler (#2720) * Fall back to direct cache write if tempfile creation on the same fs fails (#2369) * remove too noisy bench * feat(nvcc): support argument: `--dependency-output` (#2708) * fix: add newline when printing dist-status to stdout * Revert "Classify .s files as AssemblerToPreprocess so #include/#ifdef are hon..." * Don't wait depfiles for gcc/clang preprocessed inputs * Classify .s files as AssemblerToPreprocess so #include/#ifdef are honored * prepare release 0.15.0 * Add cargo-binstall metadata for prebuilt binary installation * Fix coverage * fix: handle directories in dep-info source file hashing * docs(Rust.md): Add caveats from README * Add retry for dists docker image build * ci: set crt-static for riscv64 musl targets * feat: Add loongarch64 support * feat: Implement multi-tier caching with fallback and backfilling (#2581) * msvc: add support for Y-, YI, Zf flags * Group tests logging in CI * Add failing test for cmake-modules + cmake 4 version * Unfold ninja output in the test * Add a comment for maintaining integration tests * Move cmake-modules to integration tests * fix: exclude CARGO_ENCODED_RUSTFLAGS from env var hash (#2651) * chore(deps): update rust crate quinn-proto to v0.11.14 * Fix sync GCS initialization * clippy: fix from_iter_instead_of_collect lint * fix: add Win32_Security feature to windows- sys dependency * build(deps): bump actions/download-artifact from 5 to 8 * msvc: Append the default .pdb extension for the /Fd argument (#2621) * build(deps): bump actions/upload-artifact from 4 to 7 * clippy: fix ref_option lint * ci: install grcov from prebuilt binary instead of cargo install * ci: use default toolchain to install grcov * ci: fix artifact_failure action when target dir does not exist * Remove benchmark normalize_win_path_utf8 (#2634) * Revert "actions: add security audit workflow (#2594)" (#2603) * partial c++20 module support (#2516) * clippy: fix ptr_as_ptr lint (#2611) * Add support for `d1nodatetime` & `await:strict` MSVC flags (#2617) * chore: switch thirtyfour_sync to thirtyfour (#2613) * clippy: fix manual_string_new lint (#2609) * clippy: fix unnecessary_semicolon lint (#2615) * clippy: fix explicit_into_iter_loop lint (#2616) * Avoid double-caching when ccache is installed in PATH (#2524) * clippy: fix cloned_instead_of_copied lint (#2605) * clippy: fix semicolon_if_nothing_returned lint (#2601) * Move PreprocessorCacheModeConfig to src/config.rs (#2604) * clippy: fix cloned_ref_to_slice_refs lint (#2602) * prepare the new release (#2600) * chore: update to toml 0.9 (#2599) * ci: Add coverage to integration tests, report it to Codecov.io (#2598) * Preparation for multilevel caching (#2597) * Add sccache- dist to flake.nix (#2579) * fixup! cargo fmt * fixup! rustfmt update * Extract FileObjectSource, CacheRead and CacheWrite to cache_io.rs * chore: update to nix 0.30 * Add a helper method to get a correct backend name * Add cos feature gate to RemoteStorage * Simplify profiles for integration tests * clippy: fix implicit_clone lint (#2584) * actions: add security audit workflow (#2594) * docs: fix examples showing an xz-compress toolchain archive (#2587) * add benches for normalize_win_path strip_basedirs (#2588) * snap: update to core24 (#2570) * Add .rustfmt.toml for consistent style between `rustfmt` and `cargo fmt` (#2582) * add comments about auth token requirements (#2583) * chore: update to tokio-serde 0.9 (#2585) * ci: update freebsd to 15.0 (#2586) * distributed compilation support for asm & preprocessor outputs (#2557) * remove unused declaration (#2577) * Extract LazyDiskCache to a separated file (#2573) * Revert "ci: show diff for toml_format" (#2578) * Open Add SCCACHE_BASEDIRS support * ci: show diff for toml_format * chore: update to syslog 7 * refactor: use matrix to reduce deduplication * fix: remove outdated `analysis` mode * Unbreak the s390x CI * ci: add macos-15-intel for prebuilt binary (#2555) * Integration tests (#2564) * Fix code review. * Impl for COS. * build(deps): bump opendal from 0.54.0 to 0.55.0 * Move integration tests related stuff to subdir * Add Objective C Header for consistency * github action: fix the syntax - fails in the ci * sccache: prepare a new release * msvc: add msbuild support test * msvc: fix detect_showincludes_prefix with MSBuild * chore: update to gzp 2 * build(deps): bump rsa from 0.9.6 to 0.9.10 * codspeed: evaluate the memory benchmarking * remove too quick benchmarks * codspeed: move to simulation mode * Add realistic LRU cache access pattern benchmarks * Add compression characteristics benchmarks * Add build workflow simulation benchmarks * Add hash computation scenario benchmarks * Add batch cache entry benchmarks * Add cache artifact serialization benchmarks * Add /etc/ld.so.conf.d (if present) to compiler package * Assembly language support * fix(ci): pin serde_json to avoid zmij dependency * fix(ci): update zmij to fix s390x cross-compilation * Fix the run of the CI * run the benchmark in the ci * add benchmarks * dedup some code * Fix hash logging prefix * Add support for C preprocessor output * Add GCC pipe flag support * Improve save-temps gcc flags detection * MSVC: support forward slash as an output dir marker * add clang -fplugin=x regression test * canbeconcatenated is not accounted for in cmp * Reversed the order for looking `rustc`, added comment * Fix failing test_rlib_dep_reader_call for omit CARGO_HOME * fix: don't hash -parallel-jobs in Clang * docs: add installation steps for nix (#2523) * Support clang -fexperimental-assignment-tracking option (#2517) * add a nix flake (#2518) * Switch from the unmaintained daemonize crate to a maintained fork * chore: update to fs-err 3 * Fix grammar of error message * Add server name info to stderr of remote jobs that ran, but failed * Remove another pointless destructuring * try to unbreak the ci * fix s390x build error * Add riscv64 support * fix: make aarch64-pc-windows-msvc also zip not tar.gz * Free up disk space in CI * MSVC on Windows only * Avoid 'No space left on device' errors in CI * GitHub dropped macos-13 runners * Proper function pointer to int cast * Avoid unused structs with dist-server disabled * no check cfg (#2507) * chore: switch once_cell crate to standard library (#2499) * Avoid unreliable assert_cmd::cargo::cargo_bin (#2489) * Fix build on macOS which doesn't have separate 32-bit dirent (#2492) * Fix Clippy warnings (#2490) * docs: bump MSRV to 1.85.0 * msvc: handle '/FoRelease\' command-line argument * chore: drop tower dependency * chore: update to itertools 0.14 * Use generator in CMAKE_MSVC_DEBUG_INFORMATION_FORMAT in README * Update directories to 6.0 * Configuration.md - note logging env variables * chore: update to env_logger 0.11 * deps: update blake3 * prepare version 0.12.0 * Update README with winget installation instructions * Skip CARGO_BUILD_JOBS in hash keys * build(deps): bump object from 0.36.7 to 0.37.1 * Adjust tests after the rust update * Fix CI by adding cargo-features and updating coverage test to use modern -Cinstrument- coverage * Fix more clippy warnings * bump rustc in the ci too * Fix rustc 1.85 clippy warnings * bump to rustc 1.85 / edition 2024. mandatory for reqsign-core and run rustfmt with the version * fix clippy warnings * bump opendal to 0.54.0 & reqsign to 0.18.0 * github action: when creating a release, make it as draft before (#2458) * prepare version 0.11.0 (#2457) * document SCCACHE_LOG_MILLIS (#2456) * logging: add a option to log milliseconds (Closes: #2454) (#2455) * feat: handle human size prefixes (#2405) * fix: in stats, Compare values AND keys to have a fully deterministic order (#2403) * Add --diagnostic-width to test for args ignored in hash * Ignore --diagnostic-width argument when computing hash * build(deps): bump actions/checkout from 4 to 5 * build(deps): bump actions/download-artifact from 4 to 5 * build(deps): bump actions/github- script from 7 to 8 * Fix rustfmt * Fix comments on request * Fix clippy and rustfmt * Add test for count toolchain and use Determenistic for create tar archive * Fix mtime for reproducable toolchains * build(deps): bump chrono from 0.4.41 to 0.4.42 * fix typo in an environment variable name * Fix documentation of azure configuration * Account for clippy-driver having extra prefix `rustc` * Fix build on Android (in Termux) * add support for s390x build * chore: replace retry crate with backon * Remove or replace "Windows 2019" CI config * Needs another result unwrapping, it seems * Test: invoking symlink "compiler" to "sccache" invokes "compiler" * Add a comment about the problem with symlinks and current_exe() * Fix symbolic links to sccache on linux * Allow the CI configuration to disable clang++ for CUDA testing * Don't run tests using clang++ as CUDA compiler on Windows * add description to sccache-dist commands * Display a more user-friendly error when compiling on Linux/arm64 * Clarify documentation about "the hash" (aka cache key) * Remove stray ')' * Remove documentation for removed limitations of preprocessor cache mode * Fix preprocessor cache mode when the compiler outputs a dep file * Partially revert "Don't cache dep file (#2322)" * Do not disable preprocessor cache mode if there is a dep file * Fix preprocessor cache mode with distributed builds (#2173) * Change self of generate_hash_key() from Box to &mut Self * Remove a few IMO pointless indirections / aliases * Remove workaround for #2173 * Add test for bug #2173 * chore: fix some minor issues in comments * build(deps): bump chrono from 0.4.40 to 0.4.41 * build(deps): bump memchr from 2.7.1 to 2.7.5 * check if we can use a specific version of rust to build grcov * Move comment that hadn't moved with its corresponding code * Rework direct mode documentation some more * Explain what preprocessor cache mode really does * Reword and correct the preprocessor cache mode documentation * chore: Remove not working mozilla code * Add support for -fsanitize-ignorelist * github storage: adjust the doc * github storage: ACTIONS_CACHE_URL => ACTIONS_RESULTS_URL * github storage: force version 2 * Update codecov badge in README.md * Expand tests for dist-server * ci: Consolidate testing, coverage * ci: Update ubuntu-20.04 runners to ubuntu-22.04 * chore: fix some comments * Give the --dist-status user some information about when a retry will happen. * Add support for Xclang flag '-mrelax-all' * Add support for Xclang flag '-mconstructor-aliases' * feat(utils): Add support for object >= 0.33 * fix(tests): Remove executable bit from oauth.rs * build(deps): bump openssl from 0.10.64 to 0.10.72 * build(deps): bump tokio from 1.41.0 to 1.43.1 * Improve the CARGO_INCREMENTAL checking (#2364) * build(deps): bump chrono from 0.4.38 to 0.4.40 * build(deps): bump clap from 4.4.18 to 4.5.13 * build(deps): bump ring from 0.17.7 to 0.17.13 * Bail on `nvcc -time` and `nvcc -fdevice-time-trace` flags * test hip with librandomize_readdir * Add randomize_readdir test utility * fix non-strict HIP device lib order * Create config during testing to collect coverage data * Extend coverage to distributed tests * chore: replace num_cpus crate with available_parallelism in standard library (#2342) * Update CI coverage: grcov/codecov ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1793 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1793 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * sccache-debugsource-0.18.0~2-160000.1.1 * sccache-debuginfo-0.18.0~2-160000.1.1 * sccache-0.18.0~2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * sccache-debugsource-0.18.0~2-160000.1.1 * sccache-debuginfo-0.18.0~2-160000.1.1 * sccache-0.18.0~2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://www.suse.com/security/cve/CVE-2026-25727.html * https://www.suse.com/security/cve/CVE-2026-41676.html * https://www.suse.com/security/cve/CVE-2026-41677.html * https://www.suse.com/security/cve/CVE-2026-41678.html * https://www.suse.com/security/cve/CVE-2026-41681.html * https://www.suse.com/security/cve/CVE-2026-41898.html * https://www.suse.com/security/cve/CVE-2026-42327.html * https://www.suse.com/security/cve/CVE-2026-44662.html * https://www.suse.com/security/cve/CVE-2026-45784.html * https://www.suse.com/security/cve/CVE-2026-66746.html * https://www.suse.com/security/cve/CVE-2026-66754.html * https://www.suse.com/security/cve/CVE-2026-67181.html * https://www.suse.com/security/cve/CVE-2026-67182.html * https://www.suse.com/security/cve/CVE-2026-93599.html * https://www.suse.com/security/cve/CVE-2026-93600.html * https://www.suse.com/security/cve/CVE-2026-93601.html * https://www.suse.com/security/cve/CVE-2026-93602.html * https://bugzilla.suse.com/show_bug.cgi?id=1243868 * https://bugzilla.suse.com/show_bug.cgi?id=1257923 * https://bugzilla.suse.com/show_bug.cgi?id=1270206 * https://bugzilla.suse.com/show_bug.cgi?id=1270512 * https://bugzilla.suse.com/show_bug.cgi?id=1270559 * https://bugzilla.suse.com/show_bug.cgi?id=1270693 * https://bugzilla.suse.com/show_bug.cgi?id=1270736 * https://bugzilla.suse.com/show_bug.cgi?id=1270869 * https://bugzilla.suse.com/show_bug.cgi?id=1270938 * https://bugzilla.suse.com/show_bug.cgi?id=1270948 * https://bugzilla.suse.com/show_bug.cgi?id=1273881 * https://bugzilla.suse.com/show_bug.cgi?id=1273884 * https://bugzilla.suse.com/show_bug.cgi?id=1273886 * https://bugzilla.suse.com/show_bug.cgi?id=1273888 * https://bugzilla.suse.com/show_bug.cgi?id=1274146 * https://bugzilla.suse.com/show_bug.cgi?id=1282211 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:43:10 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:43:10 -0000 Subject: SUSE-RU-2026:23982-1: moderate: Recommended update for jitterentropy Message-ID: <179118979017.18075.6487119303932259481@e7f4ad8d9866> # Recommended update for jitterentropy Announcement ID: SUSE-RU-2026:23982-1 Release Date: 2026-09-30T15:02:00Z Rating: moderate References: * bsc#1282301 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for jitterentropy fixes the following issues: Changes in jitterentropy: * OSR has to be at least 5 according to current reviews. (bsc#1282301) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1792 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1792 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * jitterentropy-devel-3.6.3-160000.3.1 * jitterentropy-debugsource-3.6.3-160000.3.1 * jitterentropy-devel-static-3.6.3-160000.3.1 * libjitterentropy3-3.6.3-160000.3.1 * libjitterentropy3-debuginfo-3.6.3-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * jitterentropy-devel-3.6.3-160000.3.1 * jitterentropy-debugsource-3.6.3-160000.3.1 * jitterentropy-devel-static-3.6.3-160000.3.1 * libjitterentropy3-3.6.3-160000.3.1 * libjitterentropy3-debuginfo-3.6.3-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1282301 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:43:56 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:43:56 -0000 Subject: SUSE-SU-2026:23981-1: important: Security update for MozillaFirefox Message-ID: <179118983677.18075.4037746857375170595@e7f4ad8d9866> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:23981-1 Release Date: 2026-09-30T13:07:26Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1791 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1791 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-160000.1.1 * MozillaFirefox-debuginfo-153.4.0-160000.1.1 * MozillaFirefox-debugsource-153.4.0-160000.1.1 * MozillaFirefox-translations-common-153.4.0-160000.1.1 * MozillaFirefox-153.4.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * MozillaFirefox-devel-153.4.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-160000.1.1 * MozillaFirefox-debuginfo-153.4.0-160000.1.1 * MozillaFirefox-debugsource-153.4.0-160000.1.1 * MozillaFirefox-translations-common-153.4.0-160000.1.1 * MozillaFirefox-153.4.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * MozillaFirefox-devel-153.4.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:44:57 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:44:57 -0000 Subject: SUSE-SU-2026:23980-1: moderate: Security update for glib2 Message-ID: <179118989769.18075.2135642607629551190@e7f4ad8d9866> # Security update for glib2 Announcement ID: SUSE-SU-2026:23980-1 Release Date: 2026-09-30T09:36:48Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1788 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1788 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * glib2-debugsource-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * libgthread-2_0-0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-devel-debuginfo-2.84.4-160000.5.1 * libgirepository-2_0-0-2.84.4-160000.5.1 * glib2-devel-static-2.84.4-160000.5.1 * glib2-devel-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgthread-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GLibUnix-2_0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * glib2-doc-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GIRepository-3_0-2.84.4-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * glib2-lang-2.84.4-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * glib2-debugsource-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * libgthread-2_0-0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-devel-debuginfo-2.84.4-160000.5.1 * libgirepository-2_0-0-2.84.4-160000.5.1 * glib2-devel-static-2.84.4-160000.5.1 * glib2-devel-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgthread-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GLibUnix-2_0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * glib2-doc-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GIRepository-3_0-2.84.4-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * glib2-lang-2.84.4-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:45:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:45:59 -0000 Subject: SUSE-RU-2026:23979-1: moderate: Recommended update for ca-certificates-mozilla Message-ID: <179118995957.18075.5782186302899010522@e7f4ad8d9866> # Recommended update for ca-certificates-mozilla Announcement ID: SUSE-RU-2026:23979-1 Release Date: 2026-09-30T09:30:37Z Rating: moderate References: * bsc#1279961 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Changes in ca-certificates-mozilla: * Updated to 2.90 state (bsc#1279961): * Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority * Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1790 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1790 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.90-160000.1.3 * ca-certificates-mozilla-2.90-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.90-160000.1.3 * ca-certificates-mozilla-2.90-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:46:42 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:46:42 -0000 Subject: SUSE-RU-2026:23978-1: moderate: Recommended update for fde-tools Message-ID: <179119000299.18075.2265268119276943974@e7f4ad8d9866> # Recommended update for fde-tools Announcement ID: SUSE-RU-2026:23978-1 Release Date: 2026-09-30T09:27:44Z Rating: moderate References: * bsc#1279917 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for fde-tools fixes the following issues: Changes in fde-tools: * Update to 0.7.9 * Handle the return value of pcr-oracle when signing the key (bsc#1279917) * Properly detect the sealed key in tpm-activate/tpm-enable (bsc#1279917) * search for fde password also in EFI grub.cfg * ensure keyfile is not dropped if reencryption failed ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1789 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1789 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * fde-tools-bash-completion-0.7.9-160000.1.1 * fde-firstboot-0.7.9-160000.1.1 * fde-tpm-helper-0.7.9-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * fde-tools-debuginfo-0.7.9-160000.1.1 * fde-tools-0.7.9-160000.1.1 * fde-tools-debugsource-0.7.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * fde-tools-bash-completion-0.7.9-160000.1.1 * fde-firstboot-0.7.9-160000.1.1 * fde-tpm-helper-0.7.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * fde-tools-debuginfo-0.7.9-160000.1.1 * fde-tools-0.7.9-160000.1.1 * fde-tools-debugsource-0.7.9-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:47:38 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:47:38 -0000 Subject: SUSE-SU-2026:4439-1: important: Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5) Message-ID: <179119005818.18075.16951027659700253481@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4439-1 Release Date: 2026-10-04T12:04:23Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4439 SUSE-SLE-Live- Patching-12-SP5-2026-4438 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_280-default-14-2.1 * kgraft-patch-4_12_14-122_275-default-16-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:48:39 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:48:39 -0000 Subject: SUSE-RU-2026:23977-1: important: Recommended update for s390-tools Message-ID: <179119011998.18075.867720222532831592@e7f4ad8d9866> # Recommended update for s390-tools Announcement ID: SUSE-RU-2026:23977-1 Release Date: 2026-10-01T11:10:40Z Rating: important References: * bsc#1273204 * bsc#1273205 * bsc#1273206 * bsc#1273207 * bsc#1275476 Affected Products: * SUSE Linux Micro 6.2 An update that has five fixes can now be installed. ## Description: This update for s390-tools fixes the following issues: Changes in s390-tools: * Upgrade to version 2.44.1 (bsc#1273204, bsc#1273205, bsc#1273206, bsc#1273207, bsc#1275476): For Linux kernel version: 7.2 * Changes of existing tools: * cpumf/lshwc: Add -c as short option for --counters * cpumf/lspai: Handle CPU hotplug gracefully * dbginfo.sh: Change grep for OS name * dbginfo.sh: Change tar generation via temp file * dbginfo.sh: Correct dump counter * dbginfo.sh: Detect the openCryptoki STDLL directory at runtime * dbginfo.sh: Redirect stderr on command existence checks * dbginfo.sh: Replace deprecated backtick command substitution * dbginfo.sh: Secure the directory input variable * zipl: Detect and display partition table type for disk and device * Bug Fixes: * cmsfs-fuse: Fix out-of-bounds access when reading variable-length files * cpumf/lscpumf: Fix exit status and error reporting * cpumf/lshwc: Fix --allcpu to --all in man page * cpumf/lspai: Add input validation for interval parameter * cpumf/lspai: Fix --allcpu to --all in man page * cpumf/lspai: Fix integer overflow in file descriptor calculation * cpumf/lspai: Fix output formatting with minimum indent * dasdview: Fix buffer overflow in dasdview_read_vtoc() * dumpconf: Harden locking during delayed activation to prevent symlink attacks * fdasd: Fix potential buffer overflow in fdasd_change_part_type() * ipl_tools: Fix buffer overflow vulnerabilities in chreipl and is_lpar() * ip_watcher: Use mktemp for cleanup files to avoid collisions * libkmipclient: Fix NULL pointer dereference in kmip_v2_attr_from_v1_attr() * libkmipclient: Fix heap buffer overflow * libutil/util_lockfile: Prevent buffer overflow in lockfile handling * libzds: Add bounds checking and validate used_bytes in PDS directory parsing * pvattest: Write attestation request private key (arpk) with 0600 permissions * pvebc: Fix executable permission on sel-ebc-modules.conf * pvics: Fix incorrect exit values for --version and --help options * pvsecret: Write secret with 0600 permissions * sclpdbf: Harden against invalid trace data * vmur: Fix buffer over-read in get_minor() * zdump/dfi_s390: Add a check for zlib entry size in the dump header * zdump/dfi_s390: Fix out-of-bounds upon dump entry decompression * zdump/dfo_elf: Fix 32-bit truncation in ELF header allocation size * zdump: Reject multi-volume dumps with out-of-range vol_cnt * ziomon/ziomon_zfcpdd: Validate message lengths before processing * ziomon/ziorep_config: Replace unsafe open() and regex match with safer idioms * ziomon: Validate message layout and aggregate message lengths before processing * zipl: Fix memory leak in free_bootloader() * zipl: Replace popen(3) with safer invocation for targetbase scripts and ngdump * zkey-ekmfweb: Fix insecure default: TLS host name verification now enabled by default * zkey-kmip: Fix insecure default: TLS host name verification now enabled by default * zkey: Fix memory leaks when generating keys or reenciphering integrity volumes * zkey: Harden 'zkey kms unbind' command against symlink traversal * zkey: Harden KMS config directory handling against symlink attacks * zkey: Harden KMS plugin file handling against symlink attacks * zkey: Install initrd integration with the configured plugin directory * Full Changelog: v2.44.0...v2.44.1: https://github.com/ibm-s390-linux/s390-tools/compare/v2.44.0...v2.44.1 * Removed obsolete patches for Security vulnerabilities for zkey and friends * zkey: Harden KMS config directory handling - Commit `0eef784` * zkey: Harden 'zkey kms unbind' command - Commit `1b90d15` * zkey/ekmfweb, zkey/kmip: Harden KMS plugin file handling - Commit `bc81c32` ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1799 ## Package List: * SUSE Linux Micro 6.2 (s390x) * libekmfweb1-debuginfo-2.44.1-160000.1.1 * libkmipclient1-2.44.1-160000.1.1 * s390-tools-debugsource-2.44.1-160000.1.1 * libkmipclient1-debuginfo-2.44.1-160000.1.1 * libekmfweb1-2.44.1-160000.1.1 * s390-tools-2.44.1-160000.1.1 * s390-tools-debuginfo-2.44.1-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * s390-tools-chreipl-fcp-mpath-2.44.1-160000.1.1 * s390-tools-genprotimg-data-2.44.1-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273204 * https://bugzilla.suse.com/show_bug.cgi?id=1273205 * https://bugzilla.suse.com/show_bug.cgi?id=1273206 * https://bugzilla.suse.com/show_bug.cgi?id=1273207 * https://bugzilla.suse.com/show_bug.cgi?id=1275476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:49:19 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:49:19 -0000 Subject: SUSE-RU-2026:23976-1: moderate: Recommended update for raspberrypi-firmware Message-ID: <179119015915.18075.6725258489475668942@e7f4ad8d9866> # Recommended update for raspberrypi-firmware Announcement ID: SUSE-RU-2026:23976-1 Release Date: 2026-10-01T09:38:21Z Rating: moderate References: * bsc#1215134 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for raspberrypi-firmware fixes the following issues: Changes in raspberrypi-firmware: * Prevent -52 error message during wifi scan (bsc#1215134) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1798 ## Package List: * SUSE Linux Micro 6.2 (noarch) * raspberrypi-firmware-extra-pi4-2023.04.25-160000.3.1 * raspberrypi-firmware-config-2023.04.25-160000.3.1 * raspberrypi-firmware-config-camera-2023.04.25-160000.3.1 * raspberrypi-firmware-extra-2023.04.25-160000.3.1 * raspberrypi-firmware-2023.04.25-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1215134 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:49:58 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:49:58 -0000 Subject: SUSE-SU-2026:23975-1: moderate: Security update for wget Message-ID: <179119019891.18075.917092571944402442@e7f4ad8d9866> # Security update for wget Announcement ID: SUSE-SU-2026:23975-1 Release Date: 2026-10-01T12:39:02Z Rating: moderate References: * bsc#1276962 Cross-References: * CVE-2026-16599 CVSS scores: * CVE-2026-16599 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-16599 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-16599 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issue: * CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1802 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16599.html * https://bugzilla.suse.com/show_bug.cgi?id=1276962 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:50:52 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:50:52 -0000 Subject: SUSE-RU-2026:23974-1: moderate: Recommended update for dracut Message-ID: <179119025287.18075.5830654499458850694@e7f4ad8d9866> # Recommended update for dracut Announcement ID: SUSE-RU-2026:23974-1 Release Date: 2026-10-01T09:31:57Z Rating: moderate References: * jsc#PED-16110 * jsc#PED-16702 Affected Products: * SUSE Linux Micro 6.2 An update that contains two features can now be installed. ## Description: This update for dracut fixes the following issues: Changes in dracut: * Support NTP configuration for airgapped scenarios (jsc#PED-16110) * Allow to easily apply CC compliant configuration when deploying SLES 16.0 (jsc#PED-16702) * feat(chrony): introducing the chrony module * feat(network-manager): write info about NTP servers in dhcpopts file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1797 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * dracut-debuginfo-059+suse.732.g39fc900f5-160000.1.1 * dracut-059+suse.732.g39fc900f5-160000.1.1 * dracut-fips-059+suse.732.g39fc900f5-160000.1.1 * dracut-debugsource-059+suse.732.g39fc900f5-160000.1.1 ## References: * https://jira.suse.com/browse/PED-16110 * https://jira.suse.com/browse/PED-16702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:51:53 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:51:53 -0000 Subject: SUSE-SU-2026:23973-1: important: Security update for helm Message-ID: <179119031359.18075.11000738124482380913@e7f4ad8d9866> # Security update for helm Announcement ID: SUSE-SU-2026:23973-1 Release Date: 2026-09-30T17:43:36Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-78662 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426). * CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1794 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * helm-bash-completion-4.3.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:52:50 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:52:50 -0000 Subject: SUSE-RU-2026:23972-1: moderate: Recommended update for jitterentropy Message-ID: <179119037072.18075.7749077747441769677@e7f4ad8d9866> # Recommended update for jitterentropy Announcement ID: SUSE-RU-2026:23972-1 Release Date: 2026-09-30T15:08:45Z Rating: moderate References: * bsc#1282301 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for jitterentropy fixes the following issues: Changes in jitterentropy: * OSR has to be at least 5 according to current reviews. (bsc#1282301) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1792 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libjitterentropy3-3.6.3-160000.3.1 * jitterentropy-devel-3.6.3-160000.3.1 * jitterentropy-debugsource-3.6.3-160000.3.1 * libjitterentropy3-debuginfo-3.6.3-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1282301 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:53:31 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:53:31 -0000 Subject: SUSE-SU-2026:23971-1: moderate: Security update for glib2 Message-ID: <179119041155.18075.5756733304917297193@e7f4ad8d9866> # Security update for glib2 Announcement ID: SUSE-SU-2026:23971-1 Release Date: 2026-09-30T09:50:09Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1788 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libgirepository-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * glib2-debugsource-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:54:28 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:54:28 -0000 Subject: SUSE-RU-2026:23970-1: moderate: Recommended update for ca-certificates-mozilla Message-ID: <179119046844.18075.15527028919054244686@e7f4ad8d9866> # Recommended update for ca-certificates-mozilla Announcement ID: SUSE-RU-2026:23970-1 Release Date: 2026-09-30T09:45:06Z Rating: moderate References: * bsc#1279961 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Changes in ca-certificates-mozilla: * Updated to 2.90 state (bsc#1279961): * Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority * Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1790 ## Package List: * SUSE Linux Micro 6.2 (noarch) * ca-certificates-mozilla-2.90-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:55:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:55:06 -0000 Subject: SUSE-RU-2026:23969-1: moderate: Recommended update for fde-tools Message-ID: <179119050686.18075.4138509911600165163@e7f4ad8d9866> # Recommended update for fde-tools Announcement ID: SUSE-RU-2026:23969-1 Release Date: 2026-09-30T09:41:02Z Rating: moderate References: * bsc#1279917 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for fde-tools fixes the following issues: Changes in fde-tools: * Update to 0.7.9 * Handle the return value of pcr-oracle when signing the key (bsc#1279917) * Properly detect the sealed key in tpm-activate/tpm-enable (bsc#1279917) * search for fde password also in EFI grub.cfg * ensure keyfile is not dropped if reencryption failed ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1789 ## Package List: * SUSE Linux Micro 6.2 (noarch) * fde-firstboot-0.7.9-160000.1.1 * fde-tpm-helper-0.7.9-160000.1.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * fde-tools-debuginfo-0.7.9-160000.1.1 * fde-tools-0.7.9-160000.1.1 * fde-tools-debugsource-0.7.9-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:55:54 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 08:55:54 -0000 Subject: SUSE-SU-2026:4436-1: important: Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) Message-ID: <179119055460.18075.11718572718427509581@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4436-1 Release Date: 2026-10-02T18:33:49Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4436 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_272-default-18-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 12:30:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 12:30:21 -0000 Subject: SUSE-SU-2026:4441-1: important: Security update for kubevirt-1.6 Message-ID: <179120342116.18476.1800338471276111663@32be4de442c6> # Security update for kubevirt-1.6 Announcement ID: SUSE-SU-2026:4441-1 Release Date: 2026-10-05T07:13:35Z Rating: important References: * bsc#1276520 Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for kubevirt-1.6 fixes the following issues: * Package the persistent-reservation helper's entrypoint script (bsc#1276520): virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr- helper. Only multipath.conf was installed, so the container could not start and persistent reservation was unavailable. The script is upstream in cmd/pr-helper/entrypoint.sh. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4441 ## Package List: * Containers Module 15-SP7 (aarch64 x86_64) * kubevirt-1.6-manifests-1.6.6-150700.15.20.1 * kubevirt-1.6-virtctl-1.6.6-150700.15.20.1 * kubevirt-1.6-virtctl-debuginfo-1.6.6-150700.15.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1276520 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 12:31:15 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 12:31:15 -0000 Subject: SUSE-SU-2026:3961-2: moderate: Security update for suseconnect-ng Message-ID: <179120347528.18476.8484194442121472688@32be4de442c6> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:3961-2 Release Date: 2026-10-04T20:34:47Z Rating: moderate References: * bsc#1159776 * bsc#1267478 * bsc#1268596 * bsc#1268900 * bsc#1270392 Affected Products: * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has five security fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issue: * Update version to 1.23.0: * Use product identifier for product migrations. (bsc#1268596) * Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC-843, bsc#1268900). * Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed. (bsc#1159776) * InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478). * Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages. (jsc#TEL-298) * Allow deregsiter when subscribed regcode has expired (bsc#1270392, jsc#865) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3961 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3961 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * suseconnect-ng-1.23.0-150600.3.24.1 * libsuseconnect-1.23.0-150600.3.24.1 * suseconnect-ruby-bindings-1.23.0-150600.3.24.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ng-1.23.0-150600.3.24.1 * libsuseconnect-1.23.0-150600.3.24.1 * suseconnect-ruby-bindings-1.23.0-150600.3.24.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1159776 * https://bugzilla.suse.com/show_bug.cgi?id=1267478 * https://bugzilla.suse.com/show_bug.cgi?id=1268596 * https://bugzilla.suse.com/show_bug.cgi?id=1268900 * https://bugzilla.suse.com/show_bug.cgi?id=1270392 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:30:47 -0000 Subject: SUSE-SU-2026:4471-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7) Message-ID: <179121784744.19502.11758877741791101983@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4471-1 Release Date: 2026-10-05T12:06:32Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4482 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4474 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4483 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4471 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4470 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4467 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4473 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4466 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4476 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4472 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4484 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4475 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4482 SUSE-2026-4474 SUSE-2026-4483 SUSE-2026-4471 SUSE-2026-4470 SUSE-2026-4467 SUSE-2026-4473 SUSE-2026-4466 SUSE-2026-4476 SUSE-2026-4472 SUSE-2026-4484 SUSE-2026-4475 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4480 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_78-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-12-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_17-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-9-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-18-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_78-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-12-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_17-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-9-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-18-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_25-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_7-debugsource-13-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:31:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:31:59 -0000 Subject: SUSE-SU-2026:4450-1: important: Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Message-ID: <179121791930.19502.820311101991000462@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4450-1 Release Date: 2026-10-05T12:06:49Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4450 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4453 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4455 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4461 SUSE- SLE-Module-Live-Patching-15-SP4-2026-4452 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4451 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4459 SUSE- SLE-Module-Live-Patching-15-SP4-2026-4460 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4454 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4478 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4450 SUSE-2026-4453 SUSE-2026-4455 SUSE-2026-4461 SUSE-2026-4452 SUSE-2026-4451 SUSE-2026-4459 SUSE-2026-4460 SUSE-2026-4454 SUSE-2026-4478 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4469 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4468 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4477 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4465 SUSE- SLE-Module-Live-Patching-15-SP5-2026-4479 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4485 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4481 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4469 SUSE-2026-4468 SUSE-2026-4477 SUSE-2026-4465 SUSE-2026-4479 SUSE-2026-4485 SUSE-2026-4481 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_209-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-20-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-14-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_209-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-20-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-14-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_36-debugsource-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_37-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-10-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_36-debugsource-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_37-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-10-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:32:55 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:32:55 -0000 Subject: SUSE-RU-2026:3681-2: important: Recommended update for yast2-security Message-ID: <179121797531.19502.18091351756669537497@e7f4ad8d9866> # Recommended update for yast2-security Announcement ID: SUSE-RU-2026:3681-2 Release Date: 2026-10-05T11:10:55Z Rating: important References: * bsc#1262458 Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for yast2-security fixes the following issues: * Update to version 4.7.2: * Change minimum UID from 500 to 1000 (bsc#1262458). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-3681 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-3681 * SUSE Linux Enterprise High Performance Computing 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-3681 * SUSE Linux Enterprise Desktop 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-3681 ## Package List: * SUSE Linux Enterprise Server 15 SP7 (noarch) * yast2-security-4.7.2-150700.3.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 (noarch) * yast2-security-4.7.2-150700.3.6.1 * SUSE Linux Enterprise High Performance Computing 15 SP7 (noarch) * yast2-security-4.7.2-150700.3.6.1 * SUSE Linux Enterprise Desktop 15 SP7 (noarch) * yast2-security-4.7.2-150700.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1262458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:33:16 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:33:16 -0000 Subject: SUSE-RU-2026:4464-1: moderate: Recommended update for rust, rust1.98 Message-ID: <179121799621.19502.13905223257795789949@e7f4ad8d9866> # Recommended update for rust, rust1.98 Announcement ID: SUSE-RU-2026:4464-1 Release Date: 2026-10-05T11:10:43Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP7 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rust, rust1.98 fixes the following issues: Update to rust1.98.1 * Release notes can be found externally: https://github.com/rust- lang/rust/releases/tag/1.98.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4464 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4464 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4464 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4464 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4464 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4464 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4464 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4464 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4464 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4464 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4464 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4464 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4464 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4464 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.1-150300.21.106.1 * rust-src-1.98.1-150300.21.106.1 * rust-1.98.1-150300.21.106.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * openSUSE Leap 15.3 (aarch64 i586 nosrc ppc64le s390x x86_64) * rust1.98-1.98.1-150300.7.6.1 * openSUSE Leap 15.3 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * openSUSE Leap 15.3 (nosrc) * rust1.98-test-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150400.24.88.1 * rust-1.98.0-150400.24.88.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150400.24.88.1 * rust-1.98.0-150400.24.88.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150400.24.88.1 * rust-1.98.0-150400.24.88.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rust-src-1.98.0-150400.24.88.1 * rust-1.98.0-150400.24.88.1 * cargo-1.98.0-150400.24.88.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * rust-1.98.0-150500.27.81.1 * rust-src-1.98.0-150500.27.81.1 * cargo-1.98.0-150500.27.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150400.24.88.1 * rust-1.98.0-150400.24.88.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * Development Tools Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * rust1.98-1.98.1-150300.7.6.1 * Development Tools Module 15-SP7 (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * rust1.98-src-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cargo1.98-1.98.1-150300.7.6.1 * cargo-1.98.0-150500.27.81.1 * rust-1.98.0-150500.27.81.1 * rust1.98-debuginfo-1.98.1-150300.7.6.1 * cargo1.98-debuginfo-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.98-1.98.1-150300.7.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * rust1.98-src-1.98.1-150300.7.6.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:33:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:33:49 -0000 Subject: SUSE-RU-2026:4462-1: important: Recommended update for libvirt Message-ID: <179121802989.19502.15874569929983192820@e7f4ad8d9866> # Recommended update for libvirt Announcement ID: SUSE-RU-2026:4462-1 Release Date: 2026-10-05T11:06:04Z Rating: important References: * bsc#1265974 * bsc#1279561 * bsc#1280884 Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has three fixes can now be installed. ## Description: This update for libvirt fixes the following issues: * qemu: * Fix missing audit record and shutdown lifecycle event of VMs with shutdown times exceeding 40 seconds (bsc#1280884) * Fix cleanup of VMs with shutdown times exceeding 40 seconds (bsc#1265974) * Fix hot plugged host CPUs not being used (bsc#1279561) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4462 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4462 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libvirt-debugsource-11.0.0-150700.4.30.1 * libvirt-libs-11.0.0-150700.4.30.1 * libvirt-libs-debuginfo-11.0.0-150700.4.30.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-log-11.0.0-150700.4.30.1 * libvirt-client-11.0.0-150700.4.30.1 * libvirt-daemon-driver-secret-11.0.0-150700.4.30.1 * libvirt-daemon-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-logical-11.0.0-150700.4.30.1 * libvirt-daemon-plugin-sanlock-11.0.0-150700.4.30.1 * libvirt-daemon-proxy-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-common-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-iscsi-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-iscsi-direct-11.0.0-150700.4.30.1 * libvirt-daemon-config-nwfilter-11.0.0-150700.4.30.1 * libvirt-daemon-driver-qemu-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-scsi-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-interface-debuginfo-11.0.0-150700.4.30.1 * libvirt-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-core-11.0.0-150700.4.30.1 * libvirt-daemon-plugin-lockd-11.0.0-150700.4.30.1 * libvirt-daemon-proxy-11.0.0-150700.4.30.1 * libvirt-daemon-qemu-11.0.0-150700.4.30.1 * libvirt-daemon-driver-interface-11.0.0-150700.4.30.1 * libvirt-daemon-driver-nwfilter-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-core-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-qemu-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-logical-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-log-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-nodedev-11.0.0-150700.4.30.1 * libvirt-daemon-plugin-sanlock-debuginfo-11.0.0-150700.4.30.1 * libvirt-debugsource-11.0.0-150700.4.30.1 * libvirt-daemon-lock-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-disk-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-disk-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-secret-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-common-11.0.0-150700.4.30.1 * libvirt-client-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-lock-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-config-network-11.0.0-150700.4.30.1 * libvirt-daemon-driver-network-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-11.0.0-150700.4.30.1 * libvirt-daemon-driver-network-debuginfo-11.0.0-150700.4.30.1 * libvirt-devel-11.0.0-150700.4.30.1 * libvirt-daemon-hooks-11.0.0-150700.4.30.1 * libvirt-daemon-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-mpath-11.0.0-150700.4.30.1 * libvirt-daemon-driver-nodedev-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-scsi-11.0.0-150700.4.30.1 * libvirt-daemon-plugin-lockd-debuginfo-11.0.0-150700.4.30.1 * libvirt-nss-debuginfo-11.0.0-150700.4.30.1 * libvirt-nss-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-mpath-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-nwfilter-debuginfo-11.0.0-150700.4.30.1 * libvirt-client-qemu-11.0.0-150700.4.30.1 * Server Applications Module 15-SP7 (x86_64) * libvirt-daemon-driver-libxl-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-libxl-11.0.0-150700.4.30.1 * libvirt-daemon-xen-11.0.0-150700.4.30.1 * Server Applications Module 15-SP7 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-debuginfo-11.0.0-150700.4.30.1 * libvirt-daemon-driver-storage-rbd-11.0.0-150700.4.30.1 * Server Applications Module 15-SP7 (noarch) * libvirt-doc-11.0.0-150700.4.30.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1265974 * https://bugzilla.suse.com/show_bug.cgi?id=1279561 * https://bugzilla.suse.com/show_bug.cgi?id=1280884 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:34:26 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:34:26 -0000 Subject: SUSE-SU-2026:4458-1: important: Security update for pcre2 Message-ID: <179121806698.19502.12794809239910154672@e7f4ad8d9866> # Security update for pcre2 Announcement ID: SUSE-SU-2026:4458-1 Release Date: 2026-10-05T10:52:03Z Rating: important References: * bsc#1277707 * bsc#1277708 * bsc#1277709 * bsc#1277710 * bsc#1277711 * bsc#1277713 * bsc#1279893 * bsc#1280050 * bsc#1280051 * bsc#1280052 * bsc#1280053 * bsc#1280054 Cross-References: * CVE-2026-86145 * CVE-2026-89156 * CVE-2026-89157 * CVE-2026-89158 * CVE-2026-89160 * CVE-2026-89161 CVSS scores: * CVE-2026-86145 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-86145 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-86145 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89156 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89156 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89156 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89156 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89157 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89157 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89157 ( NVD ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89157 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89158 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89158 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89158 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89158 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89160 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89160 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-89160 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89161 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89161 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89161 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities and has six security fixes can now be installed. ## Description: This update for pcre2 fixes the following issues: * CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). * CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). * CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). * CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). * CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). * CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4458 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4458 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4458 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4458 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4458 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4458 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4458 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4458 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4458 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4458 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4458 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4458 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4458 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4458 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-tools-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * pcre2-tools-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * pcre2-devel-static-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * openSUSE Leap 15.4 (x86_64) * libpcre2-8-0-32bit-10.39-150400.4.12.1 * libpcre2-16-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-32-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-32bit-10.39-150400.4.12.1 * libpcre2-32-0-32bit-10.39-150400.4.12.1 * libpcre2-16-0-32bit-10.39-150400.4.12.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpcre2-16-0-64bit-10.39-150400.4.12.1 * libpcre2-32-0-64bit-10.39-150400.4.12.1 * libpcre2-8-0-64bit-10.39-150400.4.12.1 * libpcre2-16-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-64bit-10.39-150400.4.12.1 * libpcre2-8-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-32-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-64bit-debuginfo-10.39-150400.4.12.1 * openSUSE Leap 15.4 (noarch) * pcre2-doc-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86145.html * https://www.suse.com/security/cve/CVE-2026-89156.html * https://www.suse.com/security/cve/CVE-2026-89157.html * https://www.suse.com/security/cve/CVE-2026-89158.html * https://www.suse.com/security/cve/CVE-2026-89160.html * https://www.suse.com/security/cve/CVE-2026-89161.html * https://bugzilla.suse.com/show_bug.cgi?id=1277707 * https://bugzilla.suse.com/show_bug.cgi?id=1277708 * https://bugzilla.suse.com/show_bug.cgi?id=1277709 * https://bugzilla.suse.com/show_bug.cgi?id=1277710 * https://bugzilla.suse.com/show_bug.cgi?id=1277711 * https://bugzilla.suse.com/show_bug.cgi?id=1277713 * https://bugzilla.suse.com/show_bug.cgi?id=1279893 * https://bugzilla.suse.com/show_bug.cgi?id=1280050 * https://bugzilla.suse.com/show_bug.cgi?id=1280051 * https://bugzilla.suse.com/show_bug.cgi?id=1280052 * https://bugzilla.suse.com/show_bug.cgi?id=1280053 * https://bugzilla.suse.com/show_bug.cgi?id=1280054 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:35:24 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:35:24 -0000 Subject: SUSE-SU-2026:4457-1: important: Security update for rpm Message-ID: <179121812424.19502.10329592033337187682@e7f4ad8d9866> # Security update for rpm Announcement ID: SUSE-SU-2026:4457-1 Release Date: 2026-10-05T10:50:29Z Rating: important References: * bsc#1240054 * bsc#1269584 Cross-References: * CVE-2026-44605 CVSS scores: * CVE-2026-44605 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44605 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-44605 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for rpm fixes the following issue: Security issues fixed: * CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584). Other updates and bugfixes: * Fix `libelf` handle not being closed, resulting in build errors when using a NFS buildroot (bsc#1240054). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4457 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4457 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4457 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-devel-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-build-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-build-debuginfo-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python2-rpm-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 * python2-rpm-debuginfo-4.14.3-150300.58.1 * openSUSE Leap 15.3 (x86_64) * rpm-32bit-debuginfo-4.14.3-150300.58.1 * rpm-ndb-32bit-4.14.3-150300.58.1 * rpm-ndb-32bit-debuginfo-4.14.3-150300.58.1 * rpm-32bit-4.14.3-150300.58.1 * openSUSE Leap 15.3 (aarch64_ilp32) * rpm-ndb-64bit-4.14.3-150300.58.1 * rpm-64bit-4.14.3-150300.58.1 * rpm-ndb-64bit-debuginfo-4.14.3-150300.58.1 * rpm-64bit-debuginfo-4.14.3-150300.58.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44605.html * https://bugzilla.suse.com/show_bug.cgi?id=1240054 * https://bugzilla.suse.com/show_bug.cgi?id=1269584 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:36:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:36:21 -0000 Subject: SUSE-SU-2026:4456-1: moderate: Security update for sssd Message-ID: <179121818136.19502.17318745123930212082@e7f4ad8d9866> # Security update for sssd Announcement ID: SUSE-SU-2026:4456-1 Release Date: 2026-10-05T10:49:55Z Rating: moderate References: * bsc#1269807 * bsc#1273925 Cross-References: * CVE-2026-12610 * CVE-2026-68743 CVSS scores: * CVE-2026-12610 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-12610 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-12610 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68743 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68743 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68743 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68743 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925). * CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4456 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4456 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * libnfsidmap-sss-2.5.2-150500.10.49.1 * sssd-proxy-debuginfo-2.5.2-150500.10.49.1 * libsss_nss_idmap0-2.5.2-150500.10.49.1 * sssd-dbus-2.5.2-150500.10.49.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libipa_hbac0-2.5.2-150500.10.49.1 * libsss_certmap0-2.5.2-150500.10.49.1 * sssd-kcm-debuginfo-2.5.2-150500.10.49.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.49.1 * python3-sss_nss_idmap-2.5.2-150500.10.49.1 * libsss_certmap-devel-2.5.2-150500.10.49.1 * sssd-debugsource-2.5.2-150500.10.49.1 * sssd-krb5-common-2.5.2-150500.10.49.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.49.1 * libsss_simpleifp-devel-2.5.2-150500.10.49.1 * sssd-common-2.5.2-150500.10.49.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.49.1 * sssd-kcm-2.5.2-150500.10.49.1 * libipa_hbac-devel-2.5.2-150500.10.49.1 * sssd-tools-2.5.2-150500.10.49.1 * sssd-ad-debuginfo-2.5.2-150500.10.49.1 * sssd-proxy-2.5.2-150500.10.49.1 * sssd-ipa-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.49.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.49.1 * sssd-2.5.2-150500.10.49.1 * sssd-krb5-debuginfo-2.5.2-150500.10.49.1 * sssd-winbind-idmap-2.5.2-150500.10.49.1 * sssd-dbus-debuginfo-2.5.2-150500.10.49.1 * python3-sss-murmur-2.5.2-150500.10.49.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.49.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.49.1 * libsss_nss_idmap-devel-2.5.2-150500.10.49.1 * libsss_idmap-devel-2.5.2-150500.10.49.1 * libsss_idmap0-2.5.2-150500.10.49.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.49.1 * sssd-ad-2.5.2-150500.10.49.1 * python3-ipa_hbac-2.5.2-150500.10.49.1 * sssd-ldap-2.5.2-150500.10.49.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.49.1 * python3-sssd-config-2.5.2-150500.10.49.1 * libsss_simpleifp0-2.5.2-150500.10.49.1 * sssd-ipa-2.5.2-150500.10.49.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.49.1 * sssd-tools-debuginfo-2.5.2-150500.10.49.1 * sssd-krb5-2.5.2-150500.10.49.1 * sssd-ldap-debuginfo-2.5.2-150500.10.49.1 * sssd-common-debuginfo-2.5.2-150500.10.49.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-debuginfo-2.5.2-150500.10.49.1 * sssd-common-32bit-2.5.2-150500.10.49.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.49.1 * sssd-common-64bit-2.5.2-150500.10.49.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsss_nss_idmap0-2.5.2-150500.10.49.1 * sssd-dbus-2.5.2-150500.10.49.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-2.5.2-150500.10.49.1 * sssd-debugsource-2.5.2-150500.10.49.1 * sssd-krb5-common-2.5.2-150500.10.49.1 * sssd-common-2.5.2-150500.10.49.1 * sssd-tools-2.5.2-150500.10.49.1 * sssd-ad-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.49.1 * sssd-2.5.2-150500.10.49.1 * sssd-krb5-debuginfo-2.5.2-150500.10.49.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-2.5.2-150500.10.49.1 * sssd-ad-2.5.2-150500.10.49.1 * sssd-ldap-2.5.2-150500.10.49.1 * python3-sssd-config-2.5.2-150500.10.49.1 * sssd-krb5-2.5.2-150500.10.49.1 * sssd-ldap-debuginfo-2.5.2-150500.10.49.1 * sssd-common-debuginfo-2.5.2-150500.10.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12610.html * https://www.suse.com/security/cve/CVE-2026-68743.html * https://bugzilla.suse.com/show_bug.cgi?id=1269807 * https://bugzilla.suse.com/show_bug.cgi?id=1273925 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:37:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:37:17 -0000 Subject: SUSE-SU-2026:4447-1: low: Security update for cups Message-ID: <179121823773.19502.6365063753833934273@e7f4ad8d9866> # Security update for cups Announcement ID: SUSE-SU-2026:4447-1 Release Date: 2026-10-05T08:21:09Z Rating: low References: * bsc#1263116 Cross-References: * CVE-2026-41079 CVSS scores: * CVE-2026-41079 ( SUSE ): 5.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41079 ( SUSE ): 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41079 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41079 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cups fixes the following issue: * CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4447 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cups-debuginfo-1.7.5-20.73.1 * cups-libs-debuginfo-1.7.5-20.73.1 * cups-libs-1.7.5-20.73.1 * cups-libs-debuginfo-32bit-1.7.5-20.73.1 * cups-libs-32bit-1.7.5-20.73.1 * cups-client-1.7.5-20.73.1 * cups-devel-1.7.5-20.73.1 * cups-1.7.5-20.73.1 * cups-debugsource-1.7.5-20.73.1 * cups-client-debuginfo-1.7.5-20.73.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41079.html * https://bugzilla.suse.com/show_bug.cgi?id=1263116 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:37:57 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:37:57 -0000 Subject: SUSE-SU-2026:4446-1: important: Security update for rpcbind Message-ID: <179121827746.19502.4650090949610848059@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:4446-1 Release Date: 2026-10-05T08:20:57Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4446 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4446 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-24.18.1 * rpcbind-0.2.3-24.18.1 * rpcbind-debugsource-0.2.3-24.18.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * rpcbind-debuginfo-0.2.3-24.18.1 * rpcbind-0.2.3-24.18.1 * rpcbind-debugsource-0.2.3-24.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:38:36 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:38:36 -0000 Subject: SUSE-SU-2026:4445-1: moderate: Security update for rubygem-rails-html-sanitizer Message-ID: <179121831643.19502.7467311507059280092@e7f4ad8d9866> # Security update for rubygem-rails-html-sanitizer Announcement ID: SUSE-SU-2026:4445-1 Release Date: 2026-10-05T08:20:40Z Rating: moderate References: * bsc#1275199 Cross-References: * CVE-2026-73648 CVSS scores: * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for rubygem-rails-html-sanitizer fixes the following issue: * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275199). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4445 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1275199 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:39:19 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:39:19 -0000 Subject: SUSE-SU-2026:4444-1: critical: Security update for terraform-provider-susepubliccloud Message-ID: <179121835912.19502.1230651719472288825@e7f4ad8d9866> # Security update for terraform-provider-susepubliccloud Announcement ID: SUSE-SU-2026:4444-1 Release Date: 2026-10-05T08:19:35Z Rating: critical References: * bsc#1278763 * bsc#1279072 * bsc#1279252 * bsc#1280841 Cross-References: * CVE-2026-84303 * CVE-2026-84304 * CVE-2026-84445 * CVE-2026-88922 CVSS scores: * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-88922 ( SUSE ): 5.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88922 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88922 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for terraform-provider-susepubliccloud fixes the following issues: * CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279252). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279072). * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278763). * CVE-2026-88922: github.com/hashicorp/go-getter: improper metadata handling in archive decompression allows for creation of files with elevated permission bits and possible LPE (bsc#1280841). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4444 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4444 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * terraform-provider-susepubliccloud-0.0.1-150100.3.26.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * terraform-provider-susepubliccloud-0.0.1-150100.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://www.suse.com/security/cve/CVE-2026-84445.html * https://www.suse.com/security/cve/CVE-2026-88922.html * https://bugzilla.suse.com/show_bug.cgi?id=1278763 * https://bugzilla.suse.com/show_bug.cgi?id=1279072 * https://bugzilla.suse.com/show_bug.cgi?id=1279252 * https://bugzilla.suse.com/show_bug.cgi?id=1280841 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:39:58 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:39:58 -0000 Subject: SUSE-SU-2026:4443-1: important: Security update for python-msgpack Message-ID: <179121839867.19502.13101987472688345268@e7f4ad8d9866> # Security update for python-msgpack Announcement ID: SUSE-SU-2026:4443-1 Release Date: 2026-10-05T08:18:51Z Rating: important References: * bsc#1269947 Cross-References: * CVE-2026-57585 CVSS scores: * CVE-2026-57585 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-57585 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-msgpack fixes the following issue * CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of- bounds read and a crash (bsc#1269947). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4443 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4443 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4443 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4443 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-57585.html * https://bugzilla.suse.com/show_bug.cgi?id=1269947 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:40:55 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 16:40:55 -0000 Subject: SUSE-SU-2026:4442-1: moderate: Security update for perl-DBI Message-ID: <179121845591.19502.1593442166842548709@e7f4ad8d9866> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4442-1 Release Date: 2026-10-05T08:18:25Z Rating: moderate References: * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4442 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * perl-DBI-debuginfo-1.628-5.29.1 * perl-DBI-1.628-5.29.1 * perl-DBI-debugsource-1.628-5.29.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:30:32 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:30:32 -0000 Subject: SUSE-SU-2026:4514-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123223248.29870.8595677136381732175@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4514-1 Release Date: 2026-10-05T15:35:52Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4514 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_78-default-debuginfo-3-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-3-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_20-debugsource-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:31:31 -0000 Subject: SUSE-SU-2026:4513-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123229189.29870.2195604654676569093@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4513-1 Release Date: 2026-10-05T15:35:41Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4513 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_73-default-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-debuginfo-4-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_19-debugsource-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:32:35 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:32:35 -0000 Subject: SUSE-SU-2026:4498-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Message-ID: <179123235523.29870.14117795055844112411@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4498-1 Release Date: 2026-10-05T13:34:45Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4498 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4498 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_125-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-4-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_125-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-4-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:33:40 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:33:40 -0000 Subject: SUSE-SU-2026:4497-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123242029.29870.10954294805132269336@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4497-1 Release Date: 2026-10-05T13:34:28Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4497 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4497 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-3-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-3-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:34:50 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:34:50 -0000 Subject: SUSE-SU-2026:4495-1: important: Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123249044.29870.7999469793559734882@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4495-1 Release Date: 2026-10-05T14:04:13Z Rating: important References: * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4499 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4495 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4499 SUSE-2026-4495 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-4-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-4-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-4-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-4-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:36:09 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:36:09 -0000 Subject: SUSE-SU-2026:4489-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123256974.29870.2485882282594921488@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4489-1 Release Date: 2026-10-05T15:35:03Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4489 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4489 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4503 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4496 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4504 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4505 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4506 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4508 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4509 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4510 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-15-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-15-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-15-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-15-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_31-default-12-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-debuginfo-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-debuginfo-12-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_10-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-8-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_8-debugsource-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_15-debugsource-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_12-debugsource-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-7-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_11-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-debuginfo-10-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_13-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_14-debugsource-7-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_9-debugsource-12-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-debuginfo-10-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:37:29 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:37:29 -0000 Subject: SUSE-SU-2026:4511-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123264908.29870.11261780690183325962@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4511-1 Release Date: 2026-10-05T15:35:26Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4511 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4512 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4487 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_63-default-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-5-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_17-debugsource-5-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_16-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-6-150700.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_59-rt-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_16-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-6-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:38:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:38:25 -0000 Subject: SUSE-SU-2026:4507-1: important: Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123270507.29870.5969366184072031900@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4507-1 Release Date: 2026-10-05T15:34:31Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4507 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4507 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4486 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4490 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4488 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4490 SUSE-2026-4488 SUSE-2026-4486 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-7-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-6-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-6-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:39:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:39:25 -0000 Subject: SUSE-SU-2026:4515-1: moderate: Security update for java-11-openjdk Message-ID: <179123276577.29870.16784517388197030061@c47cdf24d69a> # Security update for java-11-openjdk Announcement ID: SUSE-SU-2026:4515-1 Release Date: 2026-10-05T15:41:51Z Rating: moderate References: * bsc#1275035 * bsc#1275764 * bsc#1275777 * bsc#1275778 Cross-References: * CVE-2026-60589 * CVE-2026-61308 * CVE-2026-70907 CVSS scores: * CVE-2026-60589 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-60589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-61308 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-61308 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-70907 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-70907 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for java-11-openjdk fixes the following issues: * CVE-2026-60589: improve resource resolving (bsc#1275777). * CVE-2026-61308: enhance HTTP connections (bsc#1275778). * CVE-2026-70907: enhance TLS server (bsc#1275764). Changes for java-11-openjdk: * Upgrade to jdk-11.0.32.1+1 (August 2026 CSPU) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4515 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4515 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.32.1-3.105.1 * java-11-openjdk-debugsource-11.0.32.1-3.105.1 * java-11-openjdk-demo-11.0.32.1-3.105.1 * java-11-openjdk-headless-11.0.32.1-3.105.1 * java-11-openjdk-11.0.32.1-3.105.1 * java-11-openjdk-debuginfo-11.0.32.1-3.105.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * java-11-openjdk-devel-11.0.32.1-3.105.1 * java-11-openjdk-debugsource-11.0.32.1-3.105.1 * java-11-openjdk-demo-11.0.32.1-3.105.1 * java-11-openjdk-headless-11.0.32.1-3.105.1 * java-11-openjdk-11.0.32.1-3.105.1 * java-11-openjdk-debuginfo-11.0.32.1-3.105.1 ## References: * https://www.suse.com/security/cve/CVE-2026-60589.html * https://www.suse.com/security/cve/CVE-2026-61308.html * https://www.suse.com/security/cve/CVE-2026-70907.html * https://bugzilla.suse.com/show_bug.cgi?id=1275035 * https://bugzilla.suse.com/show_bug.cgi?id=1275764 * https://bugzilla.suse.com/show_bug.cgi?id=1275777 * https://bugzilla.suse.com/show_bug.cgi?id=1275778 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:40:08 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:40:08 -0000 Subject: SUSE-SU-2026:4502-1: important: Security update for libX11 Message-ID: <179123280866.29870.5122991460582802383@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4502-1 Release Date: 2026-10-05T15:04:05Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4502 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libX11-xcb1-1.8.10-150700.4.8.1 * libX11-6-debuginfo-1.8.10-150700.4.8.1 * libX11-devel-1.8.10-150700.4.8.1 * libX11-xcb1-debuginfo-1.8.10-150700.4.8.1 * libX11-debugsource-1.8.10-150700.4.8.1 * libX11-6-1.8.10-150700.4.8.1 * Basesystem Module 15-SP7 (x86_64) * libX11-xcb1-32bit-1.8.10-150700.4.8.1 * libX11-xcb1-32bit-debuginfo-1.8.10-150700.4.8.1 * libX11-6-32bit-1.8.10-150700.4.8.1 * libX11-6-32bit-debuginfo-1.8.10-150700.4.8.1 * Basesystem Module 15-SP7 (noarch) * libX11-data-1.8.10-150700.4.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:40:51 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:40:51 -0000 Subject: SUSE-SU-2026:4501-1: important: Security update for libX11 Message-ID: <179123285154.29870.3729344820384881202@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4501-1 Release Date: 2026-10-05T15:03:26Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4501 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4501 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4501 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libX11-data-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (x86_64) * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-devel-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libX11-6-64bit-1.8.7-150600.3.11.1 * libX11-xcb1-64bit-debuginfo-1.8.7-150600.3.11.1 * libX11-devel-64bit-1.8.7-150600.3.11.1 * libX11-xcb1-64bit-1.8.7-150600.3.11.1 * libX11-6-64bit-debuginfo-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (noarch) * libX11-data-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libX11-data-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:41:51 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:41:51 -0000 Subject: SUSE-SU-2026:4500-1: important: Security update for libX11 Message-ID: <179123291128.29870.18000774130792729276@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4500-1 Release Date: 2026-10-05T15:03:01Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4500 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4500 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4500 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4500 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4500 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4500 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4500 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4500 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4500 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4500 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4500 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4500 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4500 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libX11-data-1.6.5-150000.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:42:33 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:42:33 -0000 Subject: SUSE-SU-2026:4494-1: important: Security update for wpa_supplicant Message-ID: <179123295353.29870.5730490784323214418@c47cdf24d69a> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4494-1 Release Date: 2026-10-05T13:23:04Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). * Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4494 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4494 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debuginfo-2.9-23.26.1 * wpa_supplicant-2.9-23.26.1 * wpa_supplicant-debugsource-2.9-23.26.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * wpa_supplicant-debuginfo-2.9-23.26.1 * wpa_supplicant-2.9-23.26.1 * wpa_supplicant-debugsource-2.9-23.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:43:12 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:43:12 -0000 Subject: SUSE-SU-2026:4493-1: important: Security update for valkey Message-ID: <179123299260.29870.15605659110428158013@c47cdf24d69a> # Security update for valkey Announcement ID: SUSE-SU-2026:4493-1 Release Date: 2026-10-05T13:22:49Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4493 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * valkey-debuginfo-8.0.10-150700.3.26.1 * valkey-devel-8.0.10-150700.3.26.1 * valkey-debugsource-8.0.10-150700.3.26.1 * valkey-8.0.10-150700.3.26.1 * Server Applications Module 15-SP7 (noarch) * valkey-compat-redis-8.0.10-150700.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:43:51 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:43:51 -0000 Subject: SUSE-SU-2026:4492-1: important: Security update for wpa_supplicant Message-ID: <179123303189.29870.13190281908861953136@c47cdf24d69a> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4492-1 Release Date: 2026-10-05T13:22:34Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2025-24912 * CVE-2026-78807 CVSS scores: * CVE-2025-24912 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-24912 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4492 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4492 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4492 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * wpa_supplicant-gui-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-gui-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 ## References: * https://www.suse.com/security/cve/CVE-2025-24912.html * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:44:47 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 05 Oct 2026 20:44:47 -0000 Subject: SUSE-SU-2026:4491-1: important: Security update for valkey Message-ID: <179123308795.29870.16205518541662282029@c47cdf24d69a> # Security update for valkey Announcement ID: SUSE-SU-2026:4491-1 Release Date: 2026-10-05T13:22:16Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4491 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4491 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4491 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * openSUSE Leap 15.6 (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:30:51 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:30:51 -0000 Subject: SUSE-SU-2026:24010-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179127545127.346.6399755902164562031@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24010-1 Release Date: 2026-10-05T04:52:11Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1826 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:31:56 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:31:56 -0000 Subject: SUSE-SU-2026:24009-1: important: Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179127551642.346.15600452862941159150@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24009-1 Release Date: 2026-10-02T10:28:57Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1820 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_5-rt-17-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-debuginfo-17-160000.3.4 * kernel-livepatch-SLE16-RT_Update_0-debugsource-17-160000.3.4 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:33:01 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:33:01 -0000 Subject: SUSE-SU-2026:24008-1: important: Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179127558185.346.1059748378005556557@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24008-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1819 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:34:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:34:07 -0000 Subject: SUSE-SU-2026:24007-1: important: Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179127564736.346.12872005647113253337@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24007-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1818 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:35:12 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:35:12 -0000 Subject: SUSE-SU-2026:24006-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179127571274.346.5205853604869239329@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24006-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1817 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_8-rt-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16-RT_Update_3-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:36:18 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:36:18 -0000 Subject: SUSE-SU-2026:24005-1: important: Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179127577804.346.8979334407530362283@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24005-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1816 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_9-rt-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16-RT_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:37:22 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:37:22 -0000 Subject: SUSE-SU-2026:24004-1: important: Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179127584250.346.490220534578468509@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24004-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1815 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:38:27 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:38:27 -0000 Subject: SUSE-SU-2026:24003-1: important: Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179127590776.346.1345542545542220708@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24003-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1814 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_27-rt-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-11-160000.1.1 * kernel-livepatch-SLE16-RT_Update_6-debugsource-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:39:32 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:39:32 -0000 Subject: SUSE-SU-2026:24002-1: important: Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179127597281.346.17304999242543260373@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24002-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1813 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_28-rt-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16-RT_Update_7-debugsource-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:40:39 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:40:39 -0000 Subject: SUSE-SU-2026:24001-1: important: Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179127603950.346.667590337717267743@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24001-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1812 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_29-rt-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_8-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-rt-debuginfo-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:41:45 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:41:45 -0000 Subject: SUSE-SU-2026:24000-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179127610570.346.5395542351632876379@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24000-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1811 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_30-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-rt-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:42:49 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:42:49 -0000 Subject: SUSE-SU-2026:23999-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179127616973.346.524102714548704184@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23999-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1810 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_31-rt-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_10-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:43:54 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:43:54 -0000 Subject: SUSE-SU-2026:23998-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179127623454.346.11119259894228730578@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23998-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1809 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_32-rt-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_11-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:45:02 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:45:02 -0000 Subject: SUSE-SU-2026:23997-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179127630241.346.3082619372214628603@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23997-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1808 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_12-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:46:08 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:46:08 -0000 Subject: SUSE-SU-2026:23996-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179127636841.346.14223493843348544619@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23996-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1807 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_13-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:47:11 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:47:11 -0000 Subject: SUSE-SU-2026:23995-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179127643162.346.16947240785254581034@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23995-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1806 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_14-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:48:12 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:48:12 -0000 Subject: SUSE-SU-2026:23994-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179127649248.346.31971694575519614@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23994-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1805 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_36-rt-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16-RT_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:49:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:49:06 -0000 Subject: SUSE-SU-2026:23993-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179127654602.346.10082640991066016221@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23993-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1804 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_37-rt-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-rt-debuginfo-3-160000.1.1 * kernel-livepatch-SLE16-RT_Update_16-debugsource-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:50:02 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 08:50:02 -0000 Subject: SUSE-SU-2026:4516-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Message-ID: <179127660251.346.7378777617114085008@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4516-1 Release Date: 2026-10-05T18:33:42Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4516 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4516 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_121-default-19-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-19-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_30-debugsource-19-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_121-default-19-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-19-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_30-debugsource-19-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:30:45 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:30:45 -0000 Subject: SUSE-SU-2026:4540-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Message-ID: <179128984507.5544.12935734205724344152@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4540-1 Release Date: 2026-10-06T08:05:00Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4540 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4540 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-3-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-3-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:31:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:31:42 -0000 Subject: SUSE-SU-2026:4538-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7) Message-ID: <179128990240.5544.6911505122883548442@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4538-1 Release Date: 2026-10-06T08:04:35Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4538 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_81-default-2-150700.2.1 * kernel-livepatch-6_4_0-150700_53_81-default-debuginfo-2-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_21-debugsource-2-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:32:45 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:32:45 -0000 Subject: SUSE-SU-2026:4537-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179128996519.5544.18152323020673226477@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4537-1 Release Date: 2026-10-06T08:04:23Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4537 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_18-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-5-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:33:34 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:33:34 -0000 Subject: SUSE-SU-2026:4536-1: important: Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5) Message-ID: <179129001473.5544.4421225765542545051@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4536-1 Release Date: 2026-10-06T08:04:12Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4536 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_283-default-14-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:34:24 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:34:24 -0000 Subject: SUSE-SU-2026:4531-1: important: Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) Message-ID: <179129006464.5544.8939312232372134452@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4531-1 Release Date: 2026-10-06T06:33:54Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4531 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4531 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-3-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-3-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-3-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-3-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:35:37 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:35:37 -0000 Subject: SUSE-SU-2026:4530-1: important: Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) Message-ID: <179129013796.5544.1459026520539648219@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4530-1 Release Date: 2026-10-06T08:05:19Z Rating: important References: * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4530 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4541 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4530 SUSE-2026-4541 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_57-debugsource-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-4-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_57-debugsource-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-4-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:37:02 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:37:02 -0000 Subject: SUSE-SU-2026:4518-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) Message-ID: <179129022249.5544.3607583602482283193@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4518-1 Release Date: 2026-10-06T08:04:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4518 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4518 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4539 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-10-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-10-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_16-default-18-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_4-debugsource-18-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-debuginfo-18-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:38:17 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:38:17 -0000 Subject: SUSE-SU-2026:4519-1: important: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Message-ID: <179129029718.5544.6318289657440282199@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4519-1 Release Date: 2026-10-06T02:33:49Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4519 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4519 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4517 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4517 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_50-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-10-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_50-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-10-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_33-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-14-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_33-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:39:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:39:19 -0000 Subject: SUSE-SU-2026:4535-1: important: Security update for docker-stable Message-ID: <179129035933.5544.14371981165251732215@b6db9e7d26e0> # Security update for docker-stable Announcement ID: SUSE-SU-2026:4535-1 Release Date: 2026-10-06T08:00:15Z Rating: important References: * bsc#1260279 * bsc#1265782 * bsc#1266625 * bsc#1267827 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-41567 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for docker-stable fixes the following issues: * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4535 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4535 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4535 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4535 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4535 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4535 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4535 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4535 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4535 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4535 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4535 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * Containers Module 15-SP7 (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1260279 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:40:26 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:40:26 -0000 Subject: SUSE-SU-2026:4534-1: important: Security update for python312 Message-ID: <179129042613.5544.12689342928112052783@b6db9e7d26e0> # Security update for python312 Announcement ID: SUSE-SU-2026:4534-1 Release Date: 2026-10-06T07:58:39Z Rating: important References: * bsc#1259240 * bsc#1259611 * bsc#1259735 * bsc#1260026 * bsc#1261969 * bsc#1262098 * bsc#1264962 * bsc#1265268 * bsc#1267581 * bsc#1267821 * bsc#1267974 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1271192 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 Cross-References: * CVE-2021-4189 * CVE-2025-13462 * CVE-2025-4330 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19672 * CVE-2026-2297 * CVE-2026-3276 * CVE-2026-3644 * CVE-2026-4224 * CVE-2026-4360 * CVE-2026-45186 * CVE-2026-4519 * CVE-2026-4786 * CVE-2026-6100 * CVE-2026-7210 * CVE-2026-72522 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-9669 CVSS scores: * CVE-2021-4189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-4189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-4189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-13462 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-13462 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-13462 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13462 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-4330 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2297 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2297 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-2297 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3644 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-3644 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4519 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N * CVE-2026-4519 ( SUSE ): 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N * CVE-2026-4519 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4519 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 26 vulnerabilities can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). * CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). * CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). * CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240). * CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). * CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026). * CVE-2026-6100: Arbitrary code execution or information disclosure via use- after-free in decompression modules (bsc#1262098). * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). * CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server- supplied PASV host address (bsc#1265268). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). * CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). * CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python312: * Update to 3.12.14: * Core and Builtins * gh-139808: Add branch protections for AArch64 (BTI/PAC) in assembly code used by -X perf_jit (Linux perf profiler integration). * Documentation * gh-136155: We are now checking for fatal errors in EPUB builds in CI. * Library * gh-109638: Fix exponential time in csv.Sniffer.sniff() for a sample which contains many quote characters. A doubled quote character is now also detected in a field which contains the delimiter or a line break. * gh-98820: Fix quadratic time in csv.Sniffer.sniff() for a sample which contains quoted fields, in particular for a single column of quoted fields. * gh-149231: In tomllib, the number of parts in TOML keys is now limited. * gh-146083: Update bundled libexpat to version 2.7.5. * gh-141707: Don't change tarfile.TarInfo type from AREGTYPE to DIRTYPE when parsing GNU long name or link headers (bsc#1259611, CVE-2025-13462). * gh-90949: Add SetBillionLaughsAttackProtectionActivationThreshold() and SetBillionLaughsAttackProtectionMaximumAmplification() to xmlparser objects to tune protections against billion laughs attacks. Patch by B?n?dikt Tran. * Security * gh-155558: Update bundled libexpat to version 2.8.3 for the fix to CVE 2026-72522. * gh-153030: Fixed quadratic complexity in incremental parsing of long unterminated constructs (such as tags or comments) in html.parser.HTMLParser, which could be exploited for a denial of service (bsc#1271192, CVE-2026-15308). * gh-152674: The xml.etree.ElementTree.Element methods findall(), iterfind() and find() avoid quadratic behavior when using XPath index predicates ([1], [last()], [last()-N]) on XML documents with many same-tag siblings. * gh-152216: Update bundled libexpat to version 2.8.2. * gh-151987: The tarfile.TarFile.extract() method now applies the given filter when it extracts a link target from the archive as a fallback (bsc#1269959, CVE-2026-4360). * gh-151981: In tarfile, seeking a stream now stops when end of the stream is reached (bsc#1269788, CVE-2026-11972). * gh-151544: Modules/Setup.local is no longer used as a landmark to discover whether Python is running in a source tree, as it could potentially affect actual installs. The pybuilddir.txt file is now the sole indicator of running in a source tree. * gh-151558: Fixed an vulnerability in the tarfile data and tar extraction filters where crafted archives could create a symlink pointing outside the destination directory. This was a bypass of CVE 2025-4330 (bsc#1268977, CVE-2026-11940). * gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error. The decompressor now becomes unusable after libbz2 reports an error (bsc#1267974, CVE-2026-9669). * gh-150743: http.client now limits the number of chunked-response trailer lines it will read to 100, and the number of interim (1xx) responses it will skip to 100. A malicious or broken server could previously stream trailer lines or 100 Continue responses forever, hanging the client even when a socket timeout was in use. Reported by @YLChen-007 via GHSA-w4q2-g22w-6fr4. * gh-149698: Update bundled libexpat to version 2.8.1 for the fix for CVE 2026-45186. * gh-87451: The ftplib module's undocumented ftpcp function no longer trusts the IPv4 address value returned from the source server in response to the PASV command by default, completing the fix for CVE-2021-4189. As with ftplib.FTP, the former behavior can be re-enabled by setting the trust_server_pasv_ipv4_address attribute on the source ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape AI for the report (bsc#1265268, CVE-2026-8328). * gh-149486: tarfile.data_filter() now validates link targets using the same normalised value that is written to disk, strips trailing separators from the member name when resolving a symlink's directory, and rejects link members that would replace the destination directory itself. This closes several path-traversal bypasses of the data extraction filter (bsc#1267821, CVE-2026-7774). * gh-149079: Fix a potential denial of service in unicodedata.normalize(). The canonical ordering step of Unicode normalization used a quadratic-time insertion sort for reordering combining characters, which could be exploited with crafted input containing many combining characters in non-canonical order. Replaced with a linear-time counting sort for long runs (bsc#1267581, CVE-2026-3276). * gh-149018: Improved protection against XML hash-flooding attacks in xml.parsers.expat and xml.etree.ElementTree when Python is compiled with libExpat 2.8.0 or later (bsc#1264962, CVE-2026-7210). * gh-149017: Update bundled libexpat to version 2.8.0. * gh-148808: Added buffer boundary check when using nbytes parameter with asyncio.AbstractEventLoop.sock_recvfrom_into(). Only relevant for Windows and the asyncio.ProactorEventLoop. * gh-148395: Fix a dangling input pointer in lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal zlib._ZlibDecompressor when memory allocation fails with MemoryError, which could let a subsequent decompress() call read or write through a stale pointer to the already-released caller buffer (bsc#1262098, CVE-2026-6100, seems like it has been incompletely applied gh#python/cpython#151605). * gh-148169: A bypass in webbrowser allowed URLs prefixed with %action to pass the dash-prefix safety check (bsc#1262098, CVE-2026-6100). * gh-146581: Fix vulnerability in shutil.unpack_archive() for ZIP files on Windows which allowed to write files outside of the destination tree if the patch in the archive contains a Windows drive prefix. Now such invalid paths will be skipped. Files containing ".." in the name (like "foo..bar") are no longer skipped. * gh-146333: Fix quadratic backtracking in configparser.RawConfigParser option parsing regexes (OPTCRE and OPTCRE_NV). A crafted configuration line with many whitespace characters could cause excessive CPU usage. * gh-146211: Reject CR/LF characters in tunnel request headers for the HTTPConnection.set_tunnel() method (bsc#1261969, CVE-2026-1502). * gh-145986: xml.parsers.expat: Fixed a crash caused by unbounded C recursion when converting deeply nested XML content models with ElementDeclHandler(). This addresses CVE 2026-4224 (bsc#1259735, CVE-2026-4224). * gh-145599: Reject control characters in http.cookies.Morsel update() and js_output(). This addresses CVE 2026-3644. * gh-145506: Fixes CVE 2026-2297 by ensuring that SourcelessFileLoader uses io.open_code() when opening .pyc files (bsc#1259240, CVE-2026-2297). * gh-144370: Disallow usage of control characters in status in wsgiref.handlers to prevent HTTP header injections. Patch by Benedikt Johannes. * gh-143930: Reject leading dashes in URLs passed to webbrowser.open() (bsc#1260026, CVE-2026-4519). * gh-143927: Normalize all line endings (CR, CRLF, and LF) to LF+TAB when writing multi-line configparser values (bsc#1269066, CVE-2026-0864). * Tests * gh-149776: Fix test_socket on Linux kernel 7.1 and newer: skip UDP Lite tests if it's not supported. Patch by Victor Stinner. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4534 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4534 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4534 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python312-curses-3.12.14-150600.3.68.1 * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-doc-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 * python312-testsuite-debuginfo-3.12.14-150600.3.68.1 * python312-doc-devhelp-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-testsuite-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-curses-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (x86_64) * libpython3_12-1_0-32bit-3.12.14-150600.3.68.1 * python312-base-32bit-debuginfo-3.12.14-150600.3.68.1 * python312-32bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-32bit-debuginfo-3.12.14-150600.3.68.1 * python312-base-32bit-3.12.14-150600.3.68.1 * python312-32bit-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-3.12.14-150600.3.68.1 * python312-64bit-3.12.14-150600.3.68.1 * python312-64bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-64bit-3.12.14-150600.3.68.1 * python312-base-64bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-64bit-debuginfo-3.12.14-150600.3.68.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python312-curses-3.12.14-150600.3.68.1 * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2021-4189.html * https://www.suse.com/security/cve/CVE-2025-13462.html * https://www.suse.com/security/cve/CVE-2025-4330.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-2297.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3644.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-4519.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1259240 * https://bugzilla.suse.com/show_bug.cgi?id=1259611 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1260026 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:41:28 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:41:28 -0000 Subject: SUSE-SU-2026:4533-1: important: Security update for docker-stable Message-ID: <179129048804.5544.418396164853988514@b6db9e7d26e0> # Security update for docker-stable Announcement ID: SUSE-SU-2026:4533-1 Release Date: 2026-10-06T07:58:14Z Rating: important References: * bsc#1260279 * bsc#1265782 * bsc#1266625 * bsc#1267827 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-41567 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for docker-stable fixes the following issues: * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4533 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4533 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-24.0.9_ce-1.40.1 * docker-stable-debuginfo-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * docker-stable-24.0.9_ce-1.40.1 * docker-stable-debuginfo-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * docker-stable-bash-completion-24.0.9_ce-1.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1260279 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:42:08 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:42:08 -0000 Subject: SUSE-SU-2026:4532-1: moderate: Security update for openexr Message-ID: <179129052802.5544.12840212138556223367@b6db9e7d26e0> # Security update for openexr Announcement ID: SUSE-SU-2026:4532-1 Release Date: 2026-10-06T07:57:59Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4532 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openexr-devel-2.1.0-6.54.1 * libIlmImf-Imf_2_1-21-debuginfo-2.1.0-6.54.1 * openexr-debuginfo-2.1.0-6.54.1 * libIlmImf-Imf_2_1-21-2.1.0-6.54.1 * openexr-2.1.0-6.54.1 * openexr-debugsource-2.1.0-6.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:42:46 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:42:46 -0000 Subject: SUSE-RU-2026:4529-1: important: Recommended update for scap-security-guide Message-ID: <179129056663.5544.9729248773474166391@b6db9e7d26e0> # Recommended update for scap-security-guide Announcement ID: SUSE-RU-2026:4529-1 Release Date: 2026-10-06T06:29:33Z Rating: important References: * jsc#ECO-3319 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: * updated to 0.1.82: (jsc#ECO-3319): * Add KylinSecServer6 OS baseline support * Add new product for Ubuntu 26.04 and a default profile * Create RHEL 10 STIG control file * Debian13 20260702 * Various updates for SLE 12/15/16 * Various updates for SLEM 5/6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4529 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4529 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4529 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4529 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4529 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4529 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4529 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4529 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4529 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4529 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4529 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4529 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4529 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4529 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4529 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4529 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Micro 5.3 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * Basesystem Module 15-SP7 (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * scap-security-guide-0.1.82-150000.1.112.2 * scap-security-guide-redhat-0.1.82-150000.1.112.2 * scap-security-guide-ubuntu-0.1.82-150000.1.112.2 * scap-security-guide-debian-0.1.82-150000.1.112.2 ## References: * https://jira.suse.com/browse/ECO-3319 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:43:11 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:43:11 -0000 Subject: SUSE-RU-2026:4528-1: important: Recommended update for resource-agents Message-ID: <179129059179.5544.6204050839979486590@b6db9e7d26e0> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:4528-1 Release Date: 2026-10-06T06:27:43Z Rating: important References: * bsc#1273102 * bsc#1281122 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has two fixes can now be installed. ## Description: This update for resource-agents fixes the following issues: * Fix: aws-vpc-move-ip fails to start (bsc#1281122) * Fix: aws-vpc-move-ip curl_retries/curl_sleep Default Regression (bsc#1273102): * aws-vpc-move-ip/aws-vpc-route53/awseip/awsvip: add auth_type parameter and AWS Policy based authentication type * AWS agents: * use curl_retry() * reuse IMDS token until it expires * aws.sh: * chmod 600 $TOKEN_FILE, add get_instance_id() with DMI support, and use get_instance_id() in AWS agents * add get_interface_mac() * aws.sh/ocf-shellfuncs: add ability to fresh token if it's invalid * awsvip: let user specify which interface to use, and make the parameter optional in aws-vpc-move-ip * aws-vpc-move-ip: Add awscli_timeout option ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4528 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4528 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ldirectord-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-debuginfo-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-debugsource-4.13.0+git6.ae50f94f-150600.4.32.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * monitoring-plugins-metadata-4.13.0+git6.ae50f94f-150600.4.32.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * ldirectord-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-zfs-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-debuginfo-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-4.13.0+git6.ae50f94f-150600.4.32.1 * resource-agents-debugsource-4.13.0+git6.ae50f94f-150600.4.32.1 * openSUSE Leap 15.6 (noarch) * monitoring-plugins-metadata-4.13.0+git6.ae50f94f-150600.4.32.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273102 * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:43:43 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:43:43 -0000 Subject: SUSE-RU-2026:4527-1: important: Recommended update for resource-agents Message-ID: <179129062343.5544.15181717341866835282@b6db9e7d26e0> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:4527-1 Release Date: 2026-10-06T06:27:30Z Rating: important References: * bsc#1281122 Affected Products: * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issues: * Fix: aws-vpc-move-ip fails to start (bsc#1281122) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4527 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * resource-agents-debuginfo-4.13.0+git6.ae50f94f-150700.7.17.1 * resource-agents-debugsource-4.13.0+git6.ae50f94f-150700.7.17.1 * resource-agents-4.13.0+git6.ae50f94f-150700.7.17.1 * ldirectord-4.13.0+git6.ae50f94f-150700.7.17.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (noarch) * monitoring-plugins-metadata-4.13.0+git6.ae50f94f-150700.7.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:44:08 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:44:08 -0000 Subject: SUSE-RU-2026:4526-1: important: Recommended update for smt Message-ID: <179129064814.5544.3349286765049613136@b6db9e7d26e0> # Recommended update for smt Announcement ID: SUSE-RU-2026:4526-1 Release Date: 2026-10-06T06:26:34Z Rating: important References: * bsc#1239219 * bsc#1239441 Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has two fixes can now be installed. ## Description: This update for smt fixes the following issues: * Update to version 3.0.53: * Allow Rancher Government Cloud API hosts (jsc#SCC-1000) * Do not insert NULL for former_identifier and product_type (bsc#1239441, bsc#1239219) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4526 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4526 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4526 ## Package List: * Public Cloud Module 12 (aarch64 ppc64le s390x x86_64) * smt-ha-3.0.53-52.57.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * res-signingkeys-3.0.53-52.57.1 * smt-debugsource-3.0.53-52.57.1 * smt-support-3.0.53-52.57.1 * smt-3.0.53-52.57.1 * smt-debuginfo-3.0.53-52.57.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * res-signingkeys-3.0.53-52.57.1 * smt-debugsource-3.0.53-52.57.1 * smt-support-3.0.53-52.57.1 * smt-3.0.53-52.57.1 * smt-debuginfo-3.0.53-52.57.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1239219 * https://bugzilla.suse.com/show_bug.cgi?id=1239441 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:44:31 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:44:31 -0000 Subject: SUSE-RU-2026:4525-1: moderate: Recommended update for grub2 Message-ID: <179129067119.5544.12854245702384794826@b6db9e7d26e0> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:4525-1 Release Date: 2026-10-06T06:26:07Z Rating: moderate References: * bsc#1278729 Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4525 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4525 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.12-150700.19.37.1 * grub2-2.12-150700.19.37.1 * Basesystem Module 15-SP7 (aarch64 s390x x86_64) * grub2-debugsource-2.12-150700.19.37.1 * Basesystem Module 15-SP7 (noarch) * grub2-arm64-efi-2.12-150700.19.37.1 * grub2-systemd-sleep-plugin-2.12-150700.19.37.1 * grub2-snapper-plugin-2.12-150700.19.37.1 * grub2-powerpc-ieee1275-2.12-150700.19.37.1 * grub2-x86_64-efi-2.12-150700.19.37.1 * grub2-i386-pc-2.12-150700.19.37.1 * Basesystem Module 15-SP7 (s390x) * grub2-s390x-emu-2.12-150700.19.37.1 * Server Applications Module 15-SP7 (noarch) * grub2-x86_64-xen-2.12-150700.19.37.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:44:54 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:44:54 -0000 Subject: SUSE-RU-2026:4524-1: moderate: Recommended update for grub2 Message-ID: <179129069450.5544.11752780306084148103@b6db9e7d26e0> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:4524-1 Release Date: 2026-10-06T06:25:43Z Rating: moderate References: * bsc#1278729 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4524 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4524 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4524 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * grub2-2.12-150600.8.58.1 * grub2-debuginfo-2.12-150600.8.58.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * grub2-debugsource-2.12-150600.8.58.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * grub2-systemd-sleep-plugin-2.12-150600.8.58.1 * grub2-snapper-plugin-2.12-150600.8.58.1 * grub2-x86_64-xen-2.12-150600.8.58.1 * grub2-x86_64-efi-2.12-150600.8.58.1 * grub2-powerpc-ieee1275-2.12-150600.8.58.1 * grub2-i386-pc-2.12-150600.8.58.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * grub2-2.12-150600.8.58.1 * grub2-debuginfo-2.12-150600.8.58.1 * grub2-branding-upstream-2.12-150600.8.58.1 * openSUSE Leap 15.6 (noarch) * grub2-i386-efi-debug-2.12-150600.8.58.1 * grub2-x86_64-xen-debug-2.12-150600.8.58.1 * grub2-i386-pc-extras-2.12-150600.8.58.1 * grub2-x86_64-efi-debug-2.12-150600.8.58.1 * grub2-i386-xen-debug-2.12-150600.8.58.1 * grub2-i386-pc-debug-2.12-150600.8.58.1 * grub2-i386-efi-2.12-150600.8.58.1 * grub2-i386-xen-extras-2.12-150600.8.58.1 * grub2-arm64-efi-2.12-150600.8.58.1 * grub2-arm64-efi-debug-2.12-150600.8.58.1 * grub2-snapper-plugin-2.12-150600.8.58.1 * grub2-x86_64-efi-2.12-150600.8.58.1 * grub2-x86_64-xen-extras-2.12-150600.8.58.1 * grub2-i386-xen-2.12-150600.8.58.1 * grub2-i386-pc-2.12-150600.8.58.1 * grub2-powerpc-ieee1275-extras-2.12-150600.8.58.1 * grub2-systemd-sleep-plugin-2.12-150600.8.58.1 * grub2-x86_64-xen-2.12-150600.8.58.1 * grub2-arm64-efi-extras-2.12-150600.8.58.1 * grub2-x86_64-efi-extras-2.12-150600.8.58.1 * grub2-i386-efi-extras-2.12-150600.8.58.1 * grub2-powerpc-ieee1275-2.12-150600.8.58.1 * grub2-s390x-emu-extras-2.12-150600.8.58.1 * grub2-powerpc-ieee1275-debug-2.12-150600.8.58.1 * openSUSE Leap 15.6 (aarch64 i586 s390x x86_64) * grub2-debugsource-2.12-150600.8.58.1 * openSUSE Leap 15.6 (s390x) * grub2-s390x-emu-2.12-150600.8.58.1 * grub2-s390x-emu-debug-2.12-150600.8.58.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * grub2-2.12-150600.8.58.1 * grub2-debuginfo-2.12-150600.8.58.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 s390x x86_64) * grub2-debugsource-2.12-150600.8.58.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * grub2-s390x-emu-2.12-150600.8.58.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * grub2-systemd-sleep-plugin-2.12-150600.8.58.1 * grub2-snapper-plugin-2.12-150600.8.58.1 * grub2-x86_64-xen-2.12-150600.8.58.1 * grub2-x86_64-efi-2.12-150600.8.58.1 * grub2-powerpc-ieee1275-2.12-150600.8.58.1 * grub2-i386-pc-2.12-150600.8.58.1 * grub2-arm64-efi-2.12-150600.8.58.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:45:26 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:45:26 -0000 Subject: SUSE-RU-2026:4523-1: moderate: Recommended update for grub2 Message-ID: <179129072634.5544.14543621270716225827@b6db9e7d26e0> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:4523-1 Release Date: 2026-10-06T06:25:24Z Rating: moderate References: * bsc#1278729 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4523 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4523 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4523 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4523 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4523 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4523 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * grub2-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * grub2-debugsource-2.06-150500.29.71.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-systemd-sleep-plugin-2.06-150500.29.71.1 * grub2-powerpc-ieee1275-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * grub2-2.06-150500.29.71.1 * grub2-debugsource-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-arm64-efi-2.06-150500.29.71.1 * grub2-systemd-sleep-plugin-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * grub2-2.06-150500.29.71.1 * grub2-debugsource-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-arm64-efi-2.06-150500.29.71.1 * grub2-systemd-sleep-plugin-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * grub2-2.06-150500.29.71.1 * grub2-branding-upstream-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * openSUSE Leap 15.5 (noarch) * grub2-powerpc-ieee1275-debug-2.06-150500.29.71.1 * grub2-i386-xen-extras-2.06-150500.29.71.1 * grub2-arm64-efi-2.06-150500.29.71.1 * grub2-arm64-efi-extras-2.06-150500.29.71.1 * grub2-systemd-sleep-plugin-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-efi-extras-2.06-150500.29.71.1 * grub2-i386-efi-2.06-150500.29.71.1 * grub2-i386-pc-debug-2.06-150500.29.71.1 * grub2-powerpc-ieee1275-2.06-150500.29.71.1 * grub2-s390x-emu-extras-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-i386-efi-extras-2.06-150500.29.71.1 * grub2-x86_64-efi-debug-2.06-150500.29.71.1 * grub2-arm64-efi-debug-2.06-150500.29.71.1 * grub2-i386-xen-2.06-150500.29.71.1 * grub2-i386-pc-extras-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-i386-efi-debug-2.06-150500.29.71.1 * grub2-x86_64-xen-debug-2.06-150500.29.71.1 * grub2-powerpc-ieee1275-extras-2.06-150500.29.71.1 * grub2-x86_64-xen-extras-2.06-150500.29.71.1 * grub2-i386-xen-debug-2.06-150500.29.71.1 * openSUSE Leap 15.5 (aarch64 i586 s390x x86_64) * grub2-debugsource-2.06-150500.29.71.1 * openSUSE Leap 15.5 (s390x) * grub2-s390x-emu-2.06-150500.29.71.1 * grub2-s390x-emu-debug-2.06-150500.29.71.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.71.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-arm64-efi-2.06-150500.29.71.1 * grub2-powerpc-ieee1275-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * SUSE Linux Enterprise Micro 5.5 (s390x) * grub2-s390x-emu-2.06-150500.29.71.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * grub2-2.06-150500.29.71.1 * grub2-debuginfo-2.06-150500.29.71.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 s390x x86_64) * grub2-debugsource-2.06-150500.29.71.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * grub2-x86_64-efi-2.06-150500.29.71.1 * grub2-arm64-efi-2.06-150500.29.71.1 * grub2-systemd-sleep-plugin-2.06-150500.29.71.1 * grub2-powerpc-ieee1275-2.06-150500.29.71.1 * grub2-i386-pc-2.06-150500.29.71.1 * grub2-snapper-plugin-2.06-150500.29.71.1 * grub2-x86_64-xen-2.06-150500.29.71.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * grub2-s390x-emu-2.06-150500.29.71.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:45:58 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:45:58 -0000 Subject: SUSE-RU-2026:4522-1: moderate: Recommended update for grub2 Message-ID: <179129075837.5544.5139246394014849599@b6db9e7d26e0> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:4522-1 Release Date: 2026-10-06T06:24:45Z Rating: moderate References: * bsc#1278729 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4522 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4522 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4522 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4522 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4522 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4522 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4522 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4522 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4522 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-systemd-sleep-plugin-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * grub2-powerpc-ieee1275-2.06-150400.11.78.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-systemd-sleep-plugin-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-systemd-sleep-plugin-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-branding-upstream-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * openSUSE Leap 15.4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-s390x-emu-extras-2.06-150400.11.78.1 * grub2-i386-pc-debug-2.06-150400.11.78.1 * grub2-systemd-sleep-plugin-2.06-150400.11.78.1 * grub2-powerpc-ieee1275-extras-2.06-150400.11.78.1 * grub2-powerpc-ieee1275-2.06-150400.11.78.1 * grub2-x86_64-efi-extras-2.06-150400.11.78.1 * grub2-i386-xen-extras-2.06-150400.11.78.1 * grub2-powerpc-ieee1275-debug-2.06-150400.11.78.1 * grub2-i386-pc-extras-2.06-150400.11.78.1 * grub2-arm64-efi-extras-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-i386-efi-debug-2.06-150400.11.78.1 * grub2-i386-efi-extras-2.06-150400.11.78.1 * grub2-x86_64-efi-debug-2.06-150400.11.78.1 * grub2-arm64-efi-debug-2.06-150400.11.78.1 * grub2-i386-xen-2.06-150400.11.78.1 * grub2-x86_64-xen-extras-2.06-150400.11.78.1 * grub2-i386-efi-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * openSUSE Leap 15.4 (aarch64 i586 s390x x86_64) * grub2-debugsource-2.06-150400.11.78.1 * openSUSE Leap 15.4 (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 * grub2-s390x-emu-debug-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.3 (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * SUSE Linux Enterprise Micro 5.4 (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * grub2-2.06-150400.11.78.1 * grub2-debuginfo-2.06-150400.11.78.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 s390x x86_64) * grub2-debugsource-2.06-150400.11.78.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * grub2-i386-pc-2.06-150400.11.78.1 * grub2-x86_64-xen-2.06-150400.11.78.1 * grub2-systemd-sleep-plugin-2.06-150400.11.78.1 * grub2-snapper-plugin-2.06-150400.11.78.1 * grub2-arm64-efi-2.06-150400.11.78.1 * grub2-x86_64-efi-2.06-150400.11.78.1 * grub2-powerpc-ieee1275-2.06-150400.11.78.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * grub2-s390x-emu-2.06-150400.11.78.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:46:29 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:46:29 -0000 Subject: SUSE-RU-2026:4521-1: moderate: Recommended update for grub2 Message-ID: <179129078965.5544.15983046327210006366@b6db9e7d26e0> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:4521-1 Release Date: 2026-10-06T06:23:52Z Rating: moderate References: * bsc#1278729 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4521 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4521 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * grub2-debuginfo-2.02-202.1 * grub2-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 s390x x86_64) * grub2-debugsource-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * grub2-x86_64-efi-2.02-202.1 * grub2-i386-pc-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * grub2-snapper-plugin-2.02-202.1 * grub2-systemd-sleep-plugin-2.02-202.1 * grub2-x86_64-xen-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x) * grub2-s390x-emu-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (ppc64le) * grub2-powerpc-ieee1275-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64) * grub2-arm64-efi-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * grub2-debuginfo-2.02-202.1 * grub2-i386-pc-2.02-202.1 * grub2-2.02-202.1 * grub2-debugsource-2.02-202.1 * grub2-x86_64-efi-2.02-202.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * grub2-snapper-plugin-2.02-202.1 * grub2-systemd-sleep-plugin-2.02-202.1 * grub2-x86_64-xen-2.02-202.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:46:56 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 12:46:56 -0000 Subject: SUSE-RU-2026:4520-1: important: Recommended update for hawk2 Message-ID: <179129081670.5544.9082698819248164592@b6db9e7d26e0> # Recommended update for hawk2 Announcement ID: SUSE-RU-2026:4520-1 Release Date: 2026-10-06T06:23:26Z Rating: important References: * bsc#1267907 * bsc#1267909 * bsc#1274860 * bsc#1275019 Affected Products: * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has four fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * Update to version 2.7.2+git.1789128469.a738abc1: * Test: enable new attributes in test_check_cluster_configuration * Dev: update RSC_DEFAULTS and clone defaults (bsc#1267909) * Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019): * Test: * give sle15 more time when choosing between sle15 and sle16 * Dev: * bump jQuery version to 4.0.0 * Update to version 2.7.1+git.1787667448.cd1d963e: * Test: * update the e2e test for the change allowing custom parameters * enable test_add_clone against hawk-apiserver verion 0.2.1 * fix SyntaxWarning: invalid escape sequence '|' * make the tests compatible against hawk-apiserver ver0.2.0 * enable both fencing-sbd and stonith-sbd * use another name for hot_primitive * Dev: * enable custom Parameters and Meta Attributes (bsc#1274860) * hide 'Add Resource' to 'Multi-state' menu (bsc#1267909) * rename 'Promotable' to 'Unpromoted' (bsc#1267907) * complement the rsc_constraint parser * CI/CD: * update hawk examiner entry point * use fencing-sbd in sle16, instead of stonith-sbd * Fix: * parsing ambiguity in cib_ops_path format handling ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4520 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-4520 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4520 * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4520 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-debugsource-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-debugsource-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-debugsource-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * hawk2-debuginfo-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-debugsource-2.7.2+git.1789128469.a738abc1-150000.3.69.1 * hawk2-2.7.2+git.1789128469.a738abc1-150000.3.69.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1267907 * https://bugzilla.suse.com/show_bug.cgi?id=1267909 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 * https://bugzilla.suse.com/show_bug.cgi?id=1275019 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:30:30 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:30:30 -0000 Subject: SUSE-SU-2026:4548-1: important: Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) Message-ID: <179130423008.904.12868205908557510463@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4548-1 Release Date: 2026-10-06T11:03:49Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4548 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_296-default-10-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:31:34 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:31:34 -0000 Subject: SUSE-SU-2026:4542-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) Message-ID: <179130429459.904.16359530847004228154@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4542-1 Release Date: 2026-10-06T10:33:41Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4542 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4547 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_19-default-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_5-debugsource-15-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-15-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_6-debugsource-13-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:32:35 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:32:35 -0000 Subject: SUSE-SU-2026:4546-1: critical: Security update for libtcnative-1-0, tomcat, tomcat10 Message-ID: <179130435544.904.6789751268654697500@8fe190deb1b6> # Security update for libtcnative-1-0, tomcat, tomcat10 Announcement ID: SUSE-SU-2026:4546-1 Release Date: 2026-10-06T10:05:10Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat,tomcat10: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for tomcat: * Update to Tomcat 9.0.122 * Catalina * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat10: * Update to Tomcat 10.1.60 * Catalina * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4546 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4546 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4546 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4546 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4546 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4546 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4546 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4546 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4546 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4546 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4546 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * Web and Scripting Module 15-SP7 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:33:14 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:33:14 -0000 Subject: SUSE-SU-2026:4545-1: important: Security update for MozillaFirefox Message-ID: <179130439486.904.13987148037317636915@8fe190deb1b6> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4545-1 Release Date: 2026-10-06T10:03:15Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4545 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4545 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4545 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4545 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4545 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4545 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4545 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4545 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4545 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4545 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4545 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4545 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-153.4.0-150400.157.11.1 * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * openSUSE Leap 15.4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * Desktop Applications Module 15-SP7 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:34:32 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:34:32 -0000 Subject: SUSE-SU-2026:4544-1: critical: Security update for libtcnative-1-0, tomcat11 Message-ID: <179130447292.904.1748456649787918282@8fe190deb1b6> # Security update for libtcnative-1-0, tomcat11 Announcement ID: SUSE-SU-2026:4544-1 Release Date: 2026-10-06T10:01:26Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat11: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for tomcat11: * Update to Tomcat 11.0.26 * Catalina * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: parsing of client certificates that specify more than one OCSP responder for configurations that use OpenSSL-FFM. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4544 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4544 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4544 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4544 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4544 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * openSUSE Leap 15.6 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-docs-webapp-11.0.26-150600.13.36.2 * tomcat11-doc-11.0.26-150600.13.36.2 * tomcat11-embed-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-jsvc-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * Web and Scripting Module 15-SP7 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:35:32 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 16:35:32 -0000 Subject: SUSE-SU-2026:4543-1: important: Security update for MozillaFirefox Message-ID: <179130453209.904.10840324596001952499@8fe190deb1b6> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4543-1 Release Date: 2026-10-06T10:00:32Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4543 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4543 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-153.4.0-118.11.1 * MozillaFirefox-translations-common-153.4.0-118.11.1 * MozillaFirefox-debugsource-153.4.0-118.11.1 * MozillaFirefox-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-debuginfo-153.4.0-118.11.1 * MozillaFirefox-translations-common-153.4.0-118.11.1 * MozillaFirefox-debugsource-153.4.0-118.11.1 * MozillaFirefox-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.4.0-118.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 20:30:28 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 20:30:28 -0000 Subject: SUSE-SU-2026:4550-1: important: Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) Message-ID: <179131862853.1015.5185423250328450665@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4550-1 Release Date: 2026-10-06T14:33:39Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4550 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_293-default-13-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 20:31:05 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 06 Oct 2026 20:31:05 -0000 Subject: SUSE-RU-2026:4549-1: moderate: Recommended update for perf Message-ID: <179131866576.1015.11934291347724428549@d98e15e472c6> # Recommended update for perf Announcement ID: SUSE-RU-2026:4549-1 Release Date: 2026-10-06T12:58:24Z Rating: moderate References: * jsc#PED-16404 * jsc#PED-16689 Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains two features can now be installed. ## Description: This update for perf fixes the following issues: * Create python3-perf package to support Python profiling (jsc#PED-16689) * Create perf-plugin-jvmti package to support JAVA profiling (jsc#PED-16404) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4549 ## Package List: * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-perf-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-debugsource-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-debuginfo-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-devel-6.4.0.git62258.fda20aa634-150700.3.8.1 * python3-perf-debuginfo-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-plugin-jvmti-6.4.0.git62258.fda20aa634-150700.3.8.1 * perf-plugin-jvmti-debuginfo-6.4.0.git62258.fda20aa634-150700.3.8.1 ## References: * https://jira.suse.com/browse/PED-16404 * https://jira.suse.com/browse/PED-16689 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 08:30:26 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 08:30:26 -0000 Subject: SUSE-SU-2026:4551-1: important: Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) Message-ID: <179136182650.1282.17879710464112027236@7c2c7ba11e06> # Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4551-1 Release Date: 2026-10-06T18:33:36Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4551 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_302-default-9-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 12:30:25 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 12:30:25 -0000 Subject: SUSE-SU-2026:4552-1: important: Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) Message-ID: <179137622503.32019.2321845807601174453@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4552-1 Release Date: 2026-10-07T00:33:56Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4552 SUSE-SLE-Live- Patching-12-SP5-2026-4553 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_307-default-7-2.1 * kgraft-patch-4_12_14-122_299-default-10-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 12:30:30 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 12:30:30 -0000 Subject: SUSE-SU-2026:4554-1: important: Security update for google-osconfig-agent Message-ID: <179137623036.32019.17490700269014947912@b6db9e7d26e0> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:4554-1 Release Date: 2026-10-07T08:00:38Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4554 ## Package List: * Public Cloud Module 12 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-1.63.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:30:12 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:30:12 -0000 Subject: SUSE-RU-2026:24017-1: important: Recommended update for hawk-apiserver Message-ID: <179139061238.1876.1799561829358591190@8fe190deb1b6> # Recommended update for hawk-apiserver Announcement ID: SUSE-RU-2026:24017-1 Release Date: 2026-10-02T18:15:36Z Rating: important References: * bsc#1267910 * bsc#1274860 Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has two fixes can now be installed. ## Description: This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: * Enable custom user parameters (bsc#1274860) * cib/live/clones is handled in the hawk-apiserver instead of hawk * cib/live is handled in the hawk-apiserver instead of hawk * Fix: Can't add Utilization attributes to primitives (bsc#1267910): * Add XInputsKvGroup * Enable other Primitive-Operation attributes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1823 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * hawk-apiserver-0.2.2+git.1787135908.0b1b73e-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1267910 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:30:43 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:30:43 -0000 Subject: SUSE-SU-2026:24016-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179139064308.1876.6028577548878582747@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24016-1 Release Date: 2026-10-05T04:52:11Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1826 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1826 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:30:48 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:30:48 -0000 Subject: SUSE-SU-2026:24015-1: moderate: Security update for rsyslog Message-ID: <179139064887.1876.16977072084765364629@8fe190deb1b6> # Security update for rsyslog Announcement ID: SUSE-SU-2026:24015-1 Release Date: 2026-10-03T09:17:41Z Rating: moderate References: * bsc#1281628 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for rsyslog fixes the following issue: * imdtls: fix permitted-peer authorization bypass (bsc#1281628). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1825 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1825 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rsyslog-module-relp-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-8.2502.0-160000.6.1 * rsyslog-8.2502.0-160000.6.1 * rsyslog-module-gtls-8.2502.0-160000.6.1 * rsyslog-module-gtls-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-relp-8.2502.0-160000.6.1 * rsyslog-debugsource-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-8.2502.0-160000.6.1 * rsyslog-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-debuginfo-8.2502.0-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rsyslog-module-relp-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-8.2502.0-160000.6.1 * rsyslog-8.2502.0-160000.6.1 * rsyslog-module-gtls-8.2502.0-160000.6.1 * rsyslog-module-gtls-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-relp-8.2502.0-160000.6.1 * rsyslog-debugsource-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-8.2502.0-160000.6.1 * rsyslog-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-debuginfo-8.2502.0-160000.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281628 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:09 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:31:09 -0000 Subject: SUSE-SU-2026:24014-1: important: Security update for rustup Message-ID: <179139066979.1876.440445870485214168@8fe190deb1b6> # Security update for rustup Announcement ID: SUSE-SU-2026:24014-1 Release Date: 2026-10-02T19:31:21Z Rating: important References: * bsc#1230032 * bsc#1243862 * bsc#1249008 * bsc#1257902 * bsc#1270186 * bsc#1270521 * bsc#1270619 * bsc#1270644 * bsc#1270795 * bsc#1270870 * bsc#1270874 * bsc#1270989 * bsc#1274144 * bsc#1282217 Cross-References: * CVE-2024-12224 * CVE-2025-58160 * CVE-2026-25541 * CVE-2026-25727 * CVE-2026-41676 * CVE-2026-41677 * CVE-2026-41678 * CVE-2026-41681 * CVE-2026-41898 * CVE-2026-42327 * CVE-2026-44662 * CVE-2026-45784 * CVE-2026-93599 * CVE-2026-93600 * CVE-2026-93601 * CVE-2026-93602 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-41676 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-41676 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-41676 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41676 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41677 ( SUSE ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U * CVE-2026-41677 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41677 ( NVD ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41677 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41678 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-41678 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-41678 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41678 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-41681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-41681 ( NVD ): 8.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41681 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41898 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41898 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-41898 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41898 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-42327 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42327 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42327 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44662 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-44662 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-44662 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45784 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-45784 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93599 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93599 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93599 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93599 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93600 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-93600 ( SUSE ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93600 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93600 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93601 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93601 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93601 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93601 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93602 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93602 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93602 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93602 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for rustup fixes the following issues: * CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). * CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). * CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274144). * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257902). * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270186). * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270619). * CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust- openssl crate (bsc#1270644). * CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate (bsc#1270795). * CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent memory in rust-openssl crate (bsc#1270870). * CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate (bsc#1270521). * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key- wrap-with-padding in rust-openssl crate (bsc#1270874). * CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust- openssl crate (bsc#1270989). * CVE-2026-93599: rustls-webpki: panic via empty BIT STRING (bsc#1282217). * CVE-2026-93600: rustls-webpki: name constraints URI validation bypass (bsc#1282217). * CVE-2026-93601: rustls-webpki: name constraint bypass (bsc#1282217). * CVE-2026-93602: rustls-webpki: CRL revocation check bypass (bsc#1282217). * rust-shlex: Multiple issues involving quote API (RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27) (bsc#1230032). Changes for rustup: * Update to version 1.29.1~0: * dist(rustup-init/sh): update commit shasum in help string * style(bin/rustup-init): reformat code * docs(changelog): update for v1.29.1 stable release * warn how to switch away from the deprecated complete profile * fix(cli/help): fix wording in `rustup run --help` * ci(docker/android): stop building OpenSSL * refactor(cli/docs): use tracing for docs opening status messages * refactor(self-update): rename Windows uninstall registry helpers * feat(test): isolate Windows registry state per test * docs(dev-guide): mention how to support new compilation targets * Fix funding link * chore(deps): lock file maintenance * refactor(cli/self-update): move `current_install_opts()` to `InstallOpts::display()` * refactor(cli/self-update): move `process` out of `InstallOpts` * fix(cli/self-update): postpone initialization of `Cfg` in `setup_mode` * refactor(cli/self-update): take `Process` in `check_existence_of_settings_file()` * fix(settings): prevent creating new file with `SettingsFile::read_settings()` * test(cli-inst-interactive): test file creation on cancelled installation * refactor(toolchain/names): inline `validate()` aliases into `FromStr` * refactor(toolchain/names): rename `validate()` to `normalize_name()` * fix minor typos * www: align copy icon * refactor(toolchain/names)!: remove `try_from_str!()` * refactor(toolchain/names)!: remove `from_variant!()` * Add `rustup doc --serve` to serve docs over local HTTP * Move doc() and man() into a new docs module * chore(github): comment out instructions in PR template * docs(dev-guide): reapply abandoned changes from #4970 * Add riscv64 unknown linux musl support * fix(deps): update rust crate enum-map to v3 * refactor(cli/self-update)!: rename `install()` to `InstallOpts::install()` * refactor(cli/self-update)!: rename `maybe_install_rust()` to `InstallOpts::install_rust()` * refactor(cli/self-update)!: rename `InstallOpts::install()` to `InstallOpts::select_toolchain()` * refactor(toolchain/names)!: make more clones during conversions explicit * refactor(cli/self-update): move message templates to `mod msg` * style(cli/self-update): reorganize imports * Add pull request template linking to the dev guide * doc: add AI policy to the dev guide * ci(dist): ensure pushing to `dev-static` on `stable` update * test(toolchain): add a test case for `rustup toolchain install --override` * feat(toolchain): add `--default` flag to `rustup toolchain install` * fix(toolchain): inline use of `set_override` * Add Enzyme to the list of rustup components * fix: repair toolchains without an installed manifest * refactor: expose the installed manifest path * Docs: Remove i686 `set default-host` example * fix(self-update): only remove complete profile lines * chore(deps): bump `platforms` to 4.1.0 * chore(deps): remove pinned `openssl-src` * refactor: replace `cfg_if!{}` with `cfg_select!{}` * fix: Lock state file updates * Fix Rust 1.97 clippy warnings * uninstalls toolchains prior to deleting the rustup home folder * Take semver-compatible dependency updates * Upgrade platforms to 4 * docs: update `CHANGELOG` for v1.29.1 * Lock file maintenance * Remove Windows special case from `can_run` * diskio: drop unnecessary constructor wrapper * diskio: rename _IncrementalFileState to FileState * diskio: inline IncrementalFileState type alias * Minimize API visibility * toolchain: streamline validate() implementations * toolchain: avoid internal cloning * dist: drop unused conversion impl * dist: keep impls with type definitions * Don't hide allocations inside From impls * toolchain: drop impls for &String * Warn on clippy::or_fun_call * Warn on clippy::needless_by_ref_mut * Warn on clippy::redundant_clone * Warn on clippy::manual_let_else * Warn on clippy::use_self * errors: box ToolchainDesc in RustupError variants * errors: box Manifest in RequestedComponentsUnavailable variant * No (more) need to allow clippy::arc_with_non_send_sync * Replace use of FnMut trait objects with custom trait * test(cli/self-upd): use direct arg0 override for `as_rustup_setup()` * chore(deps): update actions/cache action to v6 * ci(windows): add support for aarch64-pc-windows-gnullvm target * ci(windows): refine MSVC/MINGW job step predicates * chore(deps): update actions/checkout action to v7 * fix(deps): update rust crate itertools to 0.15 * fix(progress): use the `prefix` placeholder instead of `msg` for component name * rustup: warn when no toolchain or default is configured * errors: extract default stable hint * feat(toolchain): make the "installed" text of a toolchain install green * Add aarch64-unknown-freebsd * chore: address linter warnings * chore(deps): bump to semver-compatible versions * Add funding links * ci(docker/freebsd): bump `clang` version to `freebsd14` * ci(freebsd): use FreeBSD 14.0 for full CI * chore(deps): update `curl` * feat(cli/rustup-mode): warn about auto-installation in some subcommands * refactor(config): accept `Cfg` in `EnsureInstalled::warn_auto_install()` * test(cli/rustup-mode): test auto-installation on to-be-deprecated subcommand * dist: move display_name() before other methods that it calls * chore(gitignore): add .cargo/config.windows-cross.toml to gitignore * docs(dev-guide): update platform-specific code guidance * docs(dev-guide): mention rust-analyzer support for Windows-specific code on Unix * docs(dev-guide): mention how to lint Windows-specific code on Unix * chore(config): add example config for cross checking and rust-analyzer * chore: add rust-analyzer example config * Display the full names of targets not matching the host target tuple * docs(dev-guide/tips-and-tricks): mention the `RUSTUP_FORCE_ARG0='rustup'` cargo alias * build(cargo): add `cargo` alias for `RUSTUP_FORCE_ARG0='rustup'` * docs: rename the repath helper variable * Remove double buffering when extracting archives * refactor(toolchain/distributable): return `EnsureInstalled<>` from `DistributableToolchain::install()` * docs(dev-guide/coding-standards): adapt style guide from rustls * fix(deps): update opentelemetry * feat(config): warn user if auto-install is enabled * refactor(config): return `EnsureInstalled<>` from more functions * refactor(config): extract `EnsureInstalled<>` wrapper type * test: make tests agnostic to external `RUSTUP_AUTO_INSTALL` and `RUST_RECURSION_COUNT` * test(dist): fail v2 manifest update when manifest disagrees with .sha256 * fix(dist): propagate v2 manifest checksum failure instead of reporting "unchanged" * Align shell setup comments in install message * feat(cli/self-update): refine wording of "already installed Rust" warning * chore(settings): rename default_host_triple to default_host_tuple and alias old name * chore(settings): add test to parse default_host_triple in toml * test(download): also scrub `HTTP_PROXY` in `scrub_env()` * chore: document legacy default host setting * chore: rename internal tuple constants * chore: rename partially "Triple" to "Tuple" to reflect the new terminology * fix(cli/rustup-mode)!: complete `rustup show` if active toolchain is not installed * refactor(cli/rustup-mode): postpone eval of `active_toolchain_targets` in `show()` * refactor(cli/rustup-mode): postpone eval of `active_toolchain` in `show()` * refactor(cli/rustup-mode): reduce rightward drift in `show()` * refactor(cli/rustup-mode): refine usage of `stdout` term and locks in `show()` * feat(config): add `Cfg` field to force-disable auto-installation * Provide --yes alias for -y flag consistently * refactor(tests): rename triple to tuple * refactor: bulk rename triple to ruple * refactor: rename get_default_host_triple to default_host_tuple * test(download): support more feature flag combinations * docs: fix the FileBuffer::clear doc comment wording * docs: fix plural of VM in coding standards * fix(dist): bulk rename triple to tuple for variables and messages * refactor(dist): rename PartialTargetTriple to PartialTargetTuple * refactor(dist): rename triple module to target_tuple * refactor: remove PartialToochainDesc::has_triple() in favor to PartialTargetTriple::is_empty() * refactor(dist): rename TargetTriple to TargetTuple * fix(self-update): rename triple to tuple in self_update * dist: bump `rustup` version to v1.29.1 * ci(linux/x64-musl): install missing libc dependencies * fix(tests): rename HOST_TRIPLE placeholder to HOST_TUPLE * fix(tests): rename this_host_triple() to this_host_tuple() * fix(init): rename triple to tuple to reflect the new terminology * fix(docs): rename triple to tuple to reflect the new terminology * chore(deps): update ubuntu docker tag to v26 * Improve error message for incomplete toolchains * chore(deps): update bwoodsend/setup-winlibs-action action to v1.16 * test(dist/manifest): use the reordered fixture in `manifest_serialized_with_sorted_keys` * docs: fix "initial" spelling in stylesheet variable * ci: powerpc64-unknown-linux-musl is now stable * style(cli/rustup-mode): address clippy warnings * docs(dev-guide): update release process with new backporting flow * docs: fix actions template README typo * Only show post-install instructions for currently installed shells * docs: fix Windows MSVC guide typo * Upgrade to rustls-platform-verifier 0.7 * Make component removal best-effort and preserve single-error behavior * Use `cc-rs` to detect the default linker, instead of assuming `cc` * ci(test): add `workflow_dispatch` trigger on par with `schedule` * ci: fix incorrect `contains()` predicate * fix(dist/manifestation): fix log format when installing exactly 2 components * Allow rustup component add to install multiple components in one update #4787 * fix(docs): correct link to `no-self-update` feature * ci: enable on all PR target branches * ci(backport): rename backport branches to `release/*` * feat(toolchain): run a pre-check before updating all toolchains * feat(install): accept an optional pre-fetched manifest when installing * fix(toolchain): extract manifest fetching out of `show_dist_version()` * fix(manifest): aggregate a manifest and its hash in a `ManifestWithHash` struct * fix: Reduce flickering by using `set_move_cursor` * ci(backport): add support for backporting * fix: install message misalignment. * refactor: extracted `progress_style` method for DownloadStatus * fix(deps): update rust crate sha2 to 0.11 * chore(doc): Added comments for clarify the usage of `Component::name` `Manifest::name` and the `short_name` funcc accordingly. * refactor: Rename `Component`'s `name_in_manifest` to `name` and `short_name` accordingly * self_update: show path to executable in case of updater failure * Revert "fix(ci/freebsd): install ca certs to prevent certificate-related issues" * ci: don't install protoc * Update to mdbook 0.5 * ci(all-features): bump protoc version * fix(dist/manifestation): use full toolchain name in `Update::unavailable_components()` * style(dist/manifestation): merge imports * Fix zsh completion showing all PATH entries for +toolchain arg * fix(cli/proxy-mode): stop enforcing `quiet: true` * chore(deps/freebsd): downgrade `libz-sys` to v1.1.24 * fix(ci/freebsd): install ca certs to prevent certificate-related issues * fix(rustup-init/sh): prevent passing `--default-host` twice * Avoid warning about the existence of a `settings.toml` on a fresh install * use tuple instead of triple for env overrides * Take platforms 3.9.0 * Unpin tracing-subcriber * chore(deps): update `aws-lc-rs` and `aws-lc-sys` * docs(changelog): update release date for v1.29.0 * docs(dev-guide/release-process): mention the CfT blog post * docs(changelog): update for v1.29.0 stable release * fix(cli): Style CLI errors in init mode * test: Add unknown arg init test * chore(deps): update actions/upload-artifact action to v7 * refactor(www): simplify instruction css selector * feat(www): make copy button dark mode-aware * feat(www): move feedback text out of copy button * fix(www): apply filter to rust logo * feat(www): add dark mode * refactor(www): extract css variables * fix(cli/self-update): enforce a newline after `check_updates()` * refactor(cli/self-update): extract `has_progress_bars` in `check_updates()` * fix(cli/self-update): unify `check_*update*()`'s message formats * docs(downloads): fix the default number of `RUSTUP_CONCURRENT_DOWNLOADS` * feat(toolchain): add `--override` to override toolchain as soon as installed * fix(toolchain): improve logs when recovering from an interrupted installation * chore(deps): downgrade `openssl-src` to 300.5.4+3.5.4 * style(download): clean up imports * fix(diskio): fall back to single-threaded unpacking when `ram_budget` < 512MB to avoid OOM on memory-constrained systems * test(downloads): check if an error is thrown if the server does not honor range * fix(downloads): check correct response when resuming from partial (reqwest) * fix(downloads): check correct response when resuming from partial (curl) * fix(deps): update rust crate toml to v1 * fix(dist/manifest): sort keys when serializing `Manifest` * hack(ci/linux): disable BuildKit when building local images * chore(ci): use more distinctive local image names * Upgrade rand to 0.10 * Upgrade snapbox to 1 * Upgrade to anstream 1 * fix(downloads): adjust error message for partial files in network failures * test(downloads): ensure that partial files are not removed when network fails * feat(downloads): do not delete partial download when network fails * fix(downloads): substitute `DEK` alias for `DownloadError` * chore(deps): update aws-actions/configure-aws-credentials action to v6 * cli: introduce semantic exit code constants for rustup check * Add missing Windows SDK instructions * Add winget instructions to MSVC install page * Remove nu-string-interpolation `$` * Replace $nu.home-path with ~ * feat(cli/rustup-mode): add "Exit status" section to `rustup check --help` * Add common commands section in help text * fix(cli/rustup-mode): improve exit code of `rustup check` * refactor(test)!: pass status code directly to `SanitizedOutput` * Add powerpc64-unknown-linux-musl support * fix: add copy_file_symlink_to_source for self-installation * fix: preserve symlinks in copy_dir instead of following them * feat(cli/rustup-mode): add `doc --rustc-docs` to open rustdoc for Rust internals * Remove the mixed singular/plural phrasing as "component(s)" instead, use "components" or "component". In the singular case also add the name of the component for more consistent messaging style with other info! outputs about single components. * fix(cli/rustup-mode): `check` for self updates for `SelfUpdateMode::CheckOnly` * test: Add test for sequential multi-toolchain uninstall * fix: directory removal race condition in toolchain uninstall * test(cli_v2): test error when missing many components on install * fix(dist): adjust printed newlines in `components_missing_msg()` * unified nightly disclaimer wording/styling; preserved distinct messages per scenario * Upgrade to reqwest 0.13 * change test name to match new terminology * rename file to match new terminology * change 'target triple' to 'target tuple' * fix(toolchain): forbid toolchain names starting with + * cli: add `doc --releases` to open release notes * chore(deps): update actions/upload-artifact action to v6 * chore(deps): update actions/cache action to v5 * dist: use more concise API in helper function * dist: inline more logic into helper function * dist: give helper function a more meaningful name * dist: move helper function closer to usage site * docs(dev-guide): mention snapshot updating in release process * fix(toolchain): avoid unwrapping when parsing a toolchain name * fix(toolchain): change regex to reject leading zeros in toolchain name * docs(changelog): update for v1.29.0 beta release * dist: bump `rustup` version to v1.29.0 * docs(changelog): add missing link references * test(static-roots): use a more compact syntax for raw binaries * test(static-roots): return `Result` from `store_static_roots()` * download: statically bundle relevant trust anchors * Added xonsh support * refactor(dist/manifestation): remove redundant redeclarations * docs(dist/download): remove outdated note on concurrent download progress reporting * fix(dist/download): align `total_bytes` fields in progress reporting UI * fix: default to GNU host in Cygwin/MSYS/MinGW environments (#4221) * chore(config): remove redundant imports * fix(dist/manifestation): print "downloading component" only on `InstallEvents` * fix(utils): downgrade panic to warning in `delete_dir_contents_following_links()` * chore(deps): update actions/checkout action to v6 * Prepare for mdbook 0.5 migration * dist: make installation asynchronous * dist: make installations 'static * dist: take ownership of Manifestation * dist: store owned temp::Context in Transaction * dist: store temp::Context in DownloadCfg * dist: align progress bar elements * dist: track progress during unpacking * utils: drop unused reader tracking * process: fix refresh rate for progress bars * process: reduce duplication in ProgressDrawTarget setup * Yield references from Manifest::short_name() * Move Component name helpers to Manifest * dist: simplify ComponentBinary construction * dist: hoist creation of io_executor some more * Move unpack_ram() from dist to diskio * dist: hoist Executor creation up * dist: inline effective RAM limit calculation * dist: hoist environment variable extraction * dist: use logging for missing parent warnings * dist: clarify dependency on unpack RAM budget * diskio: clarify dependency on I/O thread count * dist: transfer ownership of component values * dist: take ownership of existing Components * dist: take ownership of toolchain name in update() * dist: take ownership of manifest in update() * dist: derive trivial initialization for Update * dist: rename Update::build_update() to new() * dist: linearize for-loop in Update::build_update() * dist: inline single-use function * dist: inline trivial helper function * dist: inline single-use tranaction change helpers * dist: store specific config bit in Transaction * chore(config): migrate config .github/renovate.json * dist: attach manifest download functions to DownloadCfg * rustup: unhide top-level install/uninstall commands * dist: move update_from_dist() to DistOptions::install_into() * Be more consistent about aliases for different subcommands * test: add test for `rustup toolchain install --no-update` * feat(rustup-mode): add `no_update` flag to `rustup toolchain install` * cli: prepare DistOptions in advance * dist: inline trivial wrapper function * cli: inline single-use update_all_channels() helper * config: simplify update_all_channels() * dist: deduplicate DistOptions initialization * dist: avoid recomputing dist root URL * dist: simplify tracing instrumentation * install: take ownership in InstallMethod::install() * dist: move DistributableToolchain::install() up * dist: clarify when update_hash is available * cli: avoid dropped temporary * Take semver-compatible dependencies * dist: install while downloading * dist: store more context in ComponentBinary * dist: yield self when download is complete * dist: move URL alteration logic into DownloadCfg method * Apply suggestions from clippy 1.91 * refactor(check): Consolidate use_colors checks * fix(check): Use Cargo's colors * refactor(check): Make calls more consistent * dist: drop another layer of abstraction * dist: store package directory once * dist: inline short single-use function * dist: discard unnecessary abstraction layer * chore(deps): update actions/upload-artifact action to v5 * fix(cli/rustup-mode): add missing self-update in `rustup toolchain install` * refactor(cli/self-update): move `self_update()` to `SelfUpdateMode::update()` * refactor(cli/rustup-mode): pass self-update predicates into `self_update()` * refactor(cli/self-update): import `utils::ExitCode` * rustup: tweak update check output style * fix(list): Match show command's styling * test(list): Add UI test * fix(toolchain): Have 'list' match 'show's styling * refactor(toolchain): Order logic by display order * refactor(toolchain): Use string interpolation * test(toolchain): Show list's behavior * fix(update): Match 'cargo update's colors * refactor(update): Centralize style knowledge * test: Cover different show_channel_update cases * fix(check): Subject check to RUSTUP_TERM_COLOR * test(check): Show current style * fix: Use HEADER styling in 'rustup show' * chore: Update clap-cargo * test: Demonstrate show's behavior * test(process): Allow forcing color on * test(process): Ensure non-locked writes are stripped of ANSI escape codes * cli: update `uninstall_removes_source_from_rcs` to mirror `uninstall_doesnt_modify_rcs_with_no_modify_path` * cli: add tests for `rustup self uninstall --no-modify-path` * cli: add `rustup self uninstall --no-modify-path` * cli: add help text for `rustup self uninstall -y` * fix(cli/help): change indentation of discussions to 2 spaces * fix(cli/help): adjust help text for `rustup install` * feat(cli/help): add toolchain install tips to `rustup update`'s discussion * feat(cli/help): discuss `rustup toolchain install` * style: Remove wildcard imports * progress: modify progress bar's states to be column-aligned * installations: handle installation of components through progress bars * feat(cli): Add a sub-heading style for 'completion' Help Discussion * feat(cli): Have Help Discussions match rest of CLI Help * feat(cli): Add color to clap help/errors * refactor(cli): Switch help text to functions * cli: propagate ActiveSource from the top * cli: upgrade error events to ERROR level * cli: inline Cfg::active_rustc_version() * cli: extract display_version() from rustup main() * cli: inline Cfg::resolve_local_toolchain() * cli: inline Cfg::resolve_toolchain() * config: extract setting of toolchain override in rustup help mode * cli: avoid Cfg construction indirection * config: privatize some Cfg fields * config: drop trivial Cfg setters * Expand `RUSTUP_TOOLCHAIN_SOURCE`'s documentation * refactor(installation): extract installation of a component into a separate function * bin: clean up imports * cli: rename CLIError to CliError * config: rename OverrideDB to OverrideDb * dist: clean up unnecessary qualification * test: Replace trycmd with snapbox * chore: Update snapbox * Update the default Windows SDK version * refactor(log): Single source RUSTUP_TERM_COLOR * style: Encourage using existing imports * process: avoid fine-grained locking for logs * process: discard unnecessary layer of synchronization * process: inline TerminalInnerLocked * process: replace unsafe code with safe equivalent * process: extract color_choice() method * process: extract is_a_tty value * process: inline StreamSelector::is_a_tty() * process: inline TestWriterLock * Implement `RUSTUP_TOOLCHAIN_SOURCE` with new `Display` impl * Move `Display` impl to `to_reason()` * Rename `ActiveReason` to `ActiveSource` * dist: simplify DownloadStatus setup * dist: decentralize download status * dist: postpone creation of ComponentBinary values * dist: extract DownloadStatus type * dist: call DownloadTracker methods directly * dist: drop unnecessary Notifier layer * dist: replace PackageContext with DownloadCfg * refactor: Directly apply styling * refactor: Don't bother grabbing lock for tests * refactor: Replace termcolor with anstream * refactor: Move style building out of ColorableTerminal * refactor: Migrate to anstyle for color definitions * fix(www): removes www subdomain from all rust-lang.org urls * dist: move Notification into dist::download * notifications: remove unused Display impl * dist: move Notifier into DownloadCfg * cli: build Cfg earlier in setup mode * dist: reuse existing DownloadCfg in update_v1() * dist: move dist_root out of DownloadCfg * dist: drop unused Clone derives * dist: drop Copy derive from DownloadCfg * dist: move Notifier and DownloadTracker into dist::download * dist: inline DownloadCfg test setup * download: move File items down * download: extract DownloadCfg initialization from Cfg * config: discard pointless method argument * cli: rename DownloadTracker::new_with_display_progress() to new() * notifications: log directly from DownloadTracker * notifications: log directly on bad download checksums * notifications: log directly when reusing downloaded files * notifications: log directly on buffer size changes * Update platforms to 3.7.0 * notifications: log directly on duplicate toolchain files * notifications: log directly on metadata upgrades that remove toolchains * notifications: log directly when reading metadata version * notifications: log directly when metadata upgrade is not needed * notifications: log directly when upgrading metadata version * notifications: log directly when uninstalling toolchains * notifications: log directly when toolchain is up to date * notifications: log directly when toolchain has been installed * notifications: log directly when installing toolchains * notifications: log the toolchain directory directly * notifications: log directly when using existing toolchains * notifications: log directly when looking for toolchains * notifications: log directly when setting auto-self-update mode * notifications: log directly when setting profile * notifications: log directly when setting overrides * notifications: use human-friendly log format for temp file deletions * notifications: use human-friendly log format for directory deletions * notifications: use human-friendly log format for retrying renames * notifications: use human-friendly log format for path canonicalization * cli: drop unnecessary generics * process: import instead of qualifying ColorableTerminal * process: hide internal structure * process: don't re-export external items * process: rename terminalsource to terminal_source * process: rename filesource to file_source * process: re-order items in terminalsource module * feat(cli/self-update): add support for PowerShell on Unix systems * refactor: Remove unused traits * refactor: Directly use ColorableTerminal * refactor: Simplify working with ColorableTerminal * fix(process): Ensure stdout/stderr lock is held across calls * refactor(process): Centralize Write bookkeeping * docs(changelog): describe default profile change during auto-install * Fix typo in clitools.rs comment * ci(docs): fix local doc branch name * Move the default branch from `master` to `main` * Upgrade opentelemetry dependencies * ci: use macOS Intel runners * notifications: log directly when setting the default toolchain * notifications: log directly when setting auto install mode * notifications: log directly when resuming partial downloads * notifications: log directly when downloading files * notifications: log directly when removing stray hash files * notifications: log directly when skipping components * notifications: log directly on missing components * notifications: log directly when downloading legacy manifests * notifications: log directly for downloaded manifests * notifications: log directly for manifest downloads * notifications: log directly when removing components * notifications: log directly when installing components * notifications: log directly after failing to determine memory limit * notifications: log directly when hash file not found * notifications: log directly when failing to update hash file * notifications: log directly when component is already installed * notifications: log directly for valid checksums * notifications: log directly when using download backends * chore: avoid trailing whitespace in error message * refactor: Switch logging to anstyle * refactor: Remove unused ColorableTerminal::carriage_return * notifications: privatize Notification type * notifications: log directly on creating temp files * notifications: log directly on temp root creation * notifications: log directly on file deletions * notifications: log directly on directory deletions * notifications: log directly about non-fatal errors * notifications: log directly about rolling back changes * notifications: log directly for retrying renames * notifications: log directly when removing directories * notifications: log directly when copying directories * notifications: log directly when linking directories * notifications: log directly when path canonicalization fails * notifications: log directly when creating directories * tests: use DistContext for dist::components tests * tests: move DistContext into library * tests: deduplicate distribution installation tests * notifications: tweak style * Inline utils Notification variants into top-level Notification * Inline dist Notification variants into top-level Notification * Inline dist::temp::Notification variants into top-level Notification * dist: remove temp::Notification variant from dist::Notification * dist: extract URL alteration from download() method * dist: detach download_component() from Manifestation * dist: introduce ComponentBinary type * dist: avoid passing through arguments * dist: avoid unnecessary type annotations * dist: avoid cloning components Vec * refactor: remove redundant references * dist: simpify casting to trait object * dist: deduplicate decompression setup code * cli: move more self update logic into self_update module * refactor(dist/manifestation): remove redundant `.to_string()` * Remove unneeded paranthesees * Fix link in the bug reporting template * ci(all-features/windows): update `OPENSSL_LIB_DIR` for OpenSSL v3 compatibility * docs(dev-guide): improve suggestion for overriding arg0 * docs(dev-guide): mention the arg0 override trick on welcome page * docs(README): link CI status badge to GitHub Actions panel * feat(dist/manifestation): adjust default concurrent downloads when installing toolchains * feat(cli/rustup-mode): check updates for all channels unless `RUSTUP_CONCURRENT_DOWNLOADS` is set to 1 * refactor: rename `num_channels` to `concurrent_downloads` * fix: fix hang by preventing `stream.buffered(0)` in concurrent downloads * test(dist/manifestation): extract `TestContext::*with_env()` * refactor(download): use `NonZero` instead of `NonZeroU64` * refactor(process): remove redundant `.context()` in `Process::concurrent_downloads()` * chore(deps/renovate): group version bumps for `windows-rs` crates * Upgrade windows crates * fix(cli/rustup_mode): use ASCII-compatible spinner * chore(deps): update aws-actions/configure-aws-credentials action to v5 * feat(install): warn if default linker (cc) is missing; add respective test case * Remove hardcoded dependency to the master branch * feat(downloads): delay the reappearance of the progress bar when retrying a download * fix(downloads): correct faulty behavior when a download fails * fix(downloads): correct faulty output when retrying a download * feat(self_update): add tcsh shell support to cli #3413 * Replace non_empty_env_var() with Process::var_opt() * fix(downloads): report real elapsed time of a component downloads instead of cumulative * Treat empty environment variables as unset * fix(downloads): honor the RUSTUP_CONCURRENT_DOWNLOADS by always having "n" concurrent downloads * chore(deps): disable default features for zstd * feat(downloads): introduce `RUSTUP_CONCURRENT_DOWNLOADS` to control concurrency * ci(check): make installation of `taplo-cli` faster * fix(notifications): delete unnecessary Download(Pop/Push)Unit notifications * fix(downloads): extract closure for downloading a component into a separate function * feat(downloads): concurrently download components * fix(downloads): add a comment to justify the unwrap on `.get()` of `OnceLock` * chore(deps): update actions/checkout action to v5 * fix(download_timeout): introduce RUSTUP_DOWNLOAD_TIMEOUT for overriding download timeout * fix(downloads): substitute the LazyLock for a OnceLock * feat(rustup_mode): revise help message * feat: improve error message for `rustup which` * test: detach snapshots from component installation order * feat(download_tracker): refactor in favor of `indicatif` * feat(process): create a `ProgressDrawTarget` (for `indicatif`) inside the `Process` * fix(rustup-init/sh): avoid `hw.optional.*: 1` stdout in macOS arch check * hack(cli/common): suppress host emulation warnings in rustup's own CI * fix(test/clitools): pass `RUSTUP_CI` to in-process tests * ci(macos): run x64 workflows with Rosetta 2 * docs(user-guide/environment-variables): clarify the unit of `RUSTUP_UNPACK_RAM` * docs(user-guide/environment-variables): unify description style * docs(user-guide/environment-variables): update description of `RUSTUP_IO_THREADS` * Limit Tokio worker threads to I/O thread count * Use manual Tokio runtime setup * Attach io_thread_count() to Process * Always consider RUSTUP_IO_THREADS as input for thread count * utils: express io_thread_count() in a simpler way * opt(err): show renaming file error source * Set a maximum thread limit for remove_dir_all * fix(toolchain/distributable): refine handling of known targets with no prebuilt artifacts * fix(ci/fetch-rust-docker): update comments * fix(ci/docker): update `CC` name for `powerpc64le-unknown-linux-gnu` * Extract self_update() from update_all_channels() * Show channel updates even if self update is not permitted * Remove Cargo feature indirection * Move Cfg::get_self_update_mode() to SelfUpdateMode::from_cfg() * Replace trivial enum with bool * feat(updates): introduce `RUSTUP_TERM_WIDTH` to override terminal width * feat(updates): introduce `RUSTUP_TERM_PROGRESS_WHEN` to toggle the progress bars * Limit the default number of I/O threads * Bump `toml` to 0.9 * feat(updates): check for updates concurrently * feat(terminal): implement the `TermLike` trait for `ColorableTerminal` * chore: use match ergonomics in favor of explicit `ref`s * refactor(download/curl): use early returns in `download()` * chore(cli/rustup_mode): merge `std` imports * chore(cli/rustup-mode): import `std::io` * chore: fix new `clippy` warnings * fix(ci/run): specify target triple for `bindgen-cli` installation * feat(www): improve "copy" button style compatibility with Chromium * ci(run): install `codegen-cli` with `cargo-binstall` * docs: replace Discord links * Block broken snap curl * Upgrade to windows-sys 0.60 * Emphasize that `llvm-tools` dist component is not subject to compiler stability guarantees * docs(README): update CI status badge * Fix rustup-init.sh cputype check for sparcv9 * add Solaris support * test(clitools)!: remove all deprecated `.expect_*()` APIs * test(clitools)!: privatize `Config::run()` * test: migrate remaining uses of `.run()` to `.expect()` APIs * test(clitools): extract `Assert::redact()` * test: simplify `.display().to_string()` in `.extend_redactions()` * test(cli_misc): bring back missing assertions * Update help.rs: bash completions instructions (#1) * docs(user-guide): fix typo * docs(dev-guide): update the section on `clippy` lints * docs(dev-guide): mention test helpers and `Assert` * docs(test/clitools): add docs for `Assert` * Upgrade to rustls-platform-verifier 0.6 * test(cli-v2): migrate to `.expect()` APIs * test(cli-misc): migrate to `.expect()` APIs * fix(toolchain): fix proxy fallback notification format on Windows * test(cli-v1): migrate to `.expect()` APIs * test(download): serialize tests with proxy-sensitive URLs * test(cli-rustup): migrate to `.expect()` APIs * test(clitool): add `Assert::remove_redactions()` * test(clitools): allow `OsStr`-like args in `Config::expect*()` * Fix CI image names for downloading ARM and PowerPC artifacts * Update platforms to 3.6 * test(cli-exact): migrate to `.expect()` APIs * Avoid swallowing errors in show() * Simplify target processing logic * Inline returned bindings * Increase Windows main thread stack size to 2mb * test(cli-inst-interactive): migrate to `.expect()` APIs * Unset RUSTUP_AUTO_INSTALL for tests * test(cli-paths): migrate to `.expect()` APIs * test(cli-exact): use the new `[CURRENT_VERSION]` redaction * test(cli-self-upd): migrate to `.expect()` APIs * Tweak list_items() docstring * Leverage bool::then_some() to simplify some code * Avoid intermediate allocation in listing * test(custom-toolchains): `target list` now can display the installed targets * feat(custom-toolchains): `target` and `component list` working on custom toolchains * Skip manifest loading if there are no components/targets to check * fix(deps): update rust crate opener to 0.8.0 * rustup check: set exit status based on available updates * rustup check: adopt no-self-update logic * feat(self_update): add proxy sanity checks * style(test): qualify uses of `snapbox::str![]` * refactor(test): migrate some tests to `.expect()` APIs * chore(test): deprecated old APIs overlapping with the new ones * refactor(test): add new `.expect()`-based testing APIs * test(custom-toolchains): using `show` on a custom toolchain without a `components` file * test(custom-toolchains): add test to showcase that the issue was solved * feat(custom-toolchains): `rustup show` now reporting installed targets * tests: print diffs on test failures * Log versions during self updates * Fix cargo lints on Windows * toolchain: hoist binary name conditionals out of fallback functions * refactor(test): replace `TempDir::into_path()` with `TempDir::keep()` * refactor(test/clitools): use globally-defined `tempdir_in_with_prefix()` * feat(toolchain): notify the user when proxy fallback is activated * feat(toolchain): consider external `rust-analyzer` when calling a proxy * refactor(toolchain): move predicates into `Toolchain::maybe_do_cargo_fallback()` * refactor(toolchain): privatize `Toolchain::maybe_do_cargo_fallback()` * deps: update aws-lc-rs to 1.13.1 * docs(changelog): mirror changes from the release announcement, take 2 * Deprecate native-tls as well * Enable HTTP/2 support for reqwest download backend * Emit tracing events from log facade calls * download: show Debug representation for errors * Avoid repeated globals in tracing events * Log original download errors immediately * feat(cli/rustup-mode): add aliases to `rustup component remove` * Switch flate2 to use the zlib-rs backend * Hardlink proxies if symlinks aren't reachable * Add powerpc64le-unknown-linux-musl support * Add toolchain_name to not installed bail msg * Warn about using curl * Drop workspace indirection * Fold download crate back into rustup * download: merge integration test files * Test CARGO environment replacement * Update CARGO env var if it is a rustup proxy * Tweak toolchain subcommand help text * Move toolchain and default commands first * show toolchain paths in rustup show -v output * refactor(cli/self-update): save allocations in `Nu::rcfiles()` * fix(cli/self-update)!: stop appending to `env.nu` due to deprecation * fix(cli/self-update): consider Windows paths in Nushell suggestions * refactor(cli/self-update): use `path add` in `env.nu` template * fix(cli/self-update): use interpolated string in `env.nu` template * Upgrade dependencies * docs(user-guide/environment-variables): document `RUSTUP_VERSION` * feat(rustup-init/sh): allow setting `RUSTUP_VERSION` during installation * feat(cli/self-update): allow setting `RUSTUP_VERSION` for arbitrary downgrades * feat(test/clitools): add `Config::expect_ok_ex_env()` * fix(errors)!: improve error messages for `RustupError::ToolchainNotInstalled` * Add set auto-install disable * Use `cursor: pointer` for copy button on website * fix(dist): refine suggestions about missing targets * Append Windows bin directory to PATH by default * Remove validation for custom toolchains when reading rust-toolchain.toml * document RUSTUP_AUTO_INSTALL * Fix build script `cargo` instructions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1824 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1824 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * rustup-debuginfo-1.29.1~0-160000.1.1 * rustup-debugsource-1.29.1~0-160000.1.1 * rustup-1.29.1~0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * rustup-debuginfo-1.29.1~0-160000.1.1 * rustup-debugsource-1.29.1~0-160000.1.1 * rustup-1.29.1~0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2025-58160.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://www.suse.com/security/cve/CVE-2026-25727.html * https://www.suse.com/security/cve/CVE-2026-41676.html * https://www.suse.com/security/cve/CVE-2026-41677.html * https://www.suse.com/security/cve/CVE-2026-41678.html * https://www.suse.com/security/cve/CVE-2026-41681.html * https://www.suse.com/security/cve/CVE-2026-41898.html * https://www.suse.com/security/cve/CVE-2026-42327.html * https://www.suse.com/security/cve/CVE-2026-44662.html * https://www.suse.com/security/cve/CVE-2026-45784.html * https://www.suse.com/security/cve/CVE-2026-93599.html * https://www.suse.com/security/cve/CVE-2026-93600.html * https://www.suse.com/security/cve/CVE-2026-93601.html * https://www.suse.com/security/cve/CVE-2026-93602.html * https://bugzilla.suse.com/show_bug.cgi?id=1230032 * https://bugzilla.suse.com/show_bug.cgi?id=1243862 * https://bugzilla.suse.com/show_bug.cgi?id=1249008 * https://bugzilla.suse.com/show_bug.cgi?id=1257902 * https://bugzilla.suse.com/show_bug.cgi?id=1270186 * https://bugzilla.suse.com/show_bug.cgi?id=1270521 * https://bugzilla.suse.com/show_bug.cgi?id=1270619 * https://bugzilla.suse.com/show_bug.cgi?id=1270644 * https://bugzilla.suse.com/show_bug.cgi?id=1270795 * https://bugzilla.suse.com/show_bug.cgi?id=1270870 * https://bugzilla.suse.com/show_bug.cgi?id=1270874 * https://bugzilla.suse.com/show_bug.cgi?id=1270989 * https://bugzilla.suse.com/show_bug.cgi?id=1274144 * https://bugzilla.suse.com/show_bug.cgi?id=1282217 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:49 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:31:49 -0000 Subject: SUSE-SU-2026:24013-1: important: Security update for wireshark Message-ID: <179139070973.1876.1790774995003817382@8fe190deb1b6> # Security update for wireshark Announcement ID: SUSE-SU-2026:24013-1 Release Date: 2026-10-02T17:37:57Z Rating: important References: * bsc#1275279 * bsc#1275280 * bsc#1275281 * bsc#1275828 * bsc#1275829 * bsc#1275831 * bsc#1275832 * bsc#1275833 * bsc#1275834 * bsc#1275835 * bsc#1275836 * bsc#1275838 * bsc#1275839 * bsc#1275840 * bsc#1275841 * bsc#1275842 * bsc#1275843 * bsc#1275844 * bsc#1275845 * bsc#1275846 * bsc#1275847 * bsc#1275848 * bsc#1275849 * bsc#1275850 * bsc#1275851 * bsc#1275852 * bsc#1275853 * bsc#1275854 Cross-References: * CVE-2026-19694 * CVE-2026-19695 * CVE-2026-19696 * CVE-2026-76879 * CVE-2026-76880 * CVE-2026-76881 * CVE-2026-76882 * CVE-2026-76883 * CVE-2026-76884 * CVE-2026-76885 * CVE-2026-76886 * CVE-2026-76887 * CVE-2026-76888 * CVE-2026-76889 * CVE-2026-76890 * CVE-2026-76891 * CVE-2026-76917 * CVE-2026-76918 * CVE-2026-76919 * CVE-2026-76920 * CVE-2026-76921 * CVE-2026-76922 * CVE-2026-76923 * CVE-2026-76924 * CVE-2026-76926 * CVE-2026-76927 * CVE-2026-76928 * CVE-2026-76929 CVSS scores: * CVE-2026-19694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19694 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19694 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2026-76879 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76879 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76880 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76880 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76881 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76881 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76881 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76884 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76884 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76884 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76885 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76885 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76885 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76886 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76886 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76886 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76887 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76887 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76887 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76888 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76888 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76888 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76889 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76889 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76889 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76890 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76890 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76890 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76917 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76917 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76918 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76918 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76919 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76919 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76919 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76920 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76920 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76920 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76921 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76921 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76922 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76922 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76923 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76923 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76924 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76924 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76926 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76926 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76926 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76928 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76928 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76929 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76929 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76929 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 28 vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: Update to Wireshark 4.4.18: * CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). * CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). * CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281). * CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828). * CVE-2026-76880: RRC protocol dissector crash (bsc#1275829). * CVE-2026-76881: CMS protocol dissector crash (bsc#1275831). * CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832). * CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833). * CVE-2026-76884: ERF file parser crash (bsc#1275834). * CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835). * CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836). * CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838). * CVE-2026-76888: RDP protocol dissector crash (bsc#1275839). * CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840). * CVE-2026-76890: Sharkd utility crash (bsc#1275841). * CVE-2026-76891: Sharkd utility crash (bsc#1275844). * CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842). * CVE-2026-76918: SSH protocol dissector crash (bsc#1275843). * CVE-2026-76919: ESS protocol dissector crash (bsc#1275845). * CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846). * CVE-2026-76921: CMS protocol dissector crash (bsc#1275847). * CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848). * CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849). * CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850). * CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851). * CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852). * CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853). * CVE-2026-76929: Pcapng file parser crash (bsc#1275854). Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1822 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1822 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wireshark-devel-4.4.18-160000.1.1 * wireshark-ui-qt-4.4.18-160000.1.1 * libwsutil16-4.4.18-160000.1.1 * wireshark-debuginfo-4.4.18-160000.1.1 * libwireshark18-4.4.18-160000.1.1 * wireshark-4.4.18-160000.1.1 * wireshark-debugsource-4.4.18-160000.1.1 * libwiretap15-4.4.18-160000.1.1 * libwsutil16-debuginfo-4.4.18-160000.1.1 * libwiretap15-debuginfo-4.4.18-160000.1.1 * wireshark-ui-qt-debuginfo-4.4.18-160000.1.1 * libwireshark18-debuginfo-4.4.18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wireshark-devel-4.4.18-160000.1.1 * wireshark-ui-qt-4.4.18-160000.1.1 * libwsutil16-4.4.18-160000.1.1 * wireshark-debuginfo-4.4.18-160000.1.1 * libwireshark18-4.4.18-160000.1.1 * wireshark-4.4.18-160000.1.1 * wireshark-debugsource-4.4.18-160000.1.1 * libwiretap15-4.4.18-160000.1.1 * libwsutil16-debuginfo-4.4.18-160000.1.1 * libwiretap15-debuginfo-4.4.18-160000.1.1 * wireshark-ui-qt-debuginfo-4.4.18-160000.1.1 * libwireshark18-debuginfo-4.4.18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19694.html * https://www.suse.com/security/cve/CVE-2026-19695.html * https://www.suse.com/security/cve/CVE-2026-19696.html * https://www.suse.com/security/cve/CVE-2026-76879.html * https://www.suse.com/security/cve/CVE-2026-76880.html * https://www.suse.com/security/cve/CVE-2026-76881.html * https://www.suse.com/security/cve/CVE-2026-76882.html * https://www.suse.com/security/cve/CVE-2026-76883.html * https://www.suse.com/security/cve/CVE-2026-76884.html * https://www.suse.com/security/cve/CVE-2026-76885.html * https://www.suse.com/security/cve/CVE-2026-76886.html * https://www.suse.com/security/cve/CVE-2026-76887.html * https://www.suse.com/security/cve/CVE-2026-76888.html * https://www.suse.com/security/cve/CVE-2026-76889.html * https://www.suse.com/security/cve/CVE-2026-76890.html * https://www.suse.com/security/cve/CVE-2026-76891.html * https://www.suse.com/security/cve/CVE-2026-76917.html * https://www.suse.com/security/cve/CVE-2026-76918.html * https://www.suse.com/security/cve/CVE-2026-76919.html * https://www.suse.com/security/cve/CVE-2026-76920.html * https://www.suse.com/security/cve/CVE-2026-76921.html * https://www.suse.com/security/cve/CVE-2026-76922.html * https://www.suse.com/security/cve/CVE-2026-76923.html * https://www.suse.com/security/cve/CVE-2026-76924.html * https://www.suse.com/security/cve/CVE-2026-76926.html * https://www.suse.com/security/cve/CVE-2026-76927.html * https://www.suse.com/security/cve/CVE-2026-76928.html * https://www.suse.com/security/cve/CVE-2026-76929.html * https://bugzilla.suse.com/show_bug.cgi?id=1275279 * https://bugzilla.suse.com/show_bug.cgi?id=1275280 * https://bugzilla.suse.com/show_bug.cgi?id=1275281 * https://bugzilla.suse.com/show_bug.cgi?id=1275828 * https://bugzilla.suse.com/show_bug.cgi?id=1275829 * https://bugzilla.suse.com/show_bug.cgi?id=1275831 * https://bugzilla.suse.com/show_bug.cgi?id=1275832 * https://bugzilla.suse.com/show_bug.cgi?id=1275833 * https://bugzilla.suse.com/show_bug.cgi?id=1275834 * https://bugzilla.suse.com/show_bug.cgi?id=1275835 * https://bugzilla.suse.com/show_bug.cgi?id=1275836 * https://bugzilla.suse.com/show_bug.cgi?id=1275838 * https://bugzilla.suse.com/show_bug.cgi?id=1275839 * https://bugzilla.suse.com/show_bug.cgi?id=1275840 * https://bugzilla.suse.com/show_bug.cgi?id=1275841 * https://bugzilla.suse.com/show_bug.cgi?id=1275842 * https://bugzilla.suse.com/show_bug.cgi?id=1275843 * https://bugzilla.suse.com/show_bug.cgi?id=1275844 * https://bugzilla.suse.com/show_bug.cgi?id=1275845 * https://bugzilla.suse.com/show_bug.cgi?id=1275846 * https://bugzilla.suse.com/show_bug.cgi?id=1275847 * https://bugzilla.suse.com/show_bug.cgi?id=1275848 * https://bugzilla.suse.com/show_bug.cgi?id=1275849 * https://bugzilla.suse.com/show_bug.cgi?id=1275850 * https://bugzilla.suse.com/show_bug.cgi?id=1275851 * https://bugzilla.suse.com/show_bug.cgi?id=1275852 * https://bugzilla.suse.com/show_bug.cgi?id=1275853 * https://bugzilla.suse.com/show_bug.cgi?id=1275854 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:55 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:31:55 -0000 Subject: SUSE-SU-2026:24012-1: moderate: Security update for openexr Message-ID: <179139071569.1876.11272960043384360634@8fe190deb1b6> # Security update for openexr Announcement ID: SUSE-SU-2026:24012-1 Release Date: 2026-10-02T15:28:07Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1821 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1821 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libOpenEXRUtil-3_2-31-debuginfo-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-3.2.2-160000.11.1 * openexr-debugsource-3.2.2-160000.11.1 * libIex-3_2-31-debuginfo-3.2.2-160000.11.1 * openexr-3.2.2-160000.11.1 * libIlmThread-3_2-31-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-3.2.2-160000.11.1 * openexr-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * openexr-doc-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libOpenEXRUtil-3_2-31-debuginfo-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-3.2.2-160000.11.1 * openexr-debugsource-3.2.2-160000.11.1 * libIex-3_2-31-debuginfo-3.2.2-160000.11.1 * openexr-3.2.2-160000.11.1 * libIlmThread-3_2-31-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-3.2.2-160000.11.1 * openexr-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (noarch) * openexr-doc-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:02 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:32:02 -0000 Subject: SUSE-RU-2026:24011-1: important: Recommended update for hawk-apiserver Message-ID: <179139072269.1876.9506882392851702839@8fe190deb1b6> # Recommended update for hawk-apiserver Announcement ID: SUSE-RU-2026:24011-1 Release Date: 2026-10-02T18:09:52Z Rating: important References: * bsc#1267910 * bsc#1274860 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that has two fixes can now be installed. ## Description: This update for hawk-apiserver fixes the following issues: Changes in hawk-apiserver: * Enable custom user parameters (bsc#1274860) * cib/live/clones is handled in the hawk-apiserver instead of hawk * cib/live is handled in the hawk-apiserver instead of hawk * Fix: Can't add Utilization attributes to primitives (bsc#1267910): * Add XInputsKvGroup * Enable other Primitive-Operation attributes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1823 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * hawk-apiserver-0.2.2+git.1787135908.0b1b73e-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1267910 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:16 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:32:16 -0000 Subject: SUSE-SU-2026:4559-1: important: Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) Message-ID: <179139073642.1876.8304094843759415212@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4559-1 Release Date: 2026-10-07T10:05:44Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4559 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_310-default-7-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:29 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:32:29 -0000 Subject: SUSE-SU-2026:4558-1: important: Security update for libsoup Message-ID: <179139074979.1876.15377827594566534506@8fe190deb1b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4558-1 Release Date: 2026-10-07T08:51:34Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271447 * bsc#1271449 * bsc#1272195 * bsc#1273156 Cross-References: * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4558 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4558 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4558 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4558 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (x86_64) * libsoup-3_0-0-32bit-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-32bit-3.4.4-150600.3.56.1 * libsoup-3_0-0-32bit-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-64bit-3.4.4-150600.3.56.1 * libsoup-3_0-0-64bit-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * Basesystem Module 15-SP7 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup-lang-3.4.4-150600.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:41 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 16:32:41 -0000 Subject: SUSE-SU-2026:4557-1: important: Security update for libsoup Message-ID: <179139076145.1876.16988818415717638252@8fe190deb1b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4557-1 Release Date: 2026-10-07T08:51:00Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271447 * bsc#1271449 * bsc#1272195 * bsc#1273156 Cross-References: * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4557 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4557 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4557 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4557 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4557 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4557 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4557 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4557 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4557 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (x86_64) * libsoup-3_0-0-32bit-3.0.4-150400.3.52.1 * libsoup-devel-32bit-3.0.4-150400.3.52.1 * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-3.0.4-150400.3.52.1 * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.52.1 * libsoup-devel-64bit-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.52.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:16 -0000 Subject: SUSE-SU-2026:4561-1: important: Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Message-ID: <179140501670.30.15732644361211851378@f036aff0f2c6> # Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4561-1 Release Date: 2026-10-07T13:34:20Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4561 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_323-default-3-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:23 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:23 -0000 Subject: SUSE-SU-2026:4568-1: important: Security update for rpcbind Message-ID: <179140502362.30.12009488612548985146@f036aff0f2c6> # Security update for rpcbind Announcement ID: SUSE-SU-2026:4568-1 Release Date: 2026-10-07T15:27:04Z Rating: important References: * bsc#1272340 * bsc#1282326 Cross-References: * CVE-2026-16461 * CVE-2026-94640 CVSS scores: * CVE-2026-16461 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-16461 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for rpcbind fixes the following issues: * CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340). * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4568 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4568 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4568 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4568 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4568 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4568 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4568 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4568 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4568 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4568 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4568 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4568 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4568 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4568 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4568 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4568 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16461.html * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1272340 * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:29 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:29 -0000 Subject: SUSE-SU-2026:4567-1: important: Security update for fetchmail Message-ID: <179140502913.30.11145534589063389021@f036aff0f2c6> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4567-1 Release Date: 2026-10-07T15:23:33Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4567 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4567 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * fetchmail-6.3.26-13.24.1 * fetchmailconf-6.3.26-13.24.1 * fetchmail-debuginfo-6.3.26-13.24.1 * fetchmail-debugsource-6.3.26-13.24.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * fetchmail-6.3.26-13.24.1 * fetchmailconf-6.3.26-13.24.1 * fetchmail-debuginfo-6.3.26-13.24.1 * fetchmail-debugsource-6.3.26-13.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:35 -0000 Subject: SUSE-SU-2026:4566-1: important: Security update for libXtst Message-ID: <179140503519.30.1616283598401171941@f036aff0f2c6> # Security update for libXtst Announcement ID: SUSE-SU-2026:4566-1 Release Date: 2026-10-07T15:22:54Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4566 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4566 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4566 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4566 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4566 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4566 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4566 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4566 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4566 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4566 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4566 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4566 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4566 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4566 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4566 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4566 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * Basesystem Module 15-SP7 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:41 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:41 -0000 Subject: SUSE-SU-2026:4565-1: important: Security update for libXtst Message-ID: <179140504177.30.17121531858001812644@f036aff0f2c6> # Security update for libXtst Announcement ID: SUSE-SU-2026:4565-1 Release Date: 2026-10-07T15:20:07Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4565 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4565 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libXtst-devel-1.2.2-8.3.1 * libXtst6-debuginfo-1.2.2-8.3.1 * libXtst-debugsource-1.2.2-8.3.1 * libXtst6-1.2.2-8.3.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libXtst6-32bit-1.2.2-8.3.1 * libXtst6-debuginfo-32bit-1.2.2-8.3.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libXtst-debugsource-1.2.2-8.3.1 * libXtst6-1.2.2-8.3.1 * libXtst-devel-1.2.2-8.3.1 * libXtst6-debuginfo-1.2.2-8.3.1 * libXtst6-32bit-1.2.2-8.3.1 * libXtst6-debuginfo-32bit-1.2.2-8.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:47 -0000 Subject: SUSE-RU-2026:4564-1: important: Recommended update for google-guest-configs Message-ID: <179140504782.30.3157514681911202446@f036aff0f2c6> # Recommended update for google-guest-configs Announcement ID: SUSE-RU-2026:4564-1 Release Date: 2026-10-07T14:28:56Z Rating: important References: * bsc#1281946 Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has one fix can now be installed. ## Description: This update for google-guest-configs contains the following fixes: * Update to version 20260918.01: (bsc#1281946) * Update SR-IOV udev rule for idpf network devices. * from version 20260916.00 * nic-naming: Fix IDPF VF device rename * from version 20260915.00 * Remove build.sh file * from version 20260914.00 * set_multiqueue: stop setting XPS at all on a4x/a5x * from version 20260910.00 * set_multiqueue: fix awk parsing for idpf ring len * from version 20260819.00 * set_multiqueue: Set IDPF ring length to 4096 by default * from version 20260804.00 * nic-naming: improve handling of BM IRDMA devices ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4564 ## Package List: * Public Cloud Module 12 (noarch) * google-guest-configs-20260918.01-1.52.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281946 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:54 -0000 Subject: SUSE-RU-2026:4563-1: important: Recommended update for google-guest-configs Message-ID: <179140505428.30.12844799005787592016@f036aff0f2c6> # Recommended update for google-guest-configs Announcement ID: SUSE-RU-2026:4563-1 Release Date: 2026-10-07T14:28:43Z Rating: important References: * bsc#1281946 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for google-guest-configs contains the following fixes: * Update to version 20260918.01: (bsc#1281946) * Update SR-IOV udev rule for idpf network devices. * from version 20260916.00 * nic-naming: Fix IDPF VF device rename * from version 20260915.00 * Remove build.sh file * from version 20260914.00 * set_multiqueue: stop setting XPS at all on a4x/a5x * from version 20260910.00 * set_multiqueue: fix awk parsing for idpf ring len * from version 20260819.00 * set_multiqueue: Set IDPF ring length to 4096 by default * from version 20260804.00 * nic-naming: improve handling of BM IRDMA devices ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4563 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4563 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4563 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4563 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4563 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4563 ## Package List: * Public Cloud Module 15-SP4 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 * openSUSE Leap 15.4 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 * Public Cloud Module 15-SP5 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 * Public Cloud Module 15-SP6 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 * Public Cloud Module 15-SP7 (noarch) * google-guest-configs-20260918.01-150400.13.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281946 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:59 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:30:59 -0000 Subject: SUSE-RU-2026:4562-1: moderate: Recommended update for virt-manager Message-ID: <179140505970.30.6499161482853039194@f036aff0f2c6> # Recommended update for virt-manager Announcement ID: SUSE-RU-2026:4562-1 Release Date: 2026-10-07T14:15:42Z Rating: moderate References: * bsc#1268781 Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for virt-manager fixes the following issues: * Fix: inconsistent OS names in virt-install for 16.0 (bsc#1268781) * Add check for product name length to prevent exception * Fix a python syntax warning ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4562 ## Package List: * Server Applications Module 15-SP7 (noarch) * virt-install-5.0.0-150700.7.17.1 * virt-manager-5.0.0-150700.7.17.1 * virt-manager-common-5.0.0-150700.7.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1268781 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:31:07 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 07 Oct 2026 20:31:07 -0000 Subject: SUSE-SU-2026:4560-1: important: Security update for openssl-3-livepatches Message-ID: <179140506717.30.5448391735923174581@f036aff0f2c6> # Security update for openssl-3-livepatches Announcement ID: SUSE-SU-2026:4560-1 Release Date: 2026-10-07T12:42:31Z Rating: important References: * bsc#1280587 * bsc#1282798 Cross-References: * CVE-2026-84782 CVSS scores: * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-3-livepatches fixes the following issue: * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4560 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le x86_64) * openssl-3-livepatches-0.7-150700.16.15.1 * openssl-3-livepatches-debuginfo-0.7-150700.16.15.1 * openssl-3-livepatches-debugsource-0.7-150700.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1282798 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 08:30:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 08:30:19 -0000 Subject: SUSE-SU-2026:4570-1: important: Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) Message-ID: <179144821935.533.18007764595983705637@6dbbbe6e8c3a> # Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4570-1 Release Date: 2026-10-07T17:04:15Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4570 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_317-default-5-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:31:18 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:31:18 -0000 Subject: SUSE-SU-2026:4576-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179146267833.23937.16282559201054899754@f42c2f07aca2> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4576-1 Release Date: 2026-10-08T08:09:52Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79 (jsc#ECO-3319): * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * Added new Profile for RHEL10: BSI * Move RHEL Control files to product files * Updated RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 zypper in -t patch SUSE-MultiLinuxManagerTools-Ubuntu-22.04-2026-4576 ## Package List: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 (amd64) * venv-salt-minion-3006.0-220402.3.28.1 * mgrctl-5.2.17-220402.3.21.2 * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 (all) * mgrctl-fish-completion-5.2.17-220402.3.21.2 * mgrctl-zsh-completion-5.2.17-220402.3.21.2 * spacecmd-5.2.10-220402.3.21.2 * scap-security-guide-ubuntu-0.1.80-220402.2.15.2 * mgrctl-bash-completion-5.2.17-220402.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:32:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:32:26 -0000 Subject: SUSE-SU-2026:4575-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179146274628.23937.5643387216377035144@f42c2f07aca2> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4575-1 Release Date: 2026-10-08T08:08:46Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 zypper in -t patch SUSE-MultiLinuxManagerTools-Ubuntu-24.04-2026-4575 ## Package List: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 (amd64) * venv-salt-minion-3006.0-240402.3.28.1 * mgrctl-5.2.17-240402.3.21.2 * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 (all) * spacecmd-5.2.10-240402.3.26.3 * mgrctl-fish-completion-5.2.17-240402.3.21.2 * mgrctl-zsh-completion-5.2.17-240402.3.21.2 * mgrctl-bash-completion-5.2.17-240402.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:32:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:32:37 -0000 Subject: SUSE-RU-2026:4574-1: moderate: Recommended update for salt Message-ID: <179146275735.23937.2386567465500286240@f42c2f07aca2> # Recommended update for salt Announcement ID: SUSE-RU-2026:4574-1 Release Date: 2026-10-08T08:07:44Z Rating: moderate References: * bsc#1252286 * bsc#1255418 * bsc#1257151 * bsc#1263822 * bsc#1268325 * jsc#MSQA-1060 Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Systems Management Module 15-SP7 An update that contains one feature and has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Fix test failures with pytest>=8 * Fix unit tests that fail due to async Tornado usage * Stabilize testsuite tests and fix AllEventsHandler * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Fix the tests failing after switching to non-vendored tornado * Fix the default group in tests for new users in SLE * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Fix file fetching with cp module on non-vendored tornado * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) * Fix ImportError during reentrant SIGTERM shutdown * Fix broken "pkg.info_installed" after migration to salt.utils.timeutil * Fix deprecation warnings when running on Python 3.13 * Calculate UUID grain for Xen PV guests (bsc#1255418) * Add 'show_changes' arg to 'file.append/file.prepend" states ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Systems Management Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Systems-Management-15-SP7-2026-4574 ## Package List: * Systems Management Module 15-SP7 (aarch64 ppc64le s390x x86_64) * salt-api-3006.0-150700.14.28.10 * salt-syndic-3006.0-150700.14.28.10 * salt-proxy-3006.0-150700.14.28.10 * salt-3006.0-150700.14.28.10 * salt-standalone-formulas-configuration-3006.0-150700.14.28.10 * salt-doc-3006.0-150700.14.28.10 * salt-cloud-3006.0-150700.14.28.10 * salt-master-3006.0-150700.14.28.10 * salt-transactional-update-3006.0-150700.14.28.10 * salt-ssh-3006.0-150700.14.28.10 * salt-minion-3006.0-150700.14.28.10 * python311-salt-3006.0-150700.14.28.10 * Systems Management Module 15-SP7 (noarch) * salt-zsh-completion-3006.0-150700.14.28.10 * salt-bash-completion-3006.0-150700.14.28.10 * salt-fish-completion-3006.0-150700.14.28.10 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1255418 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:32:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:32:48 -0000 Subject: SUSE-RU-2026:4573-1: moderate: Recommended update for salt Message-ID: <179146276848.23937.3957649341511986193@f42c2f07aca2> # Recommended update for salt Announcement ID: SUSE-RU-2026:4573-1 Release Date: 2026-10-08T08:07:17Z Rating: moderate References: * bsc#1252286 * bsc#1255418 * bsc#1257151 * bsc#1263822 * bsc#1268325 * jsc#MSQA-1060 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains one feature and has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Fix test failures with pytest>=8 * Fix unit tests that fail due to async Tornado usage * Stabilize testsuite tests and fix AllEventsHandler * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Fix the tests failing after switching to non-vendored tornado * Fix the default group in tests for new users in SLE * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Fix file fetching with cp module on non-vendored tornado * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) * Fix ImportError during reentrant SIGTERM shutdown * Fix broken "pkg.info_installed" after migration to salt.utils.timeutil * Fix deprecation warnings when running on Python 3.13 * Calculate UUID grain for Xen PV guests (bsc#1255418) * Add 'show_changes' arg to 'file.append/file.prepend" states ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4573 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4573 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4573 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4573 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4573 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4573 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4573 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4573 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * python3-salt-testsuite-3006.0-150500.4.78.2 * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-transactional-update-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * python311-salt-testsuite-3006.0-150500.4.78.2 * openSUSE Leap 15.5 (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * salt-minion-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-transactional-update-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * salt-master-3006.0-150500.4.78.8 * salt-cloud-3006.0-150500.4.78.8 * salt-proxy-3006.0-150500.4.78.8 * salt-doc-3006.0-150500.4.78.8 * python3-salt-3006.0-150500.4.78.8 * salt-standalone-formulas-configuration-3006.0-150500.4.78.8 * salt-syndic-3006.0-150500.4.78.8 * salt-api-3006.0-150500.4.78.8 * salt-ssh-3006.0-150500.4.78.8 * salt-3006.0-150500.4.78.8 * salt-minion-3006.0-150500.4.78.8 * python311-salt-3006.0-150500.4.78.8 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * salt-fish-completion-3006.0-150500.4.78.8 * salt-bash-completion-3006.0-150500.4.78.8 * salt-zsh-completion-3006.0-150500.4.78.8 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1255418 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:32:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:32:59 -0000 Subject: SUSE-RU-2026:4572-1: moderate: Recommended update for salt Message-ID: <179146277949.23937.7407549519029737462@f42c2f07aca2> # Recommended update for salt Announcement ID: SUSE-RU-2026:4572-1 Release Date: 2026-10-08T08:06:14Z Rating: moderate References: * bsc#1252286 * bsc#1255418 * bsc#1257151 * bsc#1263822 * bsc#1268325 * jsc#MSQA-1060 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that contains one feature and has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Fix test failures with pytest>=8 * Fix unit tests that fail due to async Tornado usage * Stabilize testsuite tests and fix AllEventsHandler * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Fix the tests failing after switching to non-vendored tornado * Fix the default group in tests for new users in SLE * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Fix file fetching with cp module on non-vendored tornado * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) * Fix ImportError during reentrant SIGTERM shutdown * Fix broken "pkg.info_installed" after migration to salt.utils.timeutil * Fix deprecation warnings when running on Python 3.13 * Calculate UUID grain for Xen PV guests (bsc#1255418) * Add 'show_changes' arg to 'file.append/file.prepend" states ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4572 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4572 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4572 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4572 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4572 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4572 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4572 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4572 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4572 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * salt-minion-3006.0-150400.8.104.7 * salt-standalone-formulas-configuration-3006.0-150400.8.104.7 * salt-cloud-3006.0-150400.8.104.7 * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-master-3006.0-150400.8.104.7 * salt-ssh-3006.0-150400.8.104.7 * salt-doc-3006.0-150400.8.104.7 * salt-proxy-3006.0-150400.8.104.7 * salt-syndic-3006.0-150400.8.104.7 * python311-salt-3006.0-150400.8.104.7 * salt-api-3006.0-150400.8.104.7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.104.7 * salt-fish-completion-3006.0-150400.8.104.7 * salt-zsh-completion-3006.0-150400.8.104.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * salt-minion-3006.0-150400.8.104.7 * salt-standalone-formulas-configuration-3006.0-150400.8.104.7 * salt-cloud-3006.0-150400.8.104.7 * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-master-3006.0-150400.8.104.7 * salt-ssh-3006.0-150400.8.104.7 * salt-doc-3006.0-150400.8.104.7 * salt-proxy-3006.0-150400.8.104.7 * salt-syndic-3006.0-150400.8.104.7 * python311-salt-3006.0-150400.8.104.7 * salt-api-3006.0-150400.8.104.7 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.104.7 * salt-fish-completion-3006.0-150400.8.104.7 * salt-zsh-completion-3006.0-150400.8.104.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * salt-minion-3006.0-150400.8.104.7 * salt-standalone-formulas-configuration-3006.0-150400.8.104.7 * salt-cloud-3006.0-150400.8.104.7 * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-master-3006.0-150400.8.104.7 * salt-ssh-3006.0-150400.8.104.7 * salt-doc-3006.0-150400.8.104.7 * salt-proxy-3006.0-150400.8.104.7 * salt-syndic-3006.0-150400.8.104.7 * python311-salt-3006.0-150400.8.104.7 * salt-api-3006.0-150400.8.104.7 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * salt-bash-completion-3006.0-150400.8.104.7 * salt-fish-completion-3006.0-150400.8.104.7 * salt-zsh-completion-3006.0-150400.8.104.7 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * salt-minion-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-standalone-formulas-configuration-3006.0-150400.8.104.7 * python311-salt-testsuite-3006.0-150400.8.104.3 * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-cloud-3006.0-150400.8.104.7 * salt-master-3006.0-150400.8.104.7 * salt-doc-3006.0-150400.8.104.7 * salt-proxy-3006.0-150400.8.104.7 * salt-ssh-3006.0-150400.8.104.7 * python3-salt-testsuite-3006.0-150400.8.104.3 * salt-syndic-3006.0-150400.8.104.7 * python311-salt-3006.0-150400.8.104.7 * salt-api-3006.0-150400.8.104.7 * openSUSE Leap 15.4 (noarch) * salt-bash-completion-3006.0-150400.8.104.7 * salt-fish-completion-3006.0-150400.8.104.7 * salt-zsh-completion-3006.0-150400.8.104.7 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-minion-3006.0-150400.8.104.7 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-minion-3006.0-150400.8.104.7 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-minion-3006.0-150400.8.104.7 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-minion-3006.0-150400.8.104.7 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * salt-minion-3006.0-150400.8.104.7 * salt-transactional-update-3006.0-150400.8.104.7 * salt-standalone-formulas-configuration-3006.0-150400.8.104.7 * salt-cloud-3006.0-150400.8.104.7 * python3-salt-3006.0-150400.8.104.7 * salt-3006.0-150400.8.104.7 * salt-master-3006.0-150400.8.104.7 * salt-ssh-3006.0-150400.8.104.7 * salt-doc-3006.0-150400.8.104.7 * salt-proxy-3006.0-150400.8.104.7 * salt-syndic-3006.0-150400.8.104.7 * python311-salt-3006.0-150400.8.104.7 * salt-api-3006.0-150400.8.104.7 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * salt-bash-completion-3006.0-150400.8.104.7 * salt-fish-completion-3006.0-150400.8.104.7 * salt-zsh-completion-3006.0-150400.8.104.7 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1255418 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:34:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 12:34:29 -0000 Subject: SUSE-SU-2026:4571-1: important: Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server Message-ID: <179146286953.23937.17236103969466934989@f42c2f07aca2> # Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:4571-1 Release Date: 2026-10-08T08:02:36Z Rating: important References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE * SUSE Multi-Linux Manager Server 5.2 Extension for SLE An update that solves four vulnerabilities, contains one feature and has 60 security fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Proxy ### Description: This update fixes the following issues: Release notese highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security issues Fixed: CVE-2026-39821 * Bugs mentioned bsc#1208800, bsc#1230568, bsc#1230949, bsc#1258382, bsc#1266481 bsc#1268755, bsc#1270033, bsc#1273131, bsc#1273144, bsc#1273846 bsc#1274613, bsc#1274775 Container images and uyuni-tools changes: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgrpxy upgrade podman` which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Retail Branch Server ### Description: This update fixes the following issues: Release notese highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security issues Fixed: CVE-2026-39821 * Bugs mentioned bsc#1208800, bsc#1230568, bsc#1230949, bsc#1258382, bsc#1266481 bsc#1268755, bsc#1270033, bsc#1273131, bsc#1273144, bsc#1273846 bsc#1274613, bsc#1274775 Container images and uyuni-tools changes: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgrpxy upgrade podman` which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server ### Description: This update fixes the following issues: Release Notes Highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security fixes * Ubuntu 26.04 LTS Support * Confidential Computing Attestation for IBM Z Series * New uyuni-tftpd Container * Monitoring: Prometheus upgraded to 3.13.2 * Monitoring: Grafana upgraded to 12.4.10 * CVEs Fixed: CVE-2023-45289, CVE-2024-22195, CVE-2025-12141, CVE-2025-13836 CVE-2025-61686, CVE-2026-15308, CVE-2026-21723, CVE-2026-40181 CVE-2026-11940, CVE-2026-11972, CVE-2026-13346, CVE-2026-14199 CVE-2026-17033, CVE-2026-17183, CVE-2026-19197, CVE-2026-19475 CVE-2026-27459, CVE-2026-33814, CVE-2026-39821, CVE-2026-39882 CVE-2026-40475, CVE-2026-41066, CVE-2026-41178, CVE-2026-41606 CVE-2026-42211, CVE-2026-42342, CVE-2026-44431, CVE-2026-44990 CVE-2026-49825, CVE-2026-49853, CVE-2026-49854, CVE-2026-49855 CVE-2026-56852, CVE-2026-63007, CVE-2026-63009, CVE-2026-71400 CVE-2026-42127, CVE-2026-45409, CVE-2026-53606, CVE-2026-73501 CVE-2025-4673, CVE-2026-0864, CVE-2026-1229, CVE-2026-1502 CVE-2026-1703, CVE-2026-2303, CVE-2026-3219, CVE-2026-3276 Container images and uyuni-tools changes: proxy-tftpd-image: * Updated to version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgradm upgrade podman` which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.2-2026-4571 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server- SLE-5.2-2026-4571 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.2-2026-4571 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-150750.3.3.8 * mgrpxy-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (noarch) * mgrpxy-zsh-completion-5.2.17-150750.3.3.8 * mgrpxy-bash-completion-5.2.17-150750.3.3.8 * mgrpxy-lang-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-150750.3.3.8 * mgrpxy-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (noarch) * mgrpxy-zsh-completion-5.2.17-150750.3.3.8 * mgrpxy-bash-completion-5.2.17-150750.3.3.8 * mgrpxy-lang-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgradm-5.2.17-150750.3.3.8 * mgrctl-5.2.17-150750.3.3.8 * mgrctl-debuginfo-5.2.17-150750.3.3.8 * mgradm-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (noarch) * mgrctl-zsh-completion-5.2.17-150750.3.3.8 * mgrctl-lang-5.2.17-150750.3.3.8 * mgrctl-bash-completion-5.2.17-150750.3.3.8 * mgradm-zsh-completion-5.2.17-150750.3.3.8 * mgradm-lang-5.2.17-150750.3.3.8 * mgradm-bash-completion-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:30:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:30:37 -0000 Subject: SUSE-SU-2026:24054-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147703793.421.18128721121284511492@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24054-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-665 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-36-rt-17-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:31:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:31:07 -0000 Subject: SUSE-SU-2026:24053-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147706759.421.11064054799861777631@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24053-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-664 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-37-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-13-1.1 * kernel-livepatch-6_4_0-37-rt-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:31:36 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:31:36 -0000 Subject: SUSE-SU-2026:24052-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147709601.421.15790429893500378046@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24052-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-663 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-13-1.1 * kernel-livepatch-6_4_0-38-rt-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:32:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:32:04 -0000 Subject: SUSE-SU-2026:24051-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147712468.421.7828863569210824156@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24051-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-662 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-39-rt-12-1.1 * kernel-livepatch-6_4_0-39-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:32:34 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:32:34 -0000 Subject: SUSE-SU-2026:24050-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147715417.421.17760091924028281172@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24050-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-661 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-40-rt-11-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:33:03 -0000 Subject: SUSE-SU-2026:24049-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147718369.421.8236572963971759712@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24049-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-660 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-rt-10-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:33:30 -0000 Subject: SUSE-SU-2026:24048-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147721093.421.11428121906921138714@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24048-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-659 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-42-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:33:58 -0000 Subject: SUSE-SU-2026:24047-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147723877.421.2085281188103535043@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24047-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-658 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-rt-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:34:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:34:27 -0000 Subject: SUSE-SU-2026:24046-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147726777.421.554174212777103719@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24046-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-657 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-7-1.2 * kernel-livepatch-6_4_0-45-rt-7-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-7-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:34:56 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:34:56 -0000 Subject: SUSE-SU-2026:24045-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147729626.421.13384311566469170052@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24045-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-656 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-46-rt-7-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:35:23 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:35:23 -0000 Subject: SUSE-SU-2026:24044-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147732399.421.394413452265683077@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24044-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-655 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-47-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:35:52 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:35:52 -0000 Subject: SUSE-SU-2026:24043-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147735258.421.2230317695930338246@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24043-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-654 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-48-rt-5-1.1 * kernel-livepatch-6_4_0-48-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:36:17 -0000 Subject: SUSE-SU-2026:24042-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147737759.421.9573099141210243699@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24042-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-653 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-49-rt-4-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:42 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:36:42 -0000 Subject: SUSE-SU-2026:24041-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147740233.421.2904495761175171600@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24041-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-652 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:36:57 -0000 Subject: SUSE-SU-2026:24040-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147741752.421.12310437657217621731@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24040-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-651 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-3-1.1 * kernel-livepatch-6_4_0-51-rt-3-1.1 * kernel-livepatch-6_4_0-51-rt-debuginfo-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:37:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:37:03 -0000 Subject: SUSE-SU-2026:24039-1: important: Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147742315.421.10190890145872850661@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24039-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-650 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-52-rt-debuginfo-2-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-rt-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:37:33 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:37:33 -0000 Subject: SUSE-SU-2026:24038-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147745308.421.15327035633138288073@d580628b9e86> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24038-1 Release Date: 2026-10-06T08:22:10Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-678 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-40-default-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0_Update_17-debugsource-11-1.1 * kernel-livepatch-6_4_0-40-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:38:02 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:38:02 -0000 Subject: SUSE-SU-2026:24037-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147748270.421.10840698295886799394@d580628b9e86> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24037-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-683 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_11-debugsource-17-1.1 * kernel-livepatch-6_4_0-34-default-debuginfo-17-1.1 * kernel-livepatch-6_4_0-34-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:38:32 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:38:32 -0000 Subject: SUSE-SU-2026:24036-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147751262.421.3359130479778509492@d580628b9e86> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24036-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-682 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-17-1.1 * kernel-livepatch-6_4_0-35-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:39:02 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:39:02 -0000 Subject: SUSE-SU-2026:24035-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147754291.421.15239149485004413025@d580628b9e86> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24035-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-681 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-15-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-15-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-15-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:39:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:39:30 -0000 Subject: SUSE-SU-2026:24034-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147757098.421.18403246259254382300@d580628b9e86> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24034-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-680 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-13-1.2 * kernel-livepatch-6_4_0-38-default-13-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-13-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:00 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:40:00 -0000 Subject: SUSE-SU-2026:24033-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147760006.421.6415280666944674428@d580628b9e86> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24033-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-679 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_16-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-12-1.1 * kernel-livepatch-6_4_0-39-default-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:40:29 -0000 Subject: SUSE-SU-2026:24032-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147762942.421.1447942060904700048@d580628b9e86> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24032-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-677 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-41-default-10-1.1 * kernel-livepatch-MICRO-6-0_Update_18-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:58 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:40:58 -0000 Subject: SUSE-SU-2026:24031-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147765809.421.14425774245867587670@d580628b9e86> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24031-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-676 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-42-default-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0_Update_19-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-default-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:41:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:41:26 -0000 Subject: SUSE-SU-2026:24030-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147768691.421.2527202393202583428@d580628b9e86> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24030-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-675 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_20-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-default-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:41:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:41:55 -0000 Subject: SUSE-SU-2026:24029-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147771598.421.9726302759591085582@d580628b9e86> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24029-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-674 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-7-1.1 * kernel-livepatch-6_4_0-44-default-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:42:24 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:42:24 -0000 Subject: SUSE-SU-2026:24028-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147774408.421.16364328058952892149@d580628b9e86> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24028-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-673 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-7-1.1 * kernel-livepatch-6_4_0-45-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:42:52 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:42:52 -0000 Subject: SUSE-SU-2026:24027-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147777297.421.15940686713329786574@d580628b9e86> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24027-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-672 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_23-debugsource-7-1.1 * kernel-livepatch-6_4_0-46-default-7-1.1 * kernel-livepatch-6_4_0-46-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:43:20 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:43:20 -0000 Subject: SUSE-SU-2026:24026-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147780062.421.16999108403490023261@d580628b9e86> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24026-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-671 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-debuginfo-6-1.1 * kernel-livepatch-6_4_0-47-default-6-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:43:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:43:48 -0000 Subject: SUSE-SU-2026:24025-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147782847.421.8949529934176331507@d580628b9e86> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24025-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-670 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-48-default-5-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:14 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:44:14 -0000 Subject: SUSE-SU-2026:24024-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147785404.421.17528012150782052015@d580628b9e86> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24024-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-669 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-4-1.1 * kernel-livepatch-6_4_0-49-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:44:41 -0000 Subject: SUSE-SU-2026:24023-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147788152.421.683811169674306728@d580628b9e86> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24023-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-668 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-4-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-4-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:44:57 -0000 Subject: SUSE-SU-2026:24022-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147789716.421.3045724647004524006@d580628b9e86> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24022-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-667 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-3-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-3-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:45:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:45:07 -0000 Subject: SUSE-SU-2026:24021-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147790795.421.11449236292669075448@d580628b9e86> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24021-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-666 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-default-debuginfo-2-1.1 * kernel-livepatch-6_4_0-52-default-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:45:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:45:19 -0000 Subject: SUSE-RU-2026:24020-1: moderate: Recommended update for salt Message-ID: <179147791935.421.11400770954790283896@d580628b9e86> # Recommended update for salt Announcement ID: SUSE-RU-2026:24020-1 Release Date: 2026-10-06T08:48:12Z Rating: moderate References: * bsc#1252286 * bsc#1255418 * bsc#1257151 * bsc#1263822 * bsc#1268325 Affected Products: * SUSE Linux Micro 6.1 An update that has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Improved compatibility for managing Apache on SUSE operating systems (bsc#1252286) * apache2ctl switched to apachectl * Enhanced support for attribute lists when managing LDAP configurations (bsc#1257151) * Resolved an issue that prevented files from being fetched correctly using the cp module * Fixed a problem where binary pillar data caused errors when using salt-ssh (bsc#1263822) * Corrected a function that provides information about installed packages (pkg.info_installed) which was not working as expected. * Added the ability to determine the unique identifier (UUID) for Xen PV virtual machines (bsc#1255418) * Introduced a new option (show_changes) to display what modifications were made when using file.append or file.prepend states. ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-744 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * python311-salt-3006.0-slfo.1.1_8.1 * salt-transactional-update-3006.0-slfo.1.1_8.1 * salt-3006.0-slfo.1.1_8.1 * salt-minion-3006.0-slfo.1.1_8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1255418 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:45:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:45:29 -0000 Subject: SUSE-SU-2026:24019-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179147792944.421.10967907890444867212@d580628b9e86> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24019-1 Release Date: 2026-10-05T12:52:47Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-649 ## Package List: * SUSE Linux Micro 6.1 (aarch64 x86_64) * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:46:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:46:57 -0000 Subject: SUSE-SU-2026:24018-1: moderate: Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Message-ID: <179147801776.421.12888567484635555395@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:24018-1 Release Date: 2026-10-08T07:45:40Z Rating: moderate References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Proxy 5.2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 * SUSE Multi-Linux Manager Server 5.2 An update that solves four vulnerabilities, contains one feature and has 60 fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 SUSE-Multi- Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 * SUSE Multi-Linux Manager Retail Branch Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 * SUSE Multi-Linux Manager Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 SUSE-Multi- Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrctl-debuginfo-5.2.17-160000.1.1 * mgradm-5.2.17-160000.1.1 * mgradm-debuginfo-5.2.17-160000.1.1 * mgrctl-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (noarch) * mgrctl-zsh-completion-5.2.17-160000.1.1 * mgrctl-bash-completion-5.2.17-160000.1.1 * mgradm-bash-completion-5.2.17-160000.1.1 * mgradm-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 * SUSE Multi-Linux Manager Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:47:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:47:11 -0000 Subject: SUSE-SU-2026:4586-1: important: Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) Message-ID: <179147803176.421.10464478261849247262@d580628b9e86> # Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4586-1 Release Date: 2026-10-08T11:04:54Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4586 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_320-default-4-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:47:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:47:17 -0000 Subject: SUSE-SU-2026:4587-1: important: Security update for wpa_supplicant Message-ID: <179147803750.421.3018396846800379111@d580628b9e86> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4587-1 Release Date: 2026-10-08T12:13:03Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). * Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4587 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4587 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4587 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4587 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4587 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4587 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4587 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4587 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:48:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:48:59 -0000 Subject: SUSE-SU-2026:4585-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147813967.421.15934765232505306832@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4585-1 Release Date: 2026-10-08T08:24:35Z Rating: important References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262187 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263330 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1265525 * bsc#1265763 * bsc#1266481 * bsc#1266608 * bsc#1266669 * bsc#1267261 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268868 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269841 * bsc#1269856 * bsc#1269959 * bsc#1269966 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1270711 * bsc#1271192 * bsc#1271330 * bsc#1271428 * bsc#1271557 * bsc#1271613 * bsc#1272008 * bsc#1272102 * bsc#1272328 * bsc#1272427 * bsc#1273094 * bsc#1273144 * bsc#1274217 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2024-22195 * CVE-2025-13836 * CVE-2025-4673 * CVE-2025-61686 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1229 * CVE-2026-13346 * CVE-2026-14199 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-33814 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-39882 * CVE-2026-40181 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42127 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-44990 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-53606 * CVE-2026-56852 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-73501 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8595 * CVE-2026-8609 * CVE-2026-8643 * CVE-2026-9029 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-61686 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8595 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9029 ( SUSE ): 4.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-9029 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-9029 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-9029 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Multi-Linux Manager Client Tools for SLE 15 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 An update that solves 58 vulnerabilities, contains two features and has 21 security fixes can now be installed. ## Description: This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react- router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 grafana was updated to version 12.4.10: * Security issues: * CVE-2026-17183: Fixed exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269841) * CVE-2026-17033: Fixed stored cross-site scripting risks via malicious Alertmanager generator URLs (bsc#1276426) * CVE-2026-73501: Fixed fail-open authentication bypass in kin-openapi default handlers (bsc#1276973) * CVE-2026-19475: Fixed DoS risks in PostgreSQL Datasource by checking timeGroup macros (bsc#1278307) * CVE-2026-14199: Fixed auth bypass or session takeover via Auth Proxy cache key collision (bsc#1278322) * CVE-2026-19197: Fixed access control and authorization checks in dashboard snapshots (bsc#1277025) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm (bsc#1272008) * CVE-2026-41178: Fixed denial-of-service risks in OpenTelemetry baggage parsing (bsc#1276658) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274217) * CVE-2026-8595: Fixed stored XSS via malicious dashboard field names in table panels (bsc#1271557) * CVE-2026-42127: Fixed DoS risks in the public dashboard query endpoint (bsc#1268868) * CVE-2026-9029: Fixed arbitrary code execution and script injection in the geomap panel (bsc#1272328) * CVE-2026-33814: Fixed infinite loop in HTTP/2 transport during framesize check (bsc#1265763) * CVE-2026-8609: Fixed pre-authentication denial-of-service risks in OAuth login routes (bsc#1271330) * CVE-2026-1229: Fixed incorrect value calculation in ecc/p384 Package (bsc#1265525, bsc#1262187) * CVE-2025-12141: Fixed information disclosure of secure settings via contact point modification (bsc#1262187) * CVE-2026-21723: Fixed out-of-memory and denial-of-service risks in templates test endpoint (bsc#1272427) * CVE-2026-41606: Fixed denial-of-service risks from nested messages in Apache Thrift parser (bsc#1263330) * Bug fixes and changes: * Dashboards: Fix adhoc and groupby variable datasource on UI import * Dashboards: Fix version dates and user display names in the legacy version history page * Dashboard Import: Labels in v2 schema * Azure Monitor: fix migration for dimension filters * Dashboards: Get annotations and dashboard endpoint performance improvements * DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Alerting: Add protected fields authorization check to provisioning API * Alerting: Return 403 instead of 500 on contact point provenance mismatch * Jaeger: Handle gzip, deflate, and brotli compressed API responses * Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL mgr-push was updated to version 5.2.5: * Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings spacewalk-client-tools was updated to version 5.2.7: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 15 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-15-2026-4585 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-4585 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 15 (aarch64 ppc64le s390x x86_64) * grafana-12.4.10-150002.4.27.1 * venv-salt-minion-3006.0-150002.5.22.1 * golang-github-prometheus-prometheus-3.13.2-150002.3.19.1 * mgrctl-5.2.17-150002.3.20.1 * grafana-debuginfo-12.4.10-150002.4.27.1 * mgrctl-debuginfo-5.2.17-150002.3.20.1 * firewalld-prometheus-config-0.2-150002.3.19.1 * golang-github-prometheus-prometheus-debuginfo-3.13.2-150002.3.19.1 * SUSE Multi-Linux Manager Client Tools for SLE 15 (noarch) * mgrctl-lang-5.2.17-150002.3.20.1 * mgr-push-5.2.5-150002.3.12.1 * python3-spacewalk-client-tools-5.2.7-150002.3.12.1 * spacecmd-5.2.10-150002.3.15.1 * mgrctl-zsh-completion-5.2.17-150002.3.20.1 * spacewalk-client-tools-5.2.7-150002.3.12.1 * python3-mgr-push-5.2.5-150002.3.12.1 * mgrctl-bash-completion-5.2.17-150002.3.20.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (aarch64 ppc64le s390x x86_64) * venv-salt-minion-3006.0-150002.5.22.1 * mgrctl-5.2.17-150002.3.20.1 * mgrctl-debuginfo-5.2.17-150002.3.20.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (noarch) * mgrctl-bash-completion-5.2.17-150002.3.20.1 * mgrctl-zsh-completion-5.2.17-150002.3.20.1 * mgrctl-lang-5.2.17-150002.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2025-61686.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42127.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8595.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://www.suse.com/security/cve/CVE-2026-9029.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268868 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1270711 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271557 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1272328 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:50:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:50:04 -0000 Subject: SUSE-SU-2026:4584-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147820425.421.10282534081413640328@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4584-1 Release Date: 2026-10-08T08:23:06Z Rating: important References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Desktop 12 * SUSE Linux Enterprise Desktop 12 SP1 * SUSE Linux Enterprise Desktop 12 SP2 * SUSE Linux Enterprise Desktop 12 SP3 * SUSE Linux Enterprise Desktop 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Multi-Linux Manager Client Tools for SLE 12 An update that solves 32 vulnerabilities, contains one feature and has 16 security fixes can now be installed. ## Description: This update fixes the following issues: mgr-push was updated to version 5.2.5: * Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings spacewalk-client-tools was updated to version 5.2.7:: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 12 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-12-2026-4584 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 12 (aarch64 ppc64le s390x x86_64) * venv-salt-minion-3006.0-120002.5.22.2 * mgrctl-5.2.17-120002.3.18.1 * mgrctl-debuginfo-5.2.17-120002.3.18.1 * SUSE Multi-Linux Manager Client Tools for SLE 12 (noarch) * mgr-push-5.2.5-120002.3.12.1 * python2-mgr-push-5.2.5-120002.3.12.1 * python2-spacewalk-client-tools-5.2.7-120002.3.12.1 * mgrctl-zsh-completion-5.2.17-120002.3.18.1 * spacecmd-5.2.10-120002.3.15.1 * mgrctl-lang-5.2.17-120002.3.18.1 * mgrctl-bash-completion-5.2.17-120002.3.18.1 * spacewalk-client-tools-5.2.7-120002.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:50:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:50:57 -0000 Subject: SUSE-SU-2026:4583-1: moderate: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147825799.421.11881166462080572114@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4583-1 Release Date: 2026-10-08T08:21:48Z Rating: moderate References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270285 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Liberty Linux 7 * SUSE Liberty Linux 7 LTSS * SUSE Liberty Linux LTSS 7 for Oracle Linux * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones An update that solves 31 vulnerabilities, contains one feature and has seven security fixes can now be installed. ## Description: This update fixes the following issues: mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9-0 * Update translation strings spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings venv-salt-minion: * CVE-2026-13346: Arbitrary file installation via malicious package indexes. Remove ensurepip with bundled .whl files. (bsc#1273094) * CVE-2026-0864: Normalize all line endings (CR, CRLF, and LF) in configparser (bsc#1269066, gh#python/cpython#143927) * CVE-2026-1502: reject CR/LF in HTTP tunnel request headers (bsc#1261969, gh#python/cpython#146211) * CVE-2026-3276: Fix O(n^2) canonical ordering in unicodedata.normalize() (bsc#1267581, gh#python/cpython#149079) * CVE-2026-4360: Pass filter_function to TarFile._extract_one() during .extract() (bsc#1269959, gh#python/cpython#151987) * CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check (bsc#1262319, gh#python/cpython#148169) * CVE-2026-6019: protect against HTML injection by Base64-encoding cookie values embedded in JS (bsc#1262654, gh#python/cpython#90309) * CVE-2026-6100: prevent dangling pointer, which can end in the use-after-free error (bsc#1262098, gh#python/cpython#148395) * CVE-2026-7210: Use XML_SetHashSalt16Bytes in pyexpat/_elementtree when possible (bsc#1264962, gh#python/cpython#149018) * CVE-2026-7774: tarfile.data_filter: validate written link target (bsc#1267821, gh#149486) * CVE-2026-8328: Make ftplib not trust the PASV response (bsc#1265268) * CVE-2026-11940: fix the symlink escape via tarfile hardlink-extraction fallback (bsc#1268977) * CVE-2026-11972: Make tarfile._Stream.seek break at EOF (bsc#1269788, gh#python/cpython#151981) * CVE-2026-15308: Fix quadratic complexity in incremental parsing in HTMLParser (bsc#1271192, gh#python/cpython#153030) * CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669) * CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442) * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429) * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599, gh#pypa/pip#13777) * CVE-2024-22195: Fix compiler error when checking if required blocks in parent templates are xmlattr filter does not allow keys with spaces. (bsc#1218722) * CVE-2026-45409: Specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413) * CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267) * CVE-2026-49825: The known link attributes in `lxml.html.defs.link_attrs` were missing `xlink:href`, which can be used for URL bypass attributes in embedded SVG/MathML/etc. content. (bsc#1270285) https://github.com/fedora- python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f * CVE-2026-41066: This release fixes a possible external entity injection (XXE) vulnerability in `iterparse()` and the `ETCompatXMLParser`. (bsc#1263254) * CVE-2026-3446: Preventing ignoring excess Base64 data after the first padded quad in non-strict (default) mode. (bsc#1261970, gh#python/cpython#145264) * CVE-2026-3479: pkgutil.get_data() has the same security model as open(). The documented limitations ensure compatibility with non-filesystem loaders; Python doesn't check that. (bsc#1259989, gh#python/cpython#146121) * CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1271428) * CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395) * CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396) * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) (bsc#1268397) * CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency (bsc#1262803) * CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400) * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-RES-7-2026-4583 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones (noarch) * spacecmd-5.2.10-70002.3.15.1 * python2-mgr-push-5.2.5-70002.3.12.2 * python2-spacewalk-client-tools-5.2.7-70002.3.12.1 * spacewalk-client-tools-5.2.7-70002.3.12.1 * mgr-push-5.2.5-70002.3.12.2 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones (aarch64 ppc64le x86_64) * venv-salt-minion-3006.0-70002.5.22.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:52:02 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:52:02 -0000 Subject: SUSE-SU-2026:4582-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147832288.421.10469233860565128835@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4582-1 Release Date: 2026-10-08T08:20:36Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-9-2026-4582 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-90002.3.15.1 * venv-salt-minion-3006.0-90002.5.22.1 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones (noarch) * spacecmd-5.2.10-90002.3.15.1 * mgrctl-bash-completion-5.2.17-90002.3.15.1 * scap-security-guide-redhat-0.1.80-90002.3.12.1 * mgrctl-zsh-completion-5.2.17-90002.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:53:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:53:07 -0000 Subject: SUSE-SU-2026:4581-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147838799.421.11092244114558136119@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4581-1 Release Date: 2026-10-08T08:18:32Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-8-2026-4581 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones (aarch64 ppc64le x86_64) * mgrctl-5.2.17-80002.3.15.3 * venv-salt-minion-3006.0-80002.5.22.3 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones (noarch) * scap-security-guide-redhat-0.1.80-80002.3.12.4 * spacecmd-5.2.10-80002.3.15.3 * mgrctl-zsh-completion-5.2.17-80002.3.15.3 * mgrctl-bash-completion-5.2.17-80002.3.15.3 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:54:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:54:13 -0000 Subject: SUSE-SU-2026:4580-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147845382.421.2029024074261937488@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4580-1 Release Date: 2026-10-08T08:17:25Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-10-2026-4580 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-100002.1.9.1 * venv-salt-minion-3006.0-100002.1.13.1 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones (noarch) * mgrctl-bash-completion-5.2.17-100002.1.9.1 * scap-security-guide-redhat-0.1.80-100002.1.6.1 * spacecmd-5.2.10-100002.1.9.1 * mgrctl-zsh-completion-5.2.17-100002.1.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:55:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:55:19 -0000 Subject: SUSE-SU-2026:4579-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147851978.421.8350450344050558011@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4579-1 Release Date: 2026-10-08T08:16:09Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Debian 13 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Debian 13 zypper in -t patch SUSE-MultiLinuxManagerTools-Debian-13-2026-4579 ## Package List: * SUSE Multi-Linux Manager Client Tools for Debian 13 (amd64 arm64) * mgrctl-5.2.17-130002.2.9.1 * venv-salt-minion-3006.0-130002.2.13.1 * SUSE Multi-Linux Manager Client Tools for Debian 13 (all) * mgrctl-bash-completion-5.2.17-130002.2.9.1 * mgrctl-fish-completion-5.2.17-130002.2.9.1 * mgrctl-zsh-completion-5.2.17-130002.2.9.1 * spacecmd-5.2.10-130002.2.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:56:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:56:27 -0000 Subject: SUSE-SU-2026:4578-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147858794.421.13209628245593761336@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4578-1 Release Date: 2026-10-08T08:15:01Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Debian 12 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues fixed: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Debian 12 zypper in -t patch SUSE-MultiLinuxManagerTools-Debian-12-2026-4578 ## Package List: * SUSE Multi-Linux Manager Client Tools for Debian 12 (amd64 arm64) * venv-salt-minion-3006.0-120002.3.30.1 * mgrctl-5.2.17-120002.3.23.1 * SUSE Multi-Linux Manager Client Tools for Debian 12 (all) * mgrctl-bash-completion-5.2.17-120002.3.23.1 * spacecmd-5.2.10-120002.3.23.1 * mgrctl-fish-completion-5.2.17-120002.3.23.1 * mgrctl-zsh-completion-5.2.17-120002.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:57:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 16:57:01 -0000 Subject: SUSE-RU-2026:4577-1: important: Recommended update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147862172.421.14243548639759765410@d580628b9e86> # Recommended update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-RU-2026:4577-1 Release Date: 2026-10-08T08:13:49Z Rating: important References: * bsc#1257599 * bsc#1261969 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262654 * bsc#1263442 * bsc#1264962 * bsc#1265268 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1271192 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-39821 * CVE-2026-4360 * CVE-2026-4786 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Ubuntu 26.04 2604 An update that solves 19 vulnerabilities, contains one feature and has four fixes can now be installed. ## Description: This update fixes the following issues: spacecmd: * Initial package release uyuni-tools: * Initial package release venv-salt-minion: * Initial package release ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Ubuntu 26.04 2604 zypper in -t patch SUSE-MultiLinuxManagerTools-Ubuntu-26.04-2026-4577 ## Package List: * SUSE Multi-Linux Manager Client Tools for Ubuntu 26.04 2604 (amd64) * mgrctl-5.2.17-240402.2.3.4 * venv-salt-minion-3006.0-240402.2.3.1 * SUSE Multi-Linux Manager Client Tools for Ubuntu 26.04 2604 (all) * mgrctl-fish-completion-5.2.17-240402.2.3.4 * mgrctl-zsh-completion-5.2.17-240402.2.3.4 * mgrctl-bash-completion-5.2.17-240402.2.3.4 * spacecmd-5.2.10-240402.2.3.4 ## References: * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:30:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:30:17 -0000 Subject: SUSE-RU-2026:24091-1: moderate: Recommended update for salt Message-ID: <179149141770.3924.650614448461850299@35d72aa18c5b> # Recommended update for salt Announcement ID: SUSE-RU-2026:24091-1 Release Date: 2026-10-06T08:53:40Z Rating: moderate References: * bsc#1252286 * bsc#1255418 * bsc#1257151 * bsc#1263822 * bsc#1268325 Affected Products: * SUSE Linux Micro 6.0 An update that has five fixes can now be installed. ## Description: This update for salt fixes the following issues: * Improved compatibility for managing Apache on SUSE operating systems (bsc#1252286) * apache2ctl switched to apachectl * Enhanced support for attribute lists when managing LDAP configurations (bsc#1257151) * Resolved an issue that prevented files from being fetched correctly using the cp module * Fixed a problem where binary pillar data caused errors when using salt-ssh (bsc#1263822) * Corrected a function that provides information about installed packages (pkg.info_installed) which was not working as expected. * Added the ability to determine the unique identifier (UUID) for Xen PV virtual machines (bsc#1255418) * Introduced a new option (show_changes) to display what modifications were made when using file.append or file.prepend states. ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-914 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * salt-3006.0-17.1 * salt-master-3006.0-17.1 * salt-transactional-update-3006.0-17.1 * salt-minion-3006.0-17.1 * python311-salt-3006.0-17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1255418 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:30:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:30:46 -0000 Subject: SUSE-SU-2026:24090-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149144693.3924.4227784419843398428@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24090-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-683 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_11-debugsource-17-1.1 * kernel-livepatch-6_4_0-34-default-debuginfo-17-1.1 * kernel-livepatch-6_4_0-34-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:31:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:31:17 -0000 Subject: SUSE-SU-2026:24089-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149147768.3924.750722072903938068@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24089-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-682 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-17-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-17-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:31:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:31:46 -0000 Subject: SUSE-SU-2026:24088-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149150665.3924.2152485030285824072@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24088-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-681 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-debuginfo-15-1.1 * kernel-livepatch-6_4_0-36-default-15-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-15-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:32:14 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:32:14 -0000 Subject: SUSE-SU-2026:24087-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149153459.3924.12522208166226192805@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24087-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-680 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-38-default-13-1.2 * kernel-livepatch-MICRO-6-0_Update_14-debugsource-13-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-13-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:32:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:32:41 -0000 Subject: SUSE-SU-2026:24086-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149156125.3924.9692251843596729314@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24086-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-679 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_16-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-default-12-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:33:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:33:12 -0000 Subject: SUSE-SU-2026:24085-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149159294.3924.4285811796988437195@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24085-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-678 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-40-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-40-default-11-1.1 * kernel-livepatch-MICRO-6-0_Update_17-debugsource-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:33:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:33:41 -0000 Subject: SUSE-SU-2026:24084-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149162135.3924.14606972864327489621@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24084-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-677 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-10-1.1 * kernel-livepatch-6_4_0-41-default-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:34:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:34:09 -0000 Subject: SUSE-SU-2026:24083-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149164966.3924.7096975375165865790@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24083-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-676 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-42-default-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0_Update_19-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-default-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:34:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:34:37 -0000 Subject: SUSE-SU-2026:24082-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149167739.3924.1330746109880704226@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24082-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-675 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:35:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:35:04 -0000 Subject: SUSE-SU-2026:24081-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149170462.3924.6591159028128746132@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24081-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-674 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-44-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:35:33 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:35:33 -0000 Subject: SUSE-SU-2026:24080-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149173317.3924.12471985364214243493@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24080-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-673 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-7-1.1 * kernel-livepatch-6_4_0-45-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:36:01 -0000 Subject: SUSE-SU-2026:24079-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149176118.3924.2595213871854579652@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24079-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-672 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-7-1.1 * kernel-livepatch-6_4_0-46-default-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:36:30 -0000 Subject: SUSE-SU-2026:24078-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149179047.3924.3574162501688141069@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24078-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-671 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-6-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:36:59 -0000 Subject: SUSE-SU-2026:24077-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149181945.3924.8614048782493855612@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24077-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-670 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-5-1.1 * kernel-livepatch-6_4_0-48-default-5-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:37:23 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:37:23 -0000 Subject: SUSE-SU-2026:24076-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149184396.3924.16993823512295232775@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24076-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-669 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_26-debugsource-4-1.1 * kernel-livepatch-6_4_0-49-default-debuginfo-4-1.1 * kernel-livepatch-6_4_0-49-default-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:37:49 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:37:49 -0000 Subject: SUSE-SU-2026:24075-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149186941.3924.5378213141820400410@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24075-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-668 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_27-debugsource-4-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-default-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:05 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:38:05 -0000 Subject: SUSE-SU-2026:24074-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149188501.3924.7134024065520293306@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24074-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-667 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-debuginfo-3-1.1 * kernel-livepatch-6_4_0-51-default-3-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:38:11 -0000 Subject: SUSE-SU-2026:24073-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149189112.3924.12101048776260565793@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24073-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-666 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-default-2-1.1 * kernel-livepatch-6_4_0-52-default-debuginfo-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:38 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:38:38 -0000 Subject: SUSE-SU-2026:24072-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149191854.3924.16612063406046640659@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24072-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-665 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-36-rt-17-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:39:06 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:39:06 -0000 Subject: SUSE-SU-2026:24071-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149194641.3924.13091472224612604179@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24071-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-664 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-13-1.1 * kernel-livepatch-6_4_0-37-rt-13-1.1 * kernel-livepatch-6_4_0-37-rt-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:39:33 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:39:33 -0000 Subject: SUSE-SU-2026:24070-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149197357.3924.12207777587478634137@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24070-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-663 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-13-1.1 * kernel-livepatch-6_4_0-38-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-38-rt-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:40:01 -0000 Subject: SUSE-SU-2026:24069-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149200169.3924.8409317296622690426@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24069-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-662 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-rt-12-1.1 * kernel-livepatch-6_4_0-39-rt-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:40:30 -0000 Subject: SUSE-SU-2026:24068-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149203079.3924.3844117332795061978@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24068-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-661 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-40-rt-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-40-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:40:59 -0000 Subject: SUSE-SU-2026:24067-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149205938.3924.2167796451267149965@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24067-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-660 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-10-1.1 * kernel-livepatch-6_4_0-41-rt-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:41:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:41:27 -0000 Subject: SUSE-SU-2026:24066-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149208703.3924.421482289718595561@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24066-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-659 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-rt-8-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:41:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:41:55 -0000 Subject: SUSE-SU-2026:24065-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149211588.3924.15247872272894966973@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24065-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-658 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-rt-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:42:22 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:42:22 -0000 Subject: SUSE-SU-2026:24064-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149214290.3924.14297711714602341560@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24064-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-657 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-7-1.2 * kernel-livepatch-6_4_0-45-rt-debuginfo-7-1.2 * kernel-livepatch-6_4_0-45-rt-7-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:42:51 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:42:51 -0000 Subject: SUSE-SU-2026:24063-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149217189.3924.159166417856686962@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24063-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-656 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-46-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-46-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:43:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:43:19 -0000 Subject: SUSE-SU-2026:24062-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149219985.3924.12603610458544906297@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24062-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-655 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-6-1.1 * kernel-livepatch-6_4_0-47-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:43:47 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:43:47 -0000 Subject: SUSE-SU-2026:24061-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149222719.3924.6830781802049490616@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24061-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-654 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-5-1.1 * kernel-livepatch-6_4_0-48-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:44:13 -0000 Subject: SUSE-SU-2026:24060-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149225331.3924.1999898375565178662@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24060-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-653 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-49-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-4-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:38 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:44:38 -0000 Subject: SUSE-SU-2026:24059-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149227857.3924.10785550371195684177@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24059-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-652 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:44:54 -0000 Subject: SUSE-SU-2026:24058-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149229461.3924.17290626704183075891@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24058-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-651 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-51-rt-3-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-3-1.1 * kernel-livepatch-6_4_0-51-rt-debuginfo-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:45:05 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:45:05 -0000 Subject: SUSE-SU-2026:24057-1: important: Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149230534.3924.13882221333086506381@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24057-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-650 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-52-rt-2-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-rt-debuginfo-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:45:16 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:45:16 -0000 Subject: SUSE-SU-2026:24056-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179149231645.3924.16350722901147152775@35d72aa18c5b> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24056-1 Release Date: 2026-10-05T14:00:24Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-649 ## Package List: * SUSE Linux Micro 6.0 (aarch64 x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:46:51 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:46:51 -0000 Subject: SUSE-SU-2026:24055-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179149241129.3924.8862029222340177315@35d72aa18c5b> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:24055-1 Release Date: 2026-10-08T09:47:48Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262187 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263330 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1265525 * bsc#1265763 * bsc#1266481 * bsc#1266608 * bsc#1266669 * bsc#1267261 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269841 * bsc#1269856 * bsc#1269959 * bsc#1269966 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271330 * bsc#1271428 * bsc#1271613 * bsc#1272008 * bsc#1272102 * bsc#1272427 * bsc#1273094 * bsc#1273144 * bsc#1274217 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2024-22195 * CVE-2025-13836 * CVE-2025-4673 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1229 * CVE-2026-13346 * CVE-2026-14199 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-33814 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-39882 * CVE-2026-40181 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-44990 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-53606 * CVE-2026-56852 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-73501 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8609 * CVE-2026-8643 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Client Tools for SLE 16 An update that solves 54 vulnerabilities, contains two features and has 20 fixes can now be installed. ## Description: This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 grafana was updated to version 12.4.10: * Security issues: * CVE-2026-17183: Fixed exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269841) * CVE-2026-17033: Fixed stored cross-site scripting risks via malicious Alertmanager generator URLs (bsc#1276426) * CVE-2026-73501: Fixed fail-open authentication bypass in kin-openapi default handlers (bsc#1276973) * CVE-2026-19475: Fixed DoS risks in PostgreSQL Datasource by checking timeGroup macros (bsc#1278307) * CVE-2026-14199: Fixed auth bypass or session takeover via Auth Proxy cache key collision (bsc#1278322) * CVE-2026-19197: Fixed access control and authorization checks in dashboard snapshots (bsc#1277025) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm (bsc#1272008) * CVE-2026-41178: Fixed denial-of-service risks in OpenTelemetry baggage parsing (bsc#1276658) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274217) * CVE-2026-33814: Fixed infinite loop in HTTP/2 transport during framesize check (bsc#1265763) * CVE-2026-8609: Fixed pre-authentication denial-of-service risks in OAuth login routes (bsc#1271330) * CVE-2026-1229: Fixed incorrect value calculation in ecc/p384 Package (bsc#1265525, bsc#1262187) * CVE-2026-21723: Fixed out-of-memory and denial-of-service risks in templates test endpoint (bsc#1272427) * CVE-2026-41606: Fixed denial-of-service risks from nested messages in Apache Thrift parser (bsc#1263330) * Bug fixes and changes: * Dashboards: Fix adhoc and groupby variable datasource on UI import * Dashboards: Fix version dates and user display names in the legacy version history page * Dashboard Import: Labels in v2 schema * Azure Monitor: fix migration for dimension filters * Dashboards: Get annotations and dashboard endpoint performance improvements * DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Alerting: Add protected fields authorization check to provisioning API * Alerting: Return 403 instead of 500 on contact point provenance mismatch * Jaeger: Handle gzip, deflate, and brotli compressed API responses * Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 16 zypper in -t patch Multi-Linux-ManagerTools-SLE-16-6 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 16 (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-160002.1.1 * golang-github-prometheus-prometheus-debuginfo-3.13.2-160002.1.1 * grafana-debuginfo-12.4.10-160002.1.1 * golang-github-prometheus-prometheus-3.13.2-160002.1.1 * grafana-12.4.10-160002.1.1 * mgrctl-debuginfo-5.2.17-160002.1.1 * venv-salt-minion-3006.0-160002.7.1 * SUSE Multi-Linux Manager Client Tools for SLE 16 (noarch) * spacecmd-5.2.10-160002.1.1 * mgrctl-bash-completion-5.2.17-160002.1.1 * mgrctl-lang-5.2.17-160002.1.1 * mgrctl-zsh-completion-5.2.17-160002.1.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:46:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:46:57 -0000 Subject: SUSE-RU-2026:4596-1: moderate: Recommended update for osinfo-db Message-ID: <179149241719.3924.14599125560540705391@35d72aa18c5b> # Recommended update for osinfo-db Announcement ID: SUSE-RU-2026:4596-1 Release Date: 2026-10-08T14:40:51Z Rating: moderate References: * bsc#1268781 * jsc#PED-14625 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains one feature and has one fix can now be installed. ## Description: This update for osinfo-db fixes the following issues: * Update to database version 20260812 (jsc#PED-14625) * Drop patches contained in new tarball * Fix: inconsistent OS names in virt-install for 16.0 (bsc#1268781) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4596 ## Package List: * Basesystem Module 15-SP7 (noarch) * osinfo-db-20260812-150700.5.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1268781 * https://jira.suse.com/browse/PED-14625 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:03 -0000 Subject: SUSE-SU-2026:4595-1: important: Security update for the Linux Kernel Message-ID: <179149254328.3924.869794246207339437@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4595-1 Release Date: 2026-10-08T14:26:42Z Rating: important References: * bsc#1235944 * bsc#1261604 * bsc#1263072 * bsc#1264734 * bsc#1267023 * bsc#1268659 * bsc#1269000 * bsc#1269004 * bsc#1269238 * bsc#1269242 * bsc#1269306 * bsc#1269655 * bsc#1269731 * bsc#1269792 * bsc#1271825 * bsc#1271830 * bsc#1272179 * bsc#1272182 * bsc#1272230 * bsc#1272385 * bsc#1272390 * bsc#1272756 * bsc#1272868 * bsc#1272877 * bsc#1273060 * bsc#1273105 * bsc#1273276 * bsc#1273303 * bsc#1273311 * bsc#1273422 * bsc#1273484 * bsc#1273488 * bsc#1273523 * bsc#1273555 * bsc#1273742 * bsc#1273745 * bsc#1273748 * bsc#1273762 * bsc#1273774 * bsc#1273869 * bsc#1273882 * bsc#1273891 * bsc#1273930 * bsc#1273944 * bsc#1273966 * bsc#1273995 * bsc#1274014 * bsc#1274031 * bsc#1274041 * bsc#1274208 * bsc#1274274 * bsc#1274497 * bsc#1274547 * bsc#1274550 * bsc#1274696 * bsc#1274705 * bsc#1274752 * bsc#1274753 * bsc#1274754 * bsc#1274859 * bsc#1274888 * bsc#1274898 * bsc#1274902 * bsc#1274908 * bsc#1274941 * bsc#1275161 * bsc#1275472 * bsc#1275474 * bsc#1275506 * bsc#1275528 * bsc#1275687 * bsc#1275782 * bsc#1275798 * bsc#1275827 * bsc#1275867 * bsc#1275886 * bsc#1275905 * bsc#1276350 * bsc#1276665 * bsc#1276931 * bsc#1277073 * bsc#1277155 * bsc#1277285 * bsc#1277391 * bsc#1277408 * bsc#1277523 * bsc#1277571 * bsc#1277678 * bsc#1277860 * bsc#1278088 * bsc#1278233 * bsc#1278236 * bsc#1279554 * bsc#1279813 Cross-References: * CVE-2024-57841 * CVE-2026-23451 * CVE-2026-31502 * CVE-2026-43456 * CVE-2026-45968 * CVE-2026-52910 * CVE-2026-52912 * CVE-2026-52929 * CVE-2026-52977 * CVE-2026-53059 * CVE-2026-53163 * CVE-2026-53260 * CVE-2026-53264 * CVE-2026-53381 * CVE-2026-53388 * CVE-2026-63801 * CVE-2026-63823 * CVE-2026-63827 * CVE-2026-63887 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63992 * CVE-2026-64002 * CVE-2026-64007 * CVE-2026-64010 * CVE-2026-64011 * CVE-2026-64015 * CVE-2026-64047 * CVE-2026-64048 * CVE-2026-64098 * CVE-2026-64109 * CVE-2026-64114 * CVE-2026-64115 * CVE-2026-64137 * CVE-2026-64266 * CVE-2026-64268 * CVE-2026-64304 * CVE-2026-64355 * CVE-2026-64423 * CVE-2026-64450 * CVE-2026-64481 * CVE-2026-64541 * CVE-2026-64543 * CVE-2026-64562 * CVE-2026-64563 * CVE-2026-64572 * CVE-2026-64577 * CVE-2026-64581 * CVE-2026-64593 * CVE-2026-68121 * CVE-2026-68136 * CVE-2026-68138 * CVE-2026-68160 * CVE-2026-68202 * CVE-2026-68397 * CVE-2026-68398 * CVE-2026-68417 * CVE-2026-68426 * CVE-2026-68480 * CVE-2026-72020 * CVE-2026-72069 * CVE-2026-72072 * CVE-2026-72123 * CVE-2026-72135 * CVE-2026-72251 * CVE-2026-72262 * CVE-2026-72288 * CVE-2026-72289 * CVE-2026-72389 * CVE-2026-74345 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74390 * CVE-2026-74394 * CVE-2026-74454 * CVE-2026-74488 * CVE-2026-74496 * CVE-2026-74518 * CVE-2026-74537 * CVE-2026-74581 * CVE-2026-74582 * CVE-2026-74669 * CVE-2026-74695 * CVE-2026-80722 CVSS scores: * CVE-2024-57841 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-57841 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-57841 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-57841 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23451 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23451 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23451 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31502 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31502 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43456 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43456 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45968 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45968 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52910 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52910 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52910 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52910 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52929 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52929 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52977 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52977 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53059 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-53059 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-53059 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53163 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53260 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53264 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53381 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53381 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53381 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63801 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63801 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63823 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63823 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63823 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63827 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63827 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63827 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63992 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63992 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63992 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64002 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64002 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64002 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64007 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64007 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64007 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64010 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64010 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64010 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64015 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64047 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64047 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64048 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64048 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64048 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64098 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64098 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64098 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64109 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64109 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64109 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64115 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64115 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64115 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64137 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64137 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64137 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64268 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64268 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64304 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64304 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64304 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64355 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64355 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64450 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64450 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64450 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64481 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64481 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64481 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64541 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64541 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64543 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64543 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64562 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64562 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64563 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64563 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64572 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64572 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64577 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64577 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64577 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64581 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64581 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64581 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64593 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64593 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68136 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68136 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68136 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68160 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68160 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-68160 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68397 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68397 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68398 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68398 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68417 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68417 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68426 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68426 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68480 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-72020 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72020 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72020 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72069 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72069 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72069 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72072 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72072 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72123 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72123 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72123 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72251 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72251 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72251 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72262 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72288 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72288 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72288 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72289 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72289 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72289 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72389 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72389 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72389 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74345 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74345 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74345 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74454 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74454 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74454 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74488 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74488 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74496 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74496 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74518 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74518 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74537 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74537 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74581 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74581 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74582 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74582 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74582 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74669 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74695 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74695 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 84 vulnerabilities and has 10 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). * CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). * CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072). * CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). * CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023). * CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004). * CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242). * CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655). * CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306). * CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238). * CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830). * CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230). * CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182). * CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877). * CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). * CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). * CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). * CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). * CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762). * CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). * CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484). * CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). * CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). * CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). * CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276). * CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944). * CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274). * CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523). * CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547). * CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303). * CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311). * CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930). * CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995). * CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014). * CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031). * CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041). * CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888). * CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941). * CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161). * CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898). * CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908). * CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696). * CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274705). * CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208). * CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506). * CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528). * CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155). * CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827). * CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678). * CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886). * CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905). * CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869). * CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408). * CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073). * CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350). * CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867). * CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798). * CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687). * CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782). * CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784). * CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391). * CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). The following non security issues were fixed: * mkspec-dtb: Move DTS prefix into package list. * mkspec-dtb: Move provides-obsoletes to package list. * mkspec-dtb: Put per-architecture package lists into a hash. * mkspec-dtb: re-indent. * net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes). * net: mana: Add handler for sriov configure (bsc#1272756). * net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792). * net: mana: Route ring-buffer access through offset-based helpers (git- fixes). * net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550). * PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git- fixes). * powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752 ltc#221290). * RDMA/mana_ib: drain QP references after partial table insertion (git-fixes). * RDMA/mana_ib: unify QP lookup table (git-fixes). * RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes). * RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes). * RDMA/siw: Introduce siw_free_cm_id (git-fixes). * RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp (git-fixes). * scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes). * smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902). * smb: client: require net admin for CIFS SWN netlink (bsc#1273966). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4595 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4595 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4595 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4595 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4595 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4595 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4595 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.189.1 * kernel-livepatch-5_14_21-150500_55_189-default-1-150500.11.5.3 * kernel-default-livepatch-devel-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-livepatch-SLE15-SP5_Update_45-debugsource-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-debuginfo-1-150500.11.5.3 * kernel-default-debugsource-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-extra-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-optional-5.14.21-150500.55.189.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-extra-5.14.21-150500.55.189.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.189.1 * cluster-md-kmp-64kb-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * kselftests-kmp-64kb-5.14.21-150500.55.189.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-64kb-5.14.21-150500.55.189.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-64kb-5.14.21-150500.55.189.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-64kb-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * dlm-kmp-64kb-5.14.21-150500.55.189.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * kselftests-kmp-default-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-qa-5.14.21-150500.55.189.1 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-extra-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * kernel-default-optional-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * kernel-default-livepatch-5.14.21-150500.55.189.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-kvmsmall-debugsource-5.14.21-150500.55.189.1 * kernel-default-base-rebuild-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-kvmsmall-devel-5.14.21-150500.55.189.1 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_45-debugsource-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-debuginfo-1-150500.11.5.3 * kernel-default-livepatch-devel-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-5.14.21-150500.55.189.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.189.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.189.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (noarch) * kernel-source-vanilla-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * kernel-docs-html-5.14.21-150500.55.189.1 * kernel-source-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.189.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.189.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57841.html * https://www.suse.com/security/cve/CVE-2026-23451.html * https://www.suse.com/security/cve/CVE-2026-31502.html * https://www.suse.com/security/cve/CVE-2026-43456.html * https://www.suse.com/security/cve/CVE-2026-45968.html * https://www.suse.com/security/cve/CVE-2026-52910.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-52929.html * https://www.suse.com/security/cve/CVE-2026-52977.html * https://www.suse.com/security/cve/CVE-2026-53059.html * https://www.suse.com/security/cve/CVE-2026-53163.html * https://www.suse.com/security/cve/CVE-2026-53260.html * https://www.suse.com/security/cve/CVE-2026-53264.html * https://www.suse.com/security/cve/CVE-2026-53381.html * https://www.suse.com/security/cve/CVE-2026-53388.html * https://www.suse.com/security/cve/CVE-2026-63801.html * https://www.suse.com/security/cve/CVE-2026-63823.html * https://www.suse.com/security/cve/CVE-2026-63827.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63992.html * https://www.suse.com/security/cve/CVE-2026-64002.html * https://www.suse.com/security/cve/CVE-2026-64007.html * https://www.suse.com/security/cve/CVE-2026-64010.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64015.html * https://www.suse.com/security/cve/CVE-2026-64047.html * https://www.suse.com/security/cve/CVE-2026-64048.html * https://www.suse.com/security/cve/CVE-2026-64098.html * https://www.suse.com/security/cve/CVE-2026-64109.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64115.html * https://www.suse.com/security/cve/CVE-2026-64137.html * https://www.suse.com/security/cve/CVE-2026-64266.html * https://www.suse.com/security/cve/CVE-2026-64268.html * https://www.suse.com/security/cve/CVE-2026-64304.html * https://www.suse.com/security/cve/CVE-2026-64355.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64450.html * https://www.suse.com/security/cve/CVE-2026-64481.html * https://www.suse.com/security/cve/CVE-2026-64541.html * https://www.suse.com/security/cve/CVE-2026-64543.html * https://www.suse.com/security/cve/CVE-2026-64562.html * https://www.suse.com/security/cve/CVE-2026-64563.html * https://www.suse.com/security/cve/CVE-2026-64572.html * https://www.suse.com/security/cve/CVE-2026-64577.html * https://www.suse.com/security/cve/CVE-2026-64581.html * https://www.suse.com/security/cve/CVE-2026-64593.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68136.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://www.suse.com/security/cve/CVE-2026-68160.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-68397.html * https://www.suse.com/security/cve/CVE-2026-68398.html * https://www.suse.com/security/cve/CVE-2026-68417.html * https://www.suse.com/security/cve/CVE-2026-68426.html * https://www.suse.com/security/cve/CVE-2026-68480.html * https://www.suse.com/security/cve/CVE-2026-72020.html * https://www.suse.com/security/cve/CVE-2026-72069.html * https://www.suse.com/security/cve/CVE-2026-72072.html * https://www.suse.com/security/cve/CVE-2026-72123.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72251.html * https://www.suse.com/security/cve/CVE-2026-72262.html * https://www.suse.com/security/cve/CVE-2026-72288.html * https://www.suse.com/security/cve/CVE-2026-72289.html * https://www.suse.com/security/cve/CVE-2026-72389.html * https://www.suse.com/security/cve/CVE-2026-74345.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74454.html * https://www.suse.com/security/cve/CVE-2026-74488.html * https://www.suse.com/security/cve/CVE-2026-74496.html * https://www.suse.com/security/cve/CVE-2026-74518.html * https://www.suse.com/security/cve/CVE-2026-74537.html * https://www.suse.com/security/cve/CVE-2026-74581.html * https://www.suse.com/security/cve/CVE-2026-74582.html * https://www.suse.com/security/cve/CVE-2026-74669.html * https://www.suse.com/security/cve/CVE-2026-74695.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://bugzilla.suse.com/show_bug.cgi?id=1235944 * https://bugzilla.suse.com/show_bug.cgi?id=1261604 * https://bugzilla.suse.com/show_bug.cgi?id=1263072 * https://bugzilla.suse.com/show_bug.cgi?id=1264734 * https://bugzilla.suse.com/show_bug.cgi?id=1267023 * https://bugzilla.suse.com/show_bug.cgi?id=1268659 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269004 * https://bugzilla.suse.com/show_bug.cgi?id=1269238 * https://bugzilla.suse.com/show_bug.cgi?id=1269242 * https://bugzilla.suse.com/show_bug.cgi?id=1269306 * https://bugzilla.suse.com/show_bug.cgi?id=1269655 * https://bugzilla.suse.com/show_bug.cgi?id=1269731 * https://bugzilla.suse.com/show_bug.cgi?id=1269792 * https://bugzilla.suse.com/show_bug.cgi?id=1271825 * https://bugzilla.suse.com/show_bug.cgi?id=1271830 * https://bugzilla.suse.com/show_bug.cgi?id=1272179 * https://bugzilla.suse.com/show_bug.cgi?id=1272182 * https://bugzilla.suse.com/show_bug.cgi?id=1272230 * https://bugzilla.suse.com/show_bug.cgi?id=1272385 * https://bugzilla.suse.com/show_bug.cgi?id=1272390 * https://bugzilla.suse.com/show_bug.cgi?id=1272756 * https://bugzilla.suse.com/show_bug.cgi?id=1272868 * https://bugzilla.suse.com/show_bug.cgi?id=1272877 * https://bugzilla.suse.com/show_bug.cgi?id=1273060 * https://bugzilla.suse.com/show_bug.cgi?id=1273105 * https://bugzilla.suse.com/show_bug.cgi?id=1273276 * https://bugzilla.suse.com/show_bug.cgi?id=1273303 * https://bugzilla.suse.com/show_bug.cgi?id=1273311 * https://bugzilla.suse.com/show_bug.cgi?id=1273422 * https://bugzilla.suse.com/show_bug.cgi?id=1273484 * https://bugzilla.suse.com/show_bug.cgi?id=1273488 * https://bugzilla.suse.com/show_bug.cgi?id=1273523 * https://bugzilla.suse.com/show_bug.cgi?id=1273555 * https://bugzilla.suse.com/show_bug.cgi?id=1273742 * https://bugzilla.suse.com/show_bug.cgi?id=1273745 * https://bugzilla.suse.com/show_bug.cgi?id=1273748 * https://bugzilla.suse.com/show_bug.cgi?id=1273762 * https://bugzilla.suse.com/show_bug.cgi?id=1273774 * https://bugzilla.suse.com/show_bug.cgi?id=1273869 * https://bugzilla.suse.com/show_bug.cgi?id=1273882 * https://bugzilla.suse.com/show_bug.cgi?id=1273891 * https://bugzilla.suse.com/show_bug.cgi?id=1273930 * https://bugzilla.suse.com/show_bug.cgi?id=1273944 * https://bugzilla.suse.com/show_bug.cgi?id=1273966 * https://bugzilla.suse.com/show_bug.cgi?id=1273995 * https://bugzilla.suse.com/show_bug.cgi?id=1274014 * https://bugzilla.suse.com/show_bug.cgi?id=1274031 * https://bugzilla.suse.com/show_bug.cgi?id=1274041 * https://bugzilla.suse.com/show_bug.cgi?id=1274208 * https://bugzilla.suse.com/show_bug.cgi?id=1274274 * https://bugzilla.suse.com/show_bug.cgi?id=1274497 * https://bugzilla.suse.com/show_bug.cgi?id=1274547 * https://bugzilla.suse.com/show_bug.cgi?id=1274550 * https://bugzilla.suse.com/show_bug.cgi?id=1274696 * https://bugzilla.suse.com/show_bug.cgi?id=1274705 * https://bugzilla.suse.com/show_bug.cgi?id=1274752 * https://bugzilla.suse.com/show_bug.cgi?id=1274753 * https://bugzilla.suse.com/show_bug.cgi?id=1274754 * https://bugzilla.suse.com/show_bug.cgi?id=1274859 * https://bugzilla.suse.com/show_bug.cgi?id=1274888 * https://bugzilla.suse.com/show_bug.cgi?id=1274898 * https://bugzilla.suse.com/show_bug.cgi?id=1274902 * https://bugzilla.suse.com/show_bug.cgi?id=1274908 * https://bugzilla.suse.com/show_bug.cgi?id=1274941 * https://bugzilla.suse.com/show_bug.cgi?id=1275161 * https://bugzilla.suse.com/show_bug.cgi?id=1275472 * https://bugzilla.suse.com/show_bug.cgi?id=1275474 * https://bugzilla.suse.com/show_bug.cgi?id=1275506 * https://bugzilla.suse.com/show_bug.cgi?id=1275528 * https://bugzilla.suse.com/show_bug.cgi?id=1275687 * https://bugzilla.suse.com/show_bug.cgi?id=1275782 * https://bugzilla.suse.com/show_bug.cgi?id=1275798 * https://bugzilla.suse.com/show_bug.cgi?id=1275827 * https://bugzilla.suse.com/show_bug.cgi?id=1275867 * https://bugzilla.suse.com/show_bug.cgi?id=1275886 * https://bugzilla.suse.com/show_bug.cgi?id=1275905 * https://bugzilla.suse.com/show_bug.cgi?id=1276350 * https://bugzilla.suse.com/show_bug.cgi?id=1276665 * https://bugzilla.suse.com/show_bug.cgi?id=1276931 * https://bugzilla.suse.com/show_bug.cgi?id=1277073 * https://bugzilla.suse.com/show_bug.cgi?id=1277155 * https://bugzilla.suse.com/show_bug.cgi?id=1277285 * https://bugzilla.suse.com/show_bug.cgi?id=1277391 * https://bugzilla.suse.com/show_bug.cgi?id=1277408 * https://bugzilla.suse.com/show_bug.cgi?id=1277523 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277678 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1279554 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:09 -0000 Subject: SUSE-SU-2026:4594-1: important: Security update for emacs Message-ID: <179149254958.3924.4454565161767984612@35d72aa18c5b> # Security update for emacs Announcement ID: SUSE-SU-2026:4594-1 Release Date: 2026-10-08T14:24:33Z Rating: important References: * bsc#1282390 Cross-References: * CVE-2026-96442 CVSS scores: * CVE-2026-96442 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96442 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96442 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issue: * CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4594 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4594 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4594 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4594 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4594 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4594 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4594 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4594 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4594 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4594 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4594 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4594 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4594 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * Basesystem Module 15-SP7 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96442.html * https://bugzilla.suse.com/show_bug.cgi?id=1282390 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:15 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:15 -0000 Subject: SUSE-SU-2026:4593-1: moderate: Security update for python-hpack Message-ID: <179149255524.3924.157274547428116709@35d72aa18c5b> # Security update for python-hpack Announcement ID: SUSE-SU-2026:4593-1 Release Date: 2026-10-08T14:22:49Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4593 ## Package List: * Server Applications Module 15-SP7 (noarch) * python3-hpack-3.0.0-150200.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:20 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:20 -0000 Subject: SUSE-SU-2026:4592-1: moderate: Security update for GraphicsMagick Message-ID: <179149256076.3924.8712626346276662223@35d72aa18c5b> # Security update for GraphicsMagick Announcement ID: SUSE-SU-2026:4592-1 Release Date: 2026-10-08T14:22:18Z Rating: moderate References: * bsc#1283767 Cross-References: * CVE-2026-103118 CVSS scores: * CVE-2026-103118 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-103118 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-103118 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-103118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for GraphicsMagick fixes the following issue: * CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing (bsc#1283767). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4592 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4592 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * GraphicsMagick-debugsource-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-1.3.42-150600.3.48.1 * GraphicsMagick-devel-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.48.1 * perl-GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick3-config-1.3.42-150600.3.48.1 * GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.48.1 * GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-1.3.42-150600.3.48.1 * perl-GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-1.3.42-150600.3.48.1 * libGraphicsMagick++-devel-1.3.42-150600.3.48.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * GraphicsMagick-debugsource-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-1.3.42-150600.3.48.1 * GraphicsMagick-devel-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.48.1 * perl-GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick3-config-1.3.42-150600.3.48.1 * GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.48.1 * GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-1.3.42-150600.3.48.1 * perl-GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-1.3.42-150600.3.48.1 * libGraphicsMagick++-devel-1.3.42-150600.3.48.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103118.html * https://bugzilla.suse.com/show_bug.cgi?id=1283767 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:38 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:38 -0000 Subject: SUSE-SU-2026:4591-1: important: Security update for glibc Message-ID: <179149257841.3924.6597182511512342218@35d72aa18c5b> # Security update for glibc Announcement ID: SUSE-SU-2026:4591-1 Release Date: 2026-10-08T12:18:32Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276946 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1278011 * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-18374 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities and has one security fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726). * CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921). * CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4591 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4591 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4591 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4591 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4591 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4591 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4591 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4591 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4591 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4591 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4591 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4591 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4591 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4591 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 i686 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * openSUSE Leap 15.3 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-utils-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-profile-32bit-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * glibc-utils-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-static-32bit-2.31-150300.109.1 * openSUSE Leap 15.3 (aarch64_ilp32) * glibc-profile-64bit-2.31-150300.109.1 * glibc-devel-64bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-64bit-2.31-150300.109.1 * glibc-devel-64bit-2.31-150300.109.1 * glibc-devel-static-64bit-2.31-150300.109.1 * glibc-utils-64bit-debuginfo-2.31-150300.109.1 * glibc-64bit-debuginfo-2.31-150300.109.1 * glibc-utils-64bit-2.31-150300.109.1 * glibc-locale-base-64bit-debuginfo-2.31-150300.109.1 * glibc-64bit-2.31-150300.109.1 * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * openSUSE Leap 15.3 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-html-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1278011 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:44 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:44 -0000 Subject: SUSE-SU-2026:4590-1: important: Security update for wpa_supplicant Message-ID: <179149258416.3924.8414030314355015589@35d72aa18c5b> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4590-1 Release Date: 2026-10-08T12:16:23Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4590 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4590 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4590 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4590 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4590 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4590 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * wpa_supplicant-gui-debuginfo-2.10-150500.3.9.1 * wpa_supplicant-gui-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:49:55 -0000 Subject: SUSE-SU-2026:4589-1: important: Security update for php-composer2 Message-ID: <179149259541.3924.17393084968321506591@35d72aa18c5b> # Security update for php-composer2 Announcement ID: SUSE-SU-2026:4589-1 Release Date: 2026-10-08T12:15:39Z Rating: important References: * bsc#1271122 * bsc#1271123 * bsc#1271129 * bsc#1271130 * bsc#1271151 * bsc#1271152 Cross-References: * CVE-2026-59946 * CVE-2026-59947 * CVE-2026-59948 CVSS scores: * CVE-2026-59946 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59946 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-59946 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59947 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59947 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59947 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59948 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-59948 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-59948 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and has three security fixes can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications (bsc#1271152). * CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token disclosure (bsc#1271130). * CVE-2026-59948: missing package name validation during dependency resolution in Composer can allow path traversal (bsc#1271123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4589 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4589 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4589 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4589 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4589 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4589 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4589 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4589 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4589 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * openSUSE Leap 15.4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * php-composer2-2.2.30-150400.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59946.html * https://www.suse.com/security/cve/CVE-2026-59947.html * https://www.suse.com/security/cve/CVE-2026-59948.html * https://bugzilla.suse.com/show_bug.cgi?id=1271122 * https://bugzilla.suse.com/show_bug.cgi?id=1271123 * https://bugzilla.suse.com/show_bug.cgi?id=1271129 * https://bugzilla.suse.com/show_bug.cgi?id=1271130 * https://bugzilla.suse.com/show_bug.cgi?id=1271151 * https://bugzilla.suse.com/show_bug.cgi?id=1271152 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:50:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 08 Oct 2026 20:50:01 -0000 Subject: SUSE-SU-2026:4588-1: important: Security update for wpa_supplicant Message-ID: <179149260110.3924.3774084484821453736@35d72aa18c5b> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4588-1 Release Date: 2026-10-08T12:14:12Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4588 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.11-150700.3.6.1 * wpa_supplicant-debuginfo-2.11-150700.3.6.1 * wpa_supplicant-2.11-150700.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 12:30:08 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 12:30:08 -0000 Subject: SUSE-SU-2026:4598-1: important: Security update for ghostscript Message-ID: <179154900885.27557.2838654420308285996@35d72aa18c5b> # Security update for ghostscript Announcement ID: SUSE-SU-2026:4598-1 Release Date: 2026-10-08T22:03:41Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4598 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4598 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-23.100.1 * ghostscript-x11-debuginfo-9.52-23.100.1 * ghostscript-debuginfo-9.52-23.100.1 * ghostscript-x11-9.52-23.100.1 * ghostscript-9.52-23.100.1 * ghostscript-devel-9.52-23.100.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * ghostscript-debugsource-9.52-23.100.1 * ghostscript-x11-debuginfo-9.52-23.100.1 * ghostscript-debuginfo-9.52-23.100.1 * ghostscript-x11-9.52-23.100.1 * ghostscript-9.52-23.100.1 * ghostscript-devel-9.52-23.100.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 12:30:34 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 12:30:34 -0000 Subject: SUSE-SU-2026:4597-1: important: Security update for bind Message-ID: <179154903401.27557.3777006210735623671@35d72aa18c5b> # Security update for bind Announcement ID: SUSE-SU-2026:4597-1 Release Date: 2026-10-08T22:03:19Z Rating: important References: * bsc#1280433 * bsc#1280435 * bsc#1280443 Cross-References: * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-80274 CVSS scores: * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 An update that solves three vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-4597 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (aarch64 ppc64le s390x x86_64) * libisc1606-debuginfo-9.16.6-150000.12.94.1 * libbind9-1600-debuginfo-9.16.6-150000.12.94.1 * libisccc1600-debuginfo-9.16.6-150000.12.94.1 * libisccc1600-9.16.6-150000.12.94.1 * libns1604-debuginfo-9.16.6-150000.12.94.1 * libirs1601-9.16.6-150000.12.94.1 * bind-debuginfo-9.16.6-150000.12.94.1 * bind-debugsource-9.16.6-150000.12.94.1 * libisccfg1600-9.16.6-150000.12.94.1 * libns1604-9.16.6-150000.12.94.1 * libdns1605-debuginfo-9.16.6-150000.12.94.1 * libirs1601-debuginfo-9.16.6-150000.12.94.1 * bind-utils-debuginfo-9.16.6-150000.12.94.1 * libisccfg1600-debuginfo-9.16.6-150000.12.94.1 * libisc1606-9.16.6-150000.12.94.1 * libbind9-1600-9.16.6-150000.12.94.1 * libdns1605-9.16.6-150000.12.94.1 * bind-utils-9.16.6-150000.12.94.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (noarch) * python3-bind-9.16.6-150000.12.94.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:07 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:30:07 -0000 Subject: SUSE-SU-2026:4605-1: important: Security update for fetchmail Message-ID: <179156340760.1649.10119810843733013623@929e079ff995> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4605-1 Release Date: 2026-10-09T10:00:35Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4605 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4605 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4605 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4605 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4605 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4605 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4605 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4605 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:14 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:30:14 -0000 Subject: SUSE-SU-2026:4604-1: important: Security update for fetchmail Message-ID: <179156341495.1649.16900463121034946793@929e079ff995> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4604-1 Release Date: 2026-10-09T09:59:26Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4604 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4604 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4604 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4604 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4604 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmail-debugsource-6.4.22-150600.35.6.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:30:35 -0000 Subject: SUSE-SU-2026:4603-1: important: Security update for php8 Message-ID: <179156343503.1649.1705321163727668745@929e079ff995> # Security update for php8 Announcement ID: SUSE-SU-2026:4603-1 Release Date: 2026-10-09T09:58:46Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.2.34 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4603 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4603 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4603 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-ffi-debuginfo-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-ffi-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.34-150600.3.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:51 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:30:51 -0000 Subject: SUSE-SU-2026:4602-1: important: Security update for php8 Message-ID: <179156345101.1649.13200279695973826799@929e079ff995> # Security update for php8 Announcement ID: SUSE-SU-2026:4602-1 Release Date: 2026-10-09T09:58:24Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.3.35 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4602 ## Package List: * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php8-phar-debuginfo-8.3.35-150700.3.21.1 * php8-shmop-8.3.35-150700.3.21.1 * php8-gd-8.3.35-150700.3.21.1 * apache2-mod_php8-8.3.35-150700.3.21.1 * php8-ctype-8.3.35-150700.3.21.1 * php8-dba-debuginfo-8.3.35-150700.3.21.1 * php8-pdo-debuginfo-8.3.35-150700.3.21.1 * php8-pcntl-debuginfo-8.3.35-150700.3.21.1 * php8-calendar-debuginfo-8.3.35-150700.3.21.1 * php8-tidy-debuginfo-8.3.35-150700.3.21.1 * php8-ctype-debuginfo-8.3.35-150700.3.21.1 * php8-xsl-8.3.35-150700.3.21.1 * php8-xmlreader-8.3.35-150700.3.21.1 * php8-openssl-8.3.35-150700.3.21.1 * php8-sodium-debuginfo-8.3.35-150700.3.21.1 * php8-pgsql-debuginfo-8.3.35-150700.3.21.1 * php8-gmp-debuginfo-8.3.35-150700.3.21.1 * php8-opcache-8.3.35-150700.3.21.1 * php8-debugsource-8.3.35-150700.3.21.1 * php8-intl-8.3.35-150700.3.21.1 * php8-fastcgi-debuginfo-8.3.35-150700.3.21.1 * php8-openssl-debuginfo-8.3.35-150700.3.21.1 * php8-gmp-8.3.35-150700.3.21.1 * php8-sysvsem-8.3.35-150700.3.21.1 * php8-zlib-debuginfo-8.3.35-150700.3.21.1 * php8-sockets-debuginfo-8.3.35-150700.3.21.1 * php8-sysvmsg-debuginfo-8.3.35-150700.3.21.1 * apache2-mod_php8-debugsource-8.3.35-150700.3.21.1 * php8-fastcgi-8.3.35-150700.3.21.1 * php8-zlib-8.3.35-150700.3.21.1 * php8-zip-debuginfo-8.3.35-150700.3.21.1 * php8-embed-debugsource-8.3.35-150700.3.21.1 * php8-embed-debuginfo-8.3.35-150700.3.21.1 * php8-dom-8.3.35-150700.3.21.1 * php8-sqlite-debuginfo-8.3.35-150700.3.21.1 * php8-sysvsem-debuginfo-8.3.35-150700.3.21.1 * php8-iconv-8.3.35-150700.3.21.1 * php8-8.3.35-150700.3.21.1 * php8-exif-debuginfo-8.3.35-150700.3.21.1 * php8-mysql-8.3.35-150700.3.21.1 * php8-fpm-debugsource-8.3.35-150700.3.21.1 * php8-soap-8.3.35-150700.3.21.1 * php8-enchant-debuginfo-8.3.35-150700.3.21.1 * php8-gettext-debuginfo-8.3.35-150700.3.21.1 * php8-xmlwriter-8.3.35-150700.3.21.1 * php8-enchant-8.3.35-150700.3.21.1 * php8-mbstring-debuginfo-8.3.35-150700.3.21.1 * php8-tokenizer-debuginfo-8.3.35-150700.3.21.1 * php8-readline-8.3.35-150700.3.21.1 * php8-gd-debuginfo-8.3.35-150700.3.21.1 * php8-exif-8.3.35-150700.3.21.1 * apache2-mod_php8-debuginfo-8.3.35-150700.3.21.1 * php8-snmp-8.3.35-150700.3.21.1 * php8-ldap-8.3.35-150700.3.21.1 * php8-dba-8.3.35-150700.3.21.1 * php8-pdo-8.3.35-150700.3.21.1 * php8-sysvmsg-8.3.35-150700.3.21.1 * php8-iconv-debuginfo-8.3.35-150700.3.21.1 * php8-ftp-debuginfo-8.3.35-150700.3.21.1 * php8-gettext-8.3.35-150700.3.21.1 * php8-phar-8.3.35-150700.3.21.1 * php8-sysvshm-8.3.35-150700.3.21.1 * php8-fileinfo-debuginfo-8.3.35-150700.3.21.1 * php8-sockets-8.3.35-150700.3.21.1 * php8-xsl-debuginfo-8.3.35-150700.3.21.1 * php8-posix-debuginfo-8.3.35-150700.3.21.1 * php8-dom-debuginfo-8.3.35-150700.3.21.1 * php8-bcmath-debuginfo-8.3.35-150700.3.21.1 * php8-test-8.3.35-150700.3.21.1 * php8-fpm-debuginfo-8.3.35-150700.3.21.1 * php8-curl-debuginfo-8.3.35-150700.3.21.1 * php8-ldap-debuginfo-8.3.35-150700.3.21.1 * php8-snmp-debuginfo-8.3.35-150700.3.21.1 * php8-sodium-8.3.35-150700.3.21.1 * php8-pcntl-8.3.35-150700.3.21.1 * php8-tidy-8.3.35-150700.3.21.1 * php8-intl-debuginfo-8.3.35-150700.3.21.1 * php8-pgsql-8.3.35-150700.3.21.1 * php8-soap-debuginfo-8.3.35-150700.3.21.1 * php8-ftp-8.3.35-150700.3.21.1 * php8-cli-debuginfo-8.3.35-150700.3.21.1 * php8-bz2-8.3.35-150700.3.21.1 * php8-zip-8.3.35-150700.3.21.1 * php8-bz2-debuginfo-8.3.35-150700.3.21.1 * php8-embed-8.3.35-150700.3.21.1 * php8-debuginfo-8.3.35-150700.3.21.1 * php8-sqlite-8.3.35-150700.3.21.1 * php8-mysql-debuginfo-8.3.35-150700.3.21.1 * php8-opcache-debuginfo-8.3.35-150700.3.21.1 * php8-cli-8.3.35-150700.3.21.1 * php8-fastcgi-debugsource-8.3.35-150700.3.21.1 * php8-curl-8.3.35-150700.3.21.1 * php8-bcmath-8.3.35-150700.3.21.1 * php8-odbc-debuginfo-8.3.35-150700.3.21.1 * php8-readline-debuginfo-8.3.35-150700.3.21.1 * php8-shmop-debuginfo-8.3.35-150700.3.21.1 * php8-fileinfo-8.3.35-150700.3.21.1 * php8-tokenizer-8.3.35-150700.3.21.1 * php8-calendar-8.3.35-150700.3.21.1 * php8-xmlreader-debuginfo-8.3.35-150700.3.21.1 * php8-fpm-8.3.35-150700.3.21.1 * php8-mbstring-8.3.35-150700.3.21.1 * php8-sysvshm-debuginfo-8.3.35-150700.3.21.1 * php8-odbc-8.3.35-150700.3.21.1 * php8-posix-8.3.35-150700.3.21.1 * php8-xmlwriter-debuginfo-8.3.35-150700.3.21.1 * php8-devel-8.3.35-150700.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:55 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:30:55 -0000 Subject: SUSE-RU-2026:4601-1: moderate: Recommended update for system-user-grafana, system-user-prometheus Message-ID: <179156345544.1649.6259394180973014098@929e079ff995> # Recommended update for system-user-grafana, system-user-prometheus Announcement ID: SUSE-RU-2026:4601-1 Release Date: 2026-10-09T09:03:32Z Rating: moderate References: * jsc#MSQA-1060 Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Multi-Linux Manager Client Tools for SLE 15 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 * SUSE Package Hub 15 15-SP7 An update that contains one feature can now be installed. ## Description: This update for system-user-grafana, system-user-prometheus fixes the following issues: system-user-grafana, system-user-prometheus: * Build only for SUSE distributions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4601 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4601 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4601 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4601 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4601 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4601 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4601 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4601 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4601 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4601 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4601 * SUSE Multi-Linux Manager Client Tools for SLE 15 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-15-2026-4601 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-4601 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4601 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * system-user-prometheus-1.0.0-150000.19.2 * Basesystem Module 15-SP7 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Package Hub 15 15-SP7 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Multi-Linux Manager Client Tools for SLE 15 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * system-user-grafana-1.0.0-150000.3.22.2 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (noarch) * system-user-prometheus-1.0.0-150000.19.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * system-user-prometheus-1.0.0-150000.19.2 ## References: * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:31:23 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:31:23 -0000 Subject: SUSE-SU-2026:4600-1: important: Security update for grafana, system-user-grafana Message-ID: <179156348351.1649.6074079640627390630@929e079ff995> # Security update for grafana, system-user-grafana Announcement ID: SUSE-SU-2026:4600-1 Release Date: 2026-10-09T08:54:31Z Rating: important References: * bsc#1262187 * bsc#1263330 * bsc#1265525 * bsc#1265763 * bsc#1268868 * bsc#1269841 * bsc#1271330 * bsc#1271557 * bsc#1272008 * bsc#1272328 * bsc#1272427 * bsc#1274217 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 Cross-References: * CVE-2026-1229 * CVE-2026-14199 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-33814 * CVE-2026-39882 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42127 * CVE-2026-56852 * CVE-2026-73501 * CVE-2026-8595 * CVE-2026-8609 * CVE-2026-9029 CVSS scores: * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-8595 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-9029 ( SUSE ): 4.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-9029 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-9029 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-9029 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 18 vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for grafana, system-user-grafana fixes the following issues: * Update to version 12.4.10: * Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver (bsc#1269841) CVE-2026-17033: Fix stored XSS via external Alertmanager generatorURL (bsc#1276426) CVE-2026-73501: Fix fail-open authentication bypass in github.com/getkin/kin-openapi (bsc#1276973) CVE-2026-19475: Fix DoS in PostgreSQL Datasource (bsc#1278307) CVE-2026-14199: Fix session takeover via Auth Proxy cache key collision (bsc#1278322) * Bug fixes: Dashboards: Fix adhoc and groupby variable datasource on UI import Dashboards: Fix version dates and user display names in the legacy version history page * Update to version 12.4.9: * Features and enhancements: Dashboard Import: Labels in v2 schema * Bug fixes: Azure Monitor: fix migration for dimension filters * Update to version 12.4.8: * Security: CVE-2026-19197: Fix access control in dashboard snapshots (bsc#1277025) * Update to version 12.4.7: * Security: CVE-2026-56852: Fix infinite loop on truncated/invalid UTF-8 input in golang.org/x/text/unicode/norm (bsc#1272008) * Features and enhancements: Dashboards: Get annotations and dashboard endpoint performance improvements * Bug fixes: DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Update to version 12.4.6: * Security: CVE-2026-41178: Fix opentelemetry-go's baggage parsing (bsc#1276658) * Features and enhancements: Alerting: Add protected fields authorization check to provisioning API Alerting: Return 403 instead of 500 on contact point provenance mismatch * Bug fixes: Jaeger: Handle gzip, deflate, and brotli compressed API responses Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL * Drop 0005-Bump-edwards25519.patch CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters by updating to v1.43.0. (bsc#1274217) CVE-2026-8595: Fix stored XSS in the table panel (bsc#1271557) CVE-2026-42127: Fix DoS through memory exhaustion in grafana'a public dashboard query endpoint (bsc#1268868) CVE-2026-9029: Fix arbitrary code execution and information disclosure via XSS in geomap panel (bsc#1272328) CVE-2026-33814: Fix infinite loop in HTTP/2 transport by updating golang.org/x/net (bsc#1265763) CVE-2026-8609: Fix pre-authentication DoS in the OAuth login route (bsc#1271330) * CVE-2026-1229: Update github.com/cloudflare/circl to fix producing incorect output for specific inputs (bsc#1265525) (bsc#1262187) * CVE-2026-21723: Fix DoS vulnerability in Templates Test endpoint (bsc#1272427) \- CVE-2026-41606: Fix potential DoS in Apache Thrift (bsc#1263330) \- Build only for SUSE distributions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4600 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-12.4.10-150200.3.94.3 * grafana-12.4.10-150200.3.94.3 * SUSE Package Hub 15 15-SP7 (noarch) * system-user-grafana-1.0.0-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42127.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-8595.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-9029.html * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1268868 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271557 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272328 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:31:28 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 16:31:28 -0000 Subject: SUSE-FU-2026:4599-1: low: Feature update for wxWidgets-3_2 Message-ID: <179156348890.1649.5857773804257848552@929e079ff995> # Feature update for wxWidgets-3_2 Announcement ID: SUSE-FU-2026:4599-1 Release Date: 2026-10-09T08:40:14Z Rating: low References: * bsc#1277251 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that has one fix can now be installed. ## Description: This update for wxWidgets-3_2 fixes the following issues: * Add libwx_gtk3u_adv-suse5_0_0 and libwx_gtk3u_qa-suse5_0_0 into Packagehub 15-SP7 (bsc#1277251) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4599 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4599 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libwx_qtu_propgrid-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_aui-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_adv-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_adv-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_stc-suse5_0_0-3.1.5-150400.3.12.1 * wxWidgets-3_2-debugsource-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_xrc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse-nostl5_0_0-3.1.5-150400.3.12.1 * wxGTK3-3_2-debugsource-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_ribbon-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_media-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_net-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_xrc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-nostl-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_qa-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_base-suse-nostl-devel-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_qa-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_aui-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_propgrid-suse5_0_0-3.1.5-150400.3.12.1 * wxQt-3_2-devel-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_gl-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-plugin-sound_sdlu-3_2-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_html-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_qa-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_stc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu_net-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_richtext-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-nostl-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_gl-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-devel-3.1.5-150400.3.12.1 * wxGTK3-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_media-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_richtext-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_core-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_xrc-suse5_0_0-3.1.5-150400.3.12.1 * wxQt-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_base-suse-devel-3.1.5-150400.3.12.1 * libwx_gtk2u_media-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_net-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_net-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-nostl-devel-3.1.5-150400.3.12.1 * libwx_gtk2u_adv-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_adv-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_adv-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_stc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_qa-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxGTK3-3_2-devel-3.1.5-150400.3.12.1 * libwx_baseu-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_aui-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_propgrid-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse5_0_0-3.1.5-150400.3.12.1 * wxQt-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_gl-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_ribbon-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-plugin-sound_sdlu-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_gl-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_xrc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_media-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_aui-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_stc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_qa-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_core-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxQt-3_2-debugsource-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_ribbon-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_adv-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_richtext-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-nostl-debugsource-3.1.5-150400.3.12.1 * libwx_qtu_html-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_core-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_qtu_richtext-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_propgrid-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_adv-suse-nostl5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_qa-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_qa-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_adv-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_html-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_qa-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxGTK3-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_webview-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse-nostl5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_core-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_ribbon-suse5_0_0-3.1.5-150400.3.12.1 * libwx_qtu_html-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_webview-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse5_0_0-3.1.5-150400.3.12.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libwx_baseu_net-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_adv-suse5_0_0-3.1.5-150400.3.12.1 * wxWidgets-3_2-debugsource-3.1.5-150400.3.12.1 * wxWidgets-3_2-plugin-sound_sdlu-3_2-3.1.5-150400.3.12.1 * libwx_gtk3u_gl-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_media-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxGTK3-3_2-debugsource-3.1.5-150400.3.12.1 * wxQt-3_2-debugsource-3.1.5-150400.3.12.1 * libwx_gtk2u_html-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_core-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_ribbon-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_media-suse5_0_0-3.1.5-150400.3.12.1 * wxWidgets-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_adv-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_qa-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_ribbon-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_stc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_adv-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_xml-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_baseu_net-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_stc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_core-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_propgrid-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_qa-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxGTK3-3_2-devel-3.1.5-150400.3.12.1 * libwx_baseu-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_richtext-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_qa-suse5_0_0-3.1.5-150400.3.12.1 * libwx_baseu-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_aui-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_propgrid-suse5_0_0-3.1.5-150400.3.12.1 * wxWidgets-3_2-devel-3.1.5-150400.3.12.1 * libwx_gtk2u_html-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_richtext-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_propgrid-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_stc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_webview-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_gl-suse5_0_0-3.1.5-150400.3.12.1 * wxGTK3-3_2-debuginfo-3.1.5-150400.3.12.1 * wxGTK3-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * wxQt-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_richtext-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_core-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxWidgets-3_2-plugin-sound_sdlu-3_2-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_gl-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_xrc-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_xrc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_base-suse-devel-3.1.5-150400.3.12.1 * libwx_gtk2u_aui-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk2u_ribbon-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_webview-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_xrc-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk2u_media-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 * wxQt-3_2-devel-3.1.5-150400.3.12.1 * wxQt-3_2-devel-debuginfo-3.1.5-150400.3.12.1 * libwx_gtk3u_html-suse5_0_0-3.1.5-150400.3.12.1 * libwx_gtk3u_aui-suse5_0_0-debuginfo-3.1.5-150400.3.12.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1277251 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:17 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:17 -0000 Subject: SUSE-SU-2026:24115-1: important: Security update for qemu Message-ID: <179157781737.1793.10178103715341731683@00920b2f2f09> # Security update for qemu Announcement ID: SUSE-SU-2026:24115-1 Release Date: 2026-10-07T10:25:54Z Rating: important References: * bsc#1263864 * bsc#1279962 * bsc#1282077 * bsc#1282578 * bsc#1282918 Cross-References: * CVE-2026-81627 * CVE-2026-93834 CVSS scores: * CVE-2026-81627 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-81627 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-81627 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93834 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-93834 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has three fixes can now be installed. ## Description: This update for qemu fixes the following issues: Security issues fixed: * CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Management Mode memory (bsc#1282077). * CVE-2026-93834: hw/9pfs: mutate FID path from main thread only (bsc#1282578). Changes for qemu: * Bugfixes: * [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918) * virtio: fix queue size validation against allocated maximum (bsc#1279962) * virtio-mmio: fix QUEUE_NUM_MAX (bsc#1279962) * target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864) * target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864) * linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864) * linux-headers: Update to Linux v7.2-rc1 with KVM_S390_VM_CPU_FEAT_ASTFLEIE2 (bsc#1263864) * linux-headers: Update to Linux v7.1-rc4 (bsc#1263864) * scripts/update-linux-headers: Add typelimits.h (bsc#1263864) * update-linux-headers: Inject VIRTIO_RING_NO_LEGACY in virtio_ring.h (bsc#1263864) * linux-headers: Add nitro_enclaves.h (bsc#1263864) * scripts/update-linux-headers: Add Nitro Enclaves header (bsc#1263864) * standard-headers: Update virtio_spi.h from Linux v6.18-rc3 (bsc#1263864) * linux-headers: Update to Linux v6.19-rc1 (bsc#1263864) * update-linux-headers: Remove "asm-s390/unistd_32.h" (bsc#1263864) * linux-headers: Update to Linux v6.18-rc3 (bsc#1263864) * linux-headers/linux: Add mshv.h headers (bsc#1263864) * include/hw/hyperv: Add MSHV ABI header definitions (bsc#1263864) * linux-headers: Update to Linux v6.17-rc1 (bsc#1263864) * linux-headers: deal with counted_by annotation (bsc#1263864) * linux-headers: Remove the 32-bit arm headers (bsc#1263864) * update Linux headers to KVM tree master (bsc#1263864) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1860 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * qemu-guest-agent-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-chardev-spice-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-ui-opengl-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-audio-spice-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-ui-spice-core-debuginfo-10.0.13-160000.2.1 * qemu-audio-spice-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-chardev-spice-10.0.13-160000.2.1 * qemu-hw-display-qxl-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-ui-opengl-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-ui-spice-core-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-qxl-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (noarch) * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (aarch64) * qemu-arm-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (ppc64le) * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (s390x) * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81627.html * https://www.suse.com/security/cve/CVE-2026-93834.html * https://bugzilla.suse.com/show_bug.cgi?id=1263864 * https://bugzilla.suse.com/show_bug.cgi?id=1279962 * https://bugzilla.suse.com/show_bug.cgi?id=1282077 * https://bugzilla.suse.com/show_bug.cgi?id=1282578 * https://bugzilla.suse.com/show_bug.cgi?id=1282918 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:29 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:29 -0000 Subject: SUSE-SU-2026:24114-1: moderate: Security update for swtpm Message-ID: <179157782944.1793.14705426005601835848@00920b2f2f09> # Security update for swtpm Announcement ID: SUSE-SU-2026:24114-1 Release Date: 2026-10-07T09:31:01Z Rating: moderate References: * bsc#1221342 * bsc#1251789 * bsc#1266339 * bsc#1271417 * bsc#1275653 Cross-References: * CVE-2026-75900 CVSS scores: * CVE-2026-75900 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-75900 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for swtpm fixes the following issues: Security issue fixed: * CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for truncation following snprintf call * add upstream signing key and validate source signature * Fix SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched), create and listen on Unix stream sockets with swtpm_t processes (bsc#1266339). Already accepted on upstream: https://github.com/stefanberger/swtpm/pull/1132 * Drop tunable in require to avoid policy loading issues with toolchain 3.11 (bsc#1271417). Can be dropped, once this is accepted upstream: https://github.com/stefanberger/swtpm/pull/1139 * Update SELinux module dir as macro to allow root path move from /var/lib/selinux to /etc/selinux (bsc#1221342) * Also load swtpm_libvirt in the selinux subpackage (bsc#1251789) * Update to version 0.10.1: * swtpm: Fix build error on 32bit systems due to inconsistent _FILE_OFFSET_BITS. * swtpm_setup: * Use DISTRO_PROFILES_DIR when listing profiles (fix path issue). * Do not pass a TPM 2 profile to swtpm when reconfiguring. * selinux: * Add rule for swtpm to be able to read password from pipe. * allow to map state file. * add NFS permissions for swtpm_t. * Add rule to allow swtpm_t opening of virt_log_t files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1861 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * swtpm-selinux-0.10.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-75900.html * https://bugzilla.suse.com/show_bug.cgi?id=1221342 * https://bugzilla.suse.com/show_bug.cgi?id=1251789 * https://bugzilla.suse.com/show_bug.cgi?id=1266339 * https://bugzilla.suse.com/show_bug.cgi?id=1271417 * https://bugzilla.suse.com/show_bug.cgi?id=1275653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:34 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:34 -0000 Subject: SUSE-RU-2026:24113-1: important: Recommended update for crash Message-ID: <179157783472.1793.10805439072747705895@00920b2f2f09> # Recommended update for crash Announcement ID: SUSE-RU-2026:24113-1 Release Date: 2026-10-07T09:29:25Z Rating: important References: * bsc#1244926 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for crash fixes the following issues: Changes in crash: * vmcoreinfo: read vmcoreinfo using 'vmcoreinfo_data' when unavailable in elf note (bsc#1244926). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1857 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * crash-9.0.0-160000.3.1 * crash-debugsource-9.0.0-160000.3.1 * crash-debuginfo-9.0.0-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1244926 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:41 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:41 -0000 Subject: SUSE-RU-2026:24112-1: moderate: Recommended update for libpulp Message-ID: <179157784159.1793.10900172531735794687@00920b2f2f09> # Recommended update for libpulp Announcement ID: SUSE-RU-2026:24112-1 Release Date: 2026-10-07T09:28:17Z Rating: moderate References: * bsc#1280765 * jsc#PED-14756 Affected Products: * SUSE Linux Micro 6.2 An update that contains one feature and has one fix can now be installed. ## Description: This update for libpulp fixes the following issues: Changes in libpulp: * Add python3-base build requirement (bsc#1280765) * Clean up SPEC file * Make Makefile to use configured Python interpreter instead of python3 * Make build work with the system Python * Update scripts to comply with Immutable Mode (jsc#PED-14756) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1859 ## Package List: * SUSE Linux Micro 6.2 (ppc64le x86_64) * libpulp0-0.3.17-160000.2.1 * libpulp0-debuginfo-0.3.17-160000.2.1 * libpulp-tools-0.3.17-160000.2.1 * libpulp-debugsource-0.3.17-160000.2.1 * libpulp-tools-debuginfo-0.3.17-160000.2.1 * libpulp-debuginfo-0.3.17-160000.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1280765 * https://jira.suse.com/browse/PED-14756 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:47 -0000 Subject: SUSE-RU-2026:24111-1: moderate: Recommended update for python-gcemetadata Message-ID: <179157784735.1793.15817724236584396280@00920b2f2f09> # Recommended update for python-gcemetadata Announcement ID: SUSE-RU-2026:24111-1 Release Date: 2026-10-06T15:07:35Z Rating: moderate References: * bsc#1261908 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for python-gcemetadata fixes the following issues: Changes in python-gcemetadata: * Update to version 1.1.2: * Fix: openQA publiccloud test fails to boot during instance creation waiting for guestregister.service (bsc#1261908): * Avoid connection attempt to black hole * Handle IPv6 and IPv4 access to the metadata server giving IPv6 preference ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1854 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python-gcemetadata-1.1.2-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261908 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:30:54 -0000 Subject: SUSE-RU-2026:24110-1: moderate: Recommended update for grub2 Message-ID: <179157785457.1793.15482738857052239884@00920b2f2f09> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:24110-1 Release Date: 2026-10-06T13:08:39Z Rating: moderate References: * bsc#1278729 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: Changes in grub2: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1849 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * grub2-2.12-160000.8.1 * grub2-common-2.12-160000.8.1 * grub2-common-debuginfo-2.12-160000.8.1 * SUSE Linux Micro 6.2 (aarch64 s390x x86_64) * grub2-debugsource-2.12-160000.8.1 * SUSE Linux Micro 6.2 (noarch) * grub2-x86_64-efi-2.12-160000.8.1 * grub2-i386-pc-2.12-160000.8.1 * grub2-arm64-efi-2.12-160000.8.1 * grub2-powerpc-ieee1275-2.12-160000.8.1 * grub2-snapper-plugin-2.12-160000.8.1 * grub2-x86_64-xen-2.12-160000.8.1 * SUSE Linux Micro 6.2 (s390x) * grub2-s390x-emu-2.12-160000.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:31:00 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:31:00 -0000 Subject: SUSE-RU-2026:24109-1: moderate: Recommended update for osinfo-db Message-ID: <179157786032.1793.232390918823596245@00920b2f2f09> # Recommended update for osinfo-db Announcement ID: SUSE-RU-2026:24109-1 Release Date: 2026-10-06T12:57:33Z Rating: moderate References: * bsc#1268781 * jsc#PED-14625 * jsc#PED-14636 Affected Products: * SUSE Linux Micro 6.2 An update that contains two features and has one fix can now be installed. ## Description: This update for osinfo-db fixes the following issues: Changes in osinfo-db: * Update to database version 20260812 (jsc#PED-14625): * Set UEFI as default for new VMs (jsc#PED-14636) * Drop patches contained in new tarball * Fix: inconsistent OS names in virt-install for 16.0 (bsc#1268781) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1846 ## Package List: * SUSE Linux Micro 6.2 (noarch) * osinfo-db-20260812-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1268781 * https://jira.suse.com/browse/PED-14625 * https://jira.suse.com/browse/PED-14636 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:31:30 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:31:30 -0000 Subject: SUSE-SU-2026:24108-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179157789017.1793.5601576294963544494@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24108-1 Release Date: 2026-10-06T11:01:59Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1845 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:32:00 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:32:00 -0000 Subject: SUSE-SU-2026:24107-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179157792048.1793.8341085373147901236@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24107-1 Release Date: 2026-10-06T10:42:40Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1844 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:32:30 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:32:30 -0000 Subject: SUSE-SU-2026:24106-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179157795089.1793.2841006503525103104@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24106-1 Release Date: 2026-10-06T09:09:25Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1843 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:33:00 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:33:00 -0000 Subject: SUSE-SU-2026:24105-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179157798046.1793.18233413252566104562@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24105-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1842 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:33:29 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:33:29 -0000 Subject: SUSE-SU-2026:24104-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179157800914.1793.7853501004025388506@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24104-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1841 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:34:00 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:34:00 -0000 Subject: SUSE-SU-2026:24103-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179157804014.1793.9976479392696902056@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24103-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1840 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:34:30 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:34:30 -0000 Subject: SUSE-SU-2026:24102-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179157807010.1793.8540740624023496974@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24102-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1839 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:00 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:35:00 -0000 Subject: SUSE-SU-2026:24101-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179157810029.1793.13132311075537868660@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24101-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1838 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:29 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:35:29 -0000 Subject: SUSE-SU-2026:24100-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179157812949.1793.3099408963323990068@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24100-1 Release Date: 2026-10-05T21:37:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1837 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:59 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:35:59 -0000 Subject: SUSE-SU-2026:24099-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179157815965.1793.8318228857102857868@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24099-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1836 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:36:35 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:36:35 -0000 Subject: SUSE-SU-2026:24098-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179157819529.1793.14563120753077560631@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24098-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1835 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:04 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:37:04 -0000 Subject: SUSE-SU-2026:24097-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179157822446.1793.10417003180194308053@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24097-1 Release Date: 2026-10-05T19:09:29Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1834 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:10 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:37:10 -0000 Subject: SUSE-SU-2026:24096-1: important: Security update for wpa_supplicant Message-ID: <179157823052.1793.7685918658939744135@00920b2f2f09> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24096-1 Release Date: 2026-10-05T18:13:18Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: Security issues fixed: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1833 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.11-160000.5.1 * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:41 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:37:41 -0000 Subject: SUSE-SU-2026:24095-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179157826114.1793.17347995048898405193@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24095-1 Release Date: 2026-10-05T17:08:09Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1832 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:58 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:37:58 -0000 Subject: SUSE-SU-2026:24094-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179157827896.1793.15022850549503520048@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24094-1 Release Date: 2026-10-05T15:56:29Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1831 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:38:28 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:38:28 -0000 Subject: SUSE-SU-2026:24093-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179157830877.1793.542665314771029945@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24093-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1830 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:38:57 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:38:57 -0000 Subject: SUSE-SU-2026:24092-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179157833793.1793.6678293585118815551@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24092-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1829 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:05 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:39:05 -0000 Subject: SUSE-SU-2026:4612-1: important: Security update for perl-DBI Message-ID: <179157834596.1793.2481536471965145353@00920b2f2f09> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4612-1 Release Date: 2026-10-09T15:56:46Z Rating: important References: * bsc#1281704 * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-78030 * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-78030 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78030 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78030 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704). * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4612 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4612 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4612 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4612 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4612 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4612 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4612 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4612 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78030.html * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1281704 * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:19 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:39:19 -0000 Subject: SUSE-SU-2026:4611-1: important: Security update for rsyslog Message-ID: <179157835927.1793.13006542741781985336@00920b2f2f09> # Security update for rsyslog Announcement ID: SUSE-SU-2026:4611-1 Release Date: 2026-10-09T15:55:48Z Rating: important References: * bsc#1257604 * bsc#1271910 * bsc#1272414 * bsc#1274610 * bsc#1275926 * bsc#1281628 Cross-References: * CVE-2026-19654 * CVE-2026-61548 * CVE-2026-78002 CVSS scores: * CVE-2026-19654 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19654 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19654 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-61548 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-61548 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78002 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78002 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Galera for Ericsson 15 SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves three vulnerabilities and has three security fixes can now be installed. ## Description: This update for rsyslog fixes the following issues: * imdtls permitted-peer authorization bypass (bsc#1281628). Changes for rsyslog: * Upgrade to version 8.2608.0 (bsc#1257604) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4611 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4611 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4611 * Galera for Ericsson 15 SP7 zypper in -t patch SUSE-SLE-Product-SLES-15-SP7-ERICSSON-2026-4611 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-ossl-8.2608.0-150700.3.24.1 * rsyslog-8.2608.0-150700.3.24.1 * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-ossl-debuginfo-8.2608.0-150700.3.24.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-module-gssapi-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-udpspoof-8.2608.0-150700.3.24.1 * rsyslog-module-mmnormalize-8.2608.0-150700.3.24.1 * rsyslog-module-gtls-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-snmp-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-gssapi-8.2608.0-150700.3.24.1 * rsyslog-module-pgsql-8.2608.0-150700.3.24.1 * rsyslog-module-relp-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-relp-8.2608.0-150700.3.24.1 * rsyslog-module-snmp-8.2608.0-150700.3.24.1 * rsyslog-module-gtls-8.2608.0-150700.3.24.1 * rsyslog-module-mysql-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-mmnormalize-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-pgsql-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-mysql-8.2608.0-150700.3.24.1 * rsyslog-module-udpspoof-debuginfo-8.2608.0-150700.3.24.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-kafka-8.2608.0-150700.3.24.1 * rsyslog-module-kafka-debuginfo-8.2608.0-150700.3.24.1 * Galera for Ericsson 15 SP7 (x86_64) * rsyslog-devel-8.2608.0-150700.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19654.html * https://www.suse.com/security/cve/CVE-2026-61548.html * https://www.suse.com/security/cve/CVE-2026-78002.html * https://bugzilla.suse.com/show_bug.cgi?id=1257604 * https://bugzilla.suse.com/show_bug.cgi?id=1271910 * https://bugzilla.suse.com/show_bug.cgi?id=1272414 * https://bugzilla.suse.com/show_bug.cgi?id=1274610 * https://bugzilla.suse.com/show_bug.cgi?id=1275926 * https://bugzilla.suse.com/show_bug.cgi?id=1281628 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:35 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:39:35 -0000 Subject: SUSE-SU-2026:4610-1: important: Security update for flatpak Message-ID: <179157837538.1793.1009506832434969930@00920b2f2f09> # Security update for flatpak Announcement ID: SUSE-SU-2026:4610-1 Release Date: 2026-10-09T15:55:06Z Rating: important References: * bsc#1280236 * bsc#1282514 * bsc#1282515 * bsc#1282516 * bsc#1282519 * bsc#1282520 * bsc#1282521 * bsc#1282523 * bsc#1282524 Cross-References: * CVE-2026-90616 * CVE-2026-92162 * CVE-2026-96275 * CVE-2026-96276 * CVE-2026-96281 * CVE-2026-96282 * CVE-2026-96283 * CVE-2026-96807 * CVE-2026-96808 CVSS scores: * CVE-2026-90616 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-90616 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90616 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92162 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-92162 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-96275 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96275 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96275 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96276 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-96276 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96281 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-96281 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-96281 ( NVD ): 6.2 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:N * CVE-2026-96282 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N * CVE-2026-96282 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-96283 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96283 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96283 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96807 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:L * CVE-2026-96807 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L * CVE-2026-96807 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-96808 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96808 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96808 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236). * CVE-2026-92162: path traversal via unvalidated `arch` parameter in `DeployAppstream` (bsc#1282514). * CVE-2026-96275: arbitrary write access as root via extra-data extraction (bsc#1282515). * CVE-2026-96276: arbitrary write in host context via `flatpak build-init` (bsc#1282516). * CVE-2026-96281: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes (bsc#1282519). * CVE-2026-96282: extension metadata path traversal file existence oracle (bsc#1282520). * CVE-2026-96283: flatpak-system-helper: cross-user `CancelPull` orphans another user's ongoing pull (bsc#1282521). * CVE-2026-96807: fixed-filename writes to arbitrary locations via symlink attack on `.ld.so` (bsc#1282523). * CVE-2026-96808: `revokefs` symlink path traversal allows local privilege escalation via commit tampering (bsc#1282524). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4610 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4610 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * flatpak-debugsource-1.4.2-3.15.1 * libflatpak0-1.4.2-3.15.1 * flatpak-1.4.2-3.15.1 * typelib-1_0-Flatpak-1_0-1.4.2-3.15.1 * flatpak-debuginfo-1.4.2-3.15.1 * libflatpak0-debuginfo-1.4.2-3.15.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * flatpak-debugsource-1.4.2-3.15.1 * libflatpak0-1.4.2-3.15.1 * flatpak-1.4.2-3.15.1 * typelib-1_0-Flatpak-1_0-1.4.2-3.15.1 * flatpak-debuginfo-1.4.2-3.15.1 * libflatpak0-debuginfo-1.4.2-3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-90616.html * https://www.suse.com/security/cve/CVE-2026-92162.html * https://www.suse.com/security/cve/CVE-2026-96275.html * https://www.suse.com/security/cve/CVE-2026-96276.html * https://www.suse.com/security/cve/CVE-2026-96281.html * https://www.suse.com/security/cve/CVE-2026-96282.html * https://www.suse.com/security/cve/CVE-2026-96283.html * https://www.suse.com/security/cve/CVE-2026-96807.html * https://www.suse.com/security/cve/CVE-2026-96808.html * https://bugzilla.suse.com/show_bug.cgi?id=1280236 * https://bugzilla.suse.com/show_bug.cgi?id=1282514 * https://bugzilla.suse.com/show_bug.cgi?id=1282515 * https://bugzilla.suse.com/show_bug.cgi?id=1282516 * https://bugzilla.suse.com/show_bug.cgi?id=1282519 * https://bugzilla.suse.com/show_bug.cgi?id=1282520 * https://bugzilla.suse.com/show_bug.cgi?id=1282521 * https://bugzilla.suse.com/show_bug.cgi?id=1282523 * https://bugzilla.suse.com/show_bug.cgi?id=1282524 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:52 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:39:52 -0000 Subject: SUSE-SU-2026:4608-1: important: Security update for bind Message-ID: <179157839295.1793.15896736682576689532@00920b2f2f09> # Security update for bind Announcement ID: SUSE-SU-2026:4608-1 Release Date: 2026-10-09T15:54:45Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280437 * bsc#1280438 * bsc#1280442 * bsc#1280443 * bsc#1280444 * bsc#1280445 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-78301 * CVE-2026-80274 * CVE-2026-81563 * CVE-2026-81736 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81563 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81736 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). * CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444). * CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4608 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4608 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4608 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * bind-doc-9.18.50-150600.3.35.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * openSUSE Leap 15.6 (noarch) * bind-doc-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * bind-doc-9.18.50-150600.3.35.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://www.suse.com/security/cve/CVE-2026-81563.html * https://www.suse.com/security/cve/CVE-2026-81736.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 * https://bugzilla.suse.com/show_bug.cgi?id=1280444 * https://bugzilla.suse.com/show_bug.cgi?id=1280445 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:40:12 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 09 Oct 2026 20:40:12 -0000 Subject: SUSE-SU-2026:4606-1: important: Security update for golang-github-prometheus-prometheus Message-ID: <179157841294.1793.11698860317998929974@00920b2f2f09> # Security update for golang-github-prometheus-prometheus Announcement ID: SUSE-SU-2026:4606-1 Release Date: 2026-10-09T12:30:05Z Rating: important References: * bsc#1266608 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1269856 * bsc#1269966 * bsc#1270711 * bsc#1272102 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2025-4673 * CVE-2025-61686 * CVE-2026-2303 * CVE-2026-39821 * CVE-2026-40181 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-44990 * CVE-2026-53606 * CVE-2026-56852 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-61686 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 11 vulnerabilities, contains two features and has one security fix can now be installed. ## Description: This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react- router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4606 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-prometheus-debuginfo-3.13.2-150100.4.40.2 * golang-github-prometheus-prometheus-3.13.2-150100.4.40.2 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2025-61686.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270711 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:30:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:30:27 -0000 Subject: SUSE-SU-2026:4624-1: important: Security update for unbound Message-ID: <179180822782.16296.1334682667484561765@81803ed3a673> # Security update for unbound Announcement ID: SUSE-SU-2026:4624-1 Release Date: 2026-10-12T07:29:20Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for libunbound-devel-mini: * Updated to version 1.26.1 Changes for unbound: * Updated to version 1.26.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4624 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4624 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4624 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4624 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4624 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4624 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4624 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4624 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4624 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:30:57 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:30:57 -0000 Subject: SUSE-SU-2026:4623-1: important: Security update for expat Message-ID: <179180825730.16296.9289462423714080244@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4623-1 Release Date: 2026-10-12T07:27:51Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4623 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4623 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4623 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4623 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4623 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4623 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4623 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4623 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4623 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4623 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4623 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4623 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (x86_64) * libexpat-devel-32bit-2.8.5-150400.3.40.1 * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * expat-64bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-64bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-64bit-2.8.5-150400.3.40.1 * libexpat-devel-64bit-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:14 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:31:14 -0000 Subject: SUSE-SU-2026:4622-1: important: Security update for apache-sshd Message-ID: <179180827409.16296.13049092315331409659@81803ed3a673> # Security update for apache-sshd Announcement ID: SUSE-SU-2026:4622-1 Release Date: 2026-10-12T07:25:51Z Rating: important References: * bsc#1283344 * bsc#1283345 * bsc#1283346 * bsc#1283347 * bsc#1283348 * bsc#1283350 * bsc#1283352 * bsc#1283357 Cross-References: * CVE-2026-77185 * CVE-2026-93994 * CVE-2026-93995 * CVE-2026-93996 * CVE-2026-94002 * CVE-2026-94029 * CVE-2026-94052 * CVE-2026-94053 CVSS scores: * CVE-2026-77185 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-77185 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93994 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93994 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93995 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93995 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93996 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93996 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94002 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94002 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94029 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94029 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94052 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-94052 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-94053 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94053 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for apache-sshd fixes the following issues: * CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357). * CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352). * CVE-2026-93995: Remote execution of JGit "archive -o=file.zip" can write file on the server (bsc#1283350). * CVE-2026-93996: Memory exhaustion DoS via unbounded SCP command line read (bsc#1283348). * CVE-2026-94002: Memory exhaustion in SFTP client via unsolicited SFTP replies (bsc#1283347). * CVE-2026-94029: Memory exhaustion in SFTP v6 check-file-name/check-file- handle extension (bsc#1283346). * CVE-2026-94052: LDAP password authentication ineffective (bsc#1283345). * CVE-2026-94053: LDAP injection in sshd-ldap (bsc#1283344). Changes for apache-sshd: * Update to upstream version 2.20.0: * GH-656 ChannelPipedInputStream: shrink buffer when emptied * GH-906 Fix finding a signature factory for BC ed25519 keys * GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests * Allow asynchronous authentication only for password and keyboard-interactive authentication schemes * Fix authentication requiring multiple public keys (server-side) * Better argument handling in sshd-git * More checks in authentication (server-side) * Better SCP command handling * SFTP client: simplify response message handling * Fix check-file-name/check-file-handle SFTP v6 extension * Improve LDAP authentication (sshd-ldap) * New Features * GH-905 Implement the "from" and "expiry-time" options in authorized_keys handling in public key authentication (server side) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4622 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4622 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4622 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4622 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4622 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4622 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4622 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4622 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4622 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4622 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4622 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 * Development Tools Module 15-SP7 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77185.html * https://www.suse.com/security/cve/CVE-2026-93994.html * https://www.suse.com/security/cve/CVE-2026-93995.html * https://www.suse.com/security/cve/CVE-2026-93996.html * https://www.suse.com/security/cve/CVE-2026-94002.html * https://www.suse.com/security/cve/CVE-2026-94029.html * https://www.suse.com/security/cve/CVE-2026-94052.html * https://www.suse.com/security/cve/CVE-2026-94053.html * https://bugzilla.suse.com/show_bug.cgi?id=1283344 * https://bugzilla.suse.com/show_bug.cgi?id=1283345 * https://bugzilla.suse.com/show_bug.cgi?id=1283346 * https://bugzilla.suse.com/show_bug.cgi?id=1283347 * https://bugzilla.suse.com/show_bug.cgi?id=1283348 * https://bugzilla.suse.com/show_bug.cgi?id=1283350 * https://bugzilla.suse.com/show_bug.cgi?id=1283352 * https://bugzilla.suse.com/show_bug.cgi?id=1283357 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:26 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:31:26 -0000 Subject: SUSE-SU-2026:4621-1: important: Security update for squid Message-ID: <179180828668.16296.16095542767184480438@81803ed3a673> # Security update for squid Announcement ID: SUSE-SU-2026:4621-1 Release Date: 2026-10-12T07:24:07Z Rating: important References: * bsc#1237027 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities and has one security fix can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). Changes for squid: * Do not leak HttpReply when checking http_reply_access (bsc#1237027) * Updated to version 6.14 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4621 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4621 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4621 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4621 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1237027 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:44 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:31:44 -0000 Subject: SUSE-SU-2026:4620-1: important: Security update for unbound Message-ID: <179180830426.16296.5496955559786657907@81803ed3a673> # Security update for unbound Announcement ID: SUSE-SU-2026:4620-1 Release Date: 2026-10-12T07:23:37Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for libunbound-devel-mini: * Updated to version 1.26.1 Changes for unbound: * Updated to version 1.26.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4620 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4620 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4620 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4620 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4620 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-debugsource-1.26.1-150600.23.24.1 * unbound-python-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * unbound-python-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-debuginfo-1.26.1-150600.23.24.1 * openSUSE Leap 15.6 (noarch) * unbound-munin-1.26.1-150600.23.24.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-1.26.1-150600.23.24.1 * unbound-python-1.26.1-150600.23.24.1 * unbound-python-debuginfo-1.26.1-150600.23.24.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:14 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:32:14 -0000 Subject: SUSE-SU-2026:4619-1: important: Security update for expat Message-ID: <179180833411.16296.450879890969842542@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4619-1 Release Date: 2026-10-12T07:22:46Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4619 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * expat-debuginfo-2.8.5-150700.3.15.1 * libexpat1-2.8.5-150700.3.15.1 * expat-debugsource-2.8.5-150700.3.15.1 * libexpat-devel-2.8.5-150700.3.15.1 * expat-2.8.5-150700.3.15.1 * libexpat1-debuginfo-2.8.5-150700.3.15.1 * Basesystem Module 15-SP7 (x86_64) * expat-32bit-debuginfo-2.8.5-150700.3.15.1 * libexpat1-32bit-debuginfo-2.8.5-150700.3.15.1 * libexpat1-32bit-2.8.5-150700.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:20 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:32:20 -0000 Subject: SUSE-SU-2026:4618-1: moderate: Security update for python3-paramiko Message-ID: <179180834084.16296.9812127368619585894@81803ed3a673> # Security update for python3-paramiko Announcement ID: SUSE-SU-2026:4618-1 Release Date: 2026-10-12T07:22:31Z Rating: moderate References: * bsc#1264225 Cross-References: * CVE-2026-44405 CVSS scores: * CVE-2026-44405 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-44405 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-44405 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python3-paramiko fixes the following issue: * CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4618 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4618 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-paramiko-3.4.0-150400.9.9.1 * python3-paramiko-doc-3.4.0-150400.9.9.1 * Basesystem Module 15-SP7 (noarch) * python3-paramiko-3.4.0-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44405.html * https://bugzilla.suse.com/show_bug.cgi?id=1264225 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:32:27 -0000 Subject: SUSE-SU-2026:4617-1: moderate: Security update for stunnel Message-ID: <179180834780.16296.995891716141245972@81803ed3a673> # Security update for stunnel Announcement ID: SUSE-SU-2026:4617-1 Release Date: 2026-10-12T07:21:52Z Rating: moderate References: * bsc#1274206 * bsc#1274207 Cross-References: * CVE-2026-70367 * CVE-2026-70368 CVSS scores: * CVE-2026-70367 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-70367 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70367 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70368 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-70368 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-70368 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for stunnel fixes the following issues: * CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). * CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads (bsc#1274206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4617 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4617 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * stunnel-debugsource-5.70-150600.3.6.1 * stunnel-debuginfo-5.70-150600.3.6.1 * stunnel-5.70-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * stunnel-doc-5.70-150600.3.6.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * stunnel-debugsource-5.70-150600.3.6.1 * stunnel-debuginfo-5.70-150600.3.6.1 * stunnel-5.70-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-70367.html * https://www.suse.com/security/cve/CVE-2026-70368.html * https://bugzilla.suse.com/show_bug.cgi?id=1274206 * https://bugzilla.suse.com/show_bug.cgi?id=1274207 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:42 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:32:42 -0000 Subject: SUSE-SU-2026:4616-1: important: Security update for libsoup Message-ID: <179180836283.16296.9718501603726157039@81803ed3a673> # Security update for libsoup Announcement ID: SUSE-SU-2026:4616-1 Release Date: 2026-10-12T07:21:29Z Rating: important References: * bsc#1271448 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-12548 * CVE-2026-15713 * CVE-2026-2708 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4616 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4616 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4616 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4616 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4616 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4616 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4616 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4616 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4616 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (x86_64) * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-32bit-3.0.4-150400.3.55.1 * libsoup-3_0-0-32bit-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-64bit-3.0.4-150400.3.55.1 * libsoup-3_0-0-64bit-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:33:12 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:33:12 -0000 Subject: SUSE-SU-2026:4615-1: important: Security update for expat Message-ID: <179180839211.16296.17615271700289017537@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4615-1 Release Date: 2026-10-12T07:20:29Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4615 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4615 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * expat-debugsource-2.8.5-21.55.1 * libexpat1-2.8.5-21.55.1 * expat-2.8.5-21.55.1 * libexpat-devel-2.8.5-21.55.1 * libexpat1-debuginfo-2.8.5-21.55.1 * expat-debuginfo-2.8.5-21.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * expat-debuginfo-32bit-2.8.5-21.55.1 * libexpat1-32bit-2.8.5-21.55.1 * libexpat1-debuginfo-32bit-2.8.5-21.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * expat-debugsource-2.8.5-21.55.1 * libexpat1-32bit-2.8.5-21.55.1 * libexpat1-2.8.5-21.55.1 * expat-2.8.5-21.55.1 * libexpat-devel-2.8.5-21.55.1 * libexpat1-debuginfo-2.8.5-21.55.1 * expat-debuginfo-32bit-2.8.5-21.55.1 * expat-debuginfo-2.8.5-21.55.1 * libexpat1-debuginfo-32bit-2.8.5-21.55.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:33:20 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 12:33:20 -0000 Subject: SUSE-SU-2026:4614-1: moderate: Security update for openssh8.4 Message-ID: <179180840022.16296.15614780526777178836@81803ed3a673> # Security update for openssh8.4 Announcement ID: SUSE-SU-2026:4614-1 Release Date: 2026-10-12T07:20:10Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh8.4 fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4614 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4614 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh8.4-helpers-debuginfo-8.4p1-8.27.1 * openssh8.4-debugsource-8.4p1-8.27.1 * openssh8.4-fips-8.4p1-8.27.1 * openssh8.4-common-debuginfo-8.4p1-8.27.1 * openssh8.4-8.4p1-8.27.1 * openssh8.4-server-8.4p1-8.27.1 * openssh8.4-clients-8.4p1-8.27.1 * openssh8.4-server-debuginfo-8.4p1-8.27.1 * openssh8.4-clients-debuginfo-8.4p1-8.27.1 * openssh8.4-helpers-8.4p1-8.27.1 * openssh8.4-common-8.4p1-8.27.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh8.4-helpers-debuginfo-8.4p1-8.27.1 * openssh8.4-debugsource-8.4p1-8.27.1 * openssh8.4-fips-8.4p1-8.27.1 * openssh8.4-common-debuginfo-8.4p1-8.27.1 * openssh8.4-8.4p1-8.27.1 * openssh8.4-server-8.4p1-8.27.1 * openssh8.4-clients-8.4p1-8.27.1 * openssh8.4-server-debuginfo-8.4p1-8.27.1 * openssh8.4-clients-debuginfo-8.4p1-8.27.1 * openssh8.4-helpers-8.4p1-8.27.1 * openssh8.4-common-8.4p1-8.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 16:30:33 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4625-1: important: Security update for go1.27 Message-ID: <179182263328.30414.4022164241220320510@35d72aa18c5b> # Security update for go1.27 Announcement ID: SUSE-SU-2026:4625-1 Release Date: 2026-10-12T08:25:06Z Rating: important References: * bsc#1272545 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.27.2 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, the cover tool, the go fix command, vet, and the compress/flate, crypto/mlkem, encoding/json, encoding/json/v2, net/http, and os packages. * go#81084 encoding/json: Unmarshal leaves +/-Inf in the destination on float overflow in Go 1.27 * go#81145 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81226 runtime: netpoll: eventfd ready for something unexpected * go#81229 encoding/json: json.UnsupportedValueError returns an Invalid Value instead of a Float value * go#81233 compress/flate: Writer with a preset dictionary emits the dictionary into the output stream * go#81252 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81296 cmd/compile: internal compiler error: MoveLoop too small * go#81306 cmd/compile: go1.27.0 unified export data loses method order, breaking objectpath, crashing staticcheck * go#81324 plugin: loading multiple plugins corrupts stdlib types in Go 1.27 * go#81353 runtime: Go 1.27.0: SIGSEGV crash with generic function + pointer type parameter + embedded interface * go#81362 encoding/json: Marshal now honors MarshalText for string-kind map keys * go#81374 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81389 cmd/fix, x/tools/go/analysis/passes/modernize: errorsastype rewrites errors.As target interface that does not implement error * go#81402 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81411 net/http: concurrent response body Read and Close can deadlock with automatic draining in Go 1.27 * go#81437 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81469 runtime: ios/arm64 binaries executed outside an app bundle change working directory on startup * go#81515 net/http: readLoop reads Response.ContentLength after Body.Close returns * go#81516 net/http: Response.Body.Close returns the earlier Read error after a non-EOF Read failure * go#81522 net/http: Response.Trailer race due to response body draining * go#81580 testing: go test -v doubles ESC (0x1b) in t.Log output since Go 1.27, corrupting ANSI colors in some terminals * go#81666 cmd/compile: Embedded interfaces using tail calls cause race detector stack growth * go#81667 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81706 cmd/compile: ICE on 386 when inlining nested bit rotations (Int64Lo not lowered) * go#81816 net/http: Request.TLS is not properly populated for HTTP/2 requests * go#81818 cmd/internal/obj/ppc64: async preemption bug in BR (CTR) * go#81829 runtime: windows/amd64 stack corruption when LockOSThread wraps registry calls (new in Go 1.27) * go#81832 cmd/cover: NumStmt duplicated across split blocks, inflating statement coverage * go#81861 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81890 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4625 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4625 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4625 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4625 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4625 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4625 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4625 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4625 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4625 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4625 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4625 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:09 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:30:09 -0000 Subject: SUSE-SU-2026:4632-1: important: Security update for ghostscript Message-ID: <179183700909.4018.1533324325308953920@00920b2f2f09> # Security update for ghostscript Announcement ID: SUSE-SU-2026:4632-1 Release Date: 2026-10-12T15:27:51Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4632 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4632 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4632 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4632 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4632 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4632 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4632 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4632 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4632 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4632 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4632 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:30:27 -0000 Subject: SUSE-SU-2026:4631-1: important: Security update for libsoup Message-ID: <179183702737.4018.17897342983115657306@00920b2f2f09> # Security update for libsoup Announcement ID: SUSE-SU-2026:4631-1 Release Date: 2026-10-12T15:25:46Z Rating: important References: * bsc#1271448 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-12548 * CVE-2026-15713 * CVE-2026-2708 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4631 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4631 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4631 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4631 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (x86_64) * libsoup-devel-32bit-3.4.4-150600.3.59.1 * libsoup-3_0-0-32bit-debuginfo-3.4.4-150600.3.59.1 * libsoup-3_0-0-32bit-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-devel-64bit-3.4.4-150600.3.59.1 * libsoup-3_0-0-64bit-debuginfo-3.4.4-150600.3.59.1 * libsoup-3_0-0-64bit-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * Basesystem Module 15-SP7 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup-lang-3.4.4-150600.3.59.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:4630-1: important: Security update for python310 Message-ID: <179183704255.4018.16759616950873498036@00920b2f2f09> # Security update for python310 Announcement ID: SUSE-SU-2026:4630-1 Release Date: 2026-10-12T15:25:10Z Rating: important References: * bsc#1264962 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-7210 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves eight vulnerabilities can now be installed. ## Description: This update for python310 fixes the following issues: * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python310: * Update to 3.10.22 (final release, upstream EOS) * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049.(bsc#1280459, CVE-2026-82049) * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * gh-149018: Improved protection against XML hash-flooding attacks in xml.parsers.expat and xml.etree.ElementTree when Python is compiled with libExpat 2.8.0 or later. (bsc#1264962, CVE-2026-7210) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4630 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4630 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4630 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4630 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4630 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * python310-idle-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-doc-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-testsuite-3.10.22-150400.4.129.1 * python310-testsuite-debuginfo-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-doc-devhelp-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (x86_64) * libpython3_10-1_0-32bit-3.10.22-150400.4.129.1 * python310-32bit-3.10.22-150400.4.129.1 * python310-32bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-32bit-debuginfo-3.10.22-150400.4.129.1 * libpython3_10-1_0-32bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-32bit-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (aarch64_ilp32) * python310-64bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-64bit-3.10.22-150400.4.129.1 * libpython3_10-1_0-64bit-debuginfo-3.10.22-150400.4.129.1 * python310-64bit-3.10.22-150400.4.129.1 * libpython3_10-1_0-64bit-3.10.22-150400.4.129.1 * python310-base-64bit-debuginfo-3.10.22-150400.4.129.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:05 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:31:05 -0000 Subject: SUSE-SU-2026:4629-1: important: Security update for go1.26 Message-ID: <179183706580.4018.8382901551916517525@00920b2f2f09> # Security update for go1.26 Announcement ID: SUSE-SU-2026:4629-1 Release Date: 2026-10-12T15:15:28Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284771 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78667 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 13 vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.26.9 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, vet, and the crypto/mlkem, net/http, and os packages. * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4629 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4629 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4629 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4629 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4629 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4629 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4629 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4629 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4629 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4629 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4629 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:40 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:31:40 -0000 Subject: SUSE-SU-2026:4628-1: important: Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid Message-ID: <179183710016.4018.10668300819884009308@00920b2f2f09> # Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid Announcement ID: SUSE-SU-2026:4628-1 Release Date: 2026-10-12T14:58:55Z Rating: important References: * bsc#1267271 * bsc#1267273 * bsc#1267276 * bsc#1276980 * bsc#1276990 * bsc#1278267 * bsc#1278269 * bsc#1278272 * bsc#1278462 * bsc#1278477 * bsc#1278505 * bsc#1278742 * bsc#1278743 * bsc#1278751 * bsc#1278763 * bsc#1279072 * bsc#1279080 * bsc#1279137 * bsc#1279243 * bsc#1279245 * bsc#1279252 * bsc#1279263 * bsc#1279386 * bsc#1280175 Cross-References: * CVE-2026-44740 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-78662 * CVE-2026-84303 * CVE-2026-84304 * CVE-2026-84445 CVSS scores: * CVE-2026-44740 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-44740 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-44740 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves nine vulnerabilities and has 15 security fixes can now be installed. ## Description: This update for terraform-provider-aws, terraform-provider-azurerm, terraform- provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider- null, terraform-provider-random, terraform-provider-tls fixes the following issues: Security issues fixed: * CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption (bsc#1267271 bsc#1267273 bsc#1267276). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278462 bsc#1278477 bsc#1278505). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276980). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276990). * CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278269 bsc#1279243 bsc#1279245 bsc#1279252 bsc#1279263 bsc#1279386). * CVE-2026-84304: github.com/grpc/grpc-go: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1278272 bsc#1279072 bsc#1279080 bsc#1279137). * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278742 bsc#1278743 bsc#1278751 bsc#1278763). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1278267). Non security issue fixed: * terraform-provider-{aws,external,google,random,tls}: aarch64 build installs provider binary under linux_amd64 instead of linux_arm64, breaking terraform init (bsc#1280175). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4628 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4628 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * terraform-provider-local-2.0.0-150200.6.30.2 * terraform-provider-null-3.0.0-150200.6.32.2 * terraform-provider-external-2.0.0-150200.6.23.2 * terraform-provider-helm-2.9.0-150200.6.34.2 * terraform-provider-google-3.43.0-150200.6.23.2 * terraform-provider-kubernetes-1.13.2-150200.6.23.2 * terraform-provider-azurerm-2.32.0-150200.6.23.2 * terraform-provider-aws-3.11.0-150200.6.29.2 * terraform-provider-tls-3.0.0-150200.5.26.2 * terraform-provider-random-3.0.0-150200.6.26.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * terraform-provider-local-2.0.0-150200.6.30.2 * terraform-provider-null-3.0.0-150200.6.32.2 * terraform-provider-external-2.0.0-150200.6.23.2 * terraform-provider-helm-2.9.0-150200.6.34.2 * terraform-provider-google-3.43.0-150200.6.23.2 * terraform-provider-kubernetes-1.13.2-150200.6.23.2 * terraform-provider-azurerm-2.32.0-150200.6.23.2 * terraform-provider-aws-3.11.0-150200.6.29.2 * terraform-provider-tls-3.0.0-150200.5.26.2 * terraform-provider-random-3.0.0-150200.6.26.2 ## References: * https://www.suse.com/security/cve/CVE-2026-44740.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://www.suse.com/security/cve/CVE-2026-84445.html * https://bugzilla.suse.com/show_bug.cgi?id=1267271 * https://bugzilla.suse.com/show_bug.cgi?id=1267273 * https://bugzilla.suse.com/show_bug.cgi?id=1267276 * https://bugzilla.suse.com/show_bug.cgi?id=1276980 * https://bugzilla.suse.com/show_bug.cgi?id=1276990 * https://bugzilla.suse.com/show_bug.cgi?id=1278267 * https://bugzilla.suse.com/show_bug.cgi?id=1278269 * https://bugzilla.suse.com/show_bug.cgi?id=1278272 * https://bugzilla.suse.com/show_bug.cgi?id=1278462 * https://bugzilla.suse.com/show_bug.cgi?id=1278477 * https://bugzilla.suse.com/show_bug.cgi?id=1278505 * https://bugzilla.suse.com/show_bug.cgi?id=1278742 * https://bugzilla.suse.com/show_bug.cgi?id=1278743 * https://bugzilla.suse.com/show_bug.cgi?id=1278751 * https://bugzilla.suse.com/show_bug.cgi?id=1278763 * https://bugzilla.suse.com/show_bug.cgi?id=1279072 * https://bugzilla.suse.com/show_bug.cgi?id=1279080 * https://bugzilla.suse.com/show_bug.cgi?id=1279137 * https://bugzilla.suse.com/show_bug.cgi?id=1279243 * https://bugzilla.suse.com/show_bug.cgi?id=1279245 * https://bugzilla.suse.com/show_bug.cgi?id=1279252 * https://bugzilla.suse.com/show_bug.cgi?id=1279263 * https://bugzilla.suse.com/show_bug.cgi?id=1279386 * https://bugzilla.suse.com/show_bug.cgi?id=1280175 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:48 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:31:48 -0000 Subject: SUSE-SU-2026:4627-1: important: Security update for MozillaThunderbird Message-ID: <179183710841.4018.6947133948489895437@00920b2f2f09> # Security update for MozillaThunderbird Announcement ID: SUSE-SU-2026:4627-1 Release Date: 2026-10-12T14:57:42Z Rating: important References: * bsc#1280371 * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-103500 * CVE-2026-92005 * CVE-2026-92006 * CVE-2026-92007 * CVE-2026-92008 * CVE-2026-92009 * CVE-2026-92010 * CVE-2026-92011 * CVE-2026-92012 * CVE-2026-92013 * CVE-2026-92015 * CVE-2026-92016 * CVE-2026-92017 * CVE-2026-92018 * CVE-2026-92019 * CVE-2026-92020 * CVE-2026-92022 * CVE-2026-92023 * CVE-2026-92024 * CVE-2026-92025 * CVE-2026-92026 * CVE-2026-92027 * CVE-2026-92028 * CVE-2026-92029 * CVE-2026-92030 * CVE-2026-92031 * CVE-2026-92032 * CVE-2026-92035 * CVE-2026-92038 * CVE-2026-92039 * CVE-2026-92041 * CVE-2026-92042 * CVE-2026-92043 * CVE-2026-92044 * CVE-2026-92045 * CVE-2026-92046 * CVE-2026-92047 * CVE-2026-92048 * CVE-2026-92049 * CVE-2026-92052 * CVE-2026-92053 * CVE-2026-92054 * CVE-2026-92055 * CVE-2026-92056 * CVE-2026-92057 * CVE-2026-92058 * CVE-2026-92059 * CVE-2026-92060 * CVE-2026-92062 * CVE-2026-92064 * CVE-2026-92065 * CVE-2026-92067 * CVE-2026-92068 * CVE-2026-92069 * CVE-2026-92070 * CVE-2026-92071 * CVE-2026-92072 * CVE-2026-92073 * CVE-2026-92074 * CVE-2026-92075 * CVE-2026-92076 * CVE-2026-92077 * CVE-2026-92078 * CVE-2026-92079 * CVE-2026-92238 * CVE-2026-92239 * CVE-2026-92240 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92005 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92007 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92008 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92009 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92010 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92011 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92012 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92013 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92015 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92016 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92017 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92018 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92019 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-92020 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92022 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92023 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92025 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92026 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92027 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92028 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92029 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92030 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-92031 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-92032 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92035 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92038 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92039 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-92041 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92042 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92043 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92044 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92045 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92046 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92047 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92048 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92049 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92052 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92053 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92054 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92055 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92056 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92057 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92058 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92059 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92060 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92062 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92064 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92065 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92067 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92068 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-92069 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-92070 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-92071 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92072 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92073 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92074 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92075 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92076 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92077 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-92078 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-92079 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92238 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92239 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-92240 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 129 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929): * CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. * CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92015: Privilege escalation in the WebExtensions component. * CVE-2026-92016: Use-after-free in the Disability Access APIs component. * CVE-2026-92017: Privilege escalation in the DOM: Service Workers component. * CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component. * CVE-2026-92019: Mitigation bypass in the Remote Settings Client component. * CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-92022: Use-after-free in the DOM: HTML Parser component. * CVE-2026-92023: Use-after-free in the XML component. * CVE-2026-92024: Use-after-free in the SVG component. * CVE-2026-92025: Use-after-free in the DOM: Navigation component. * CVE-2026-92026: Use-after-free in the Networking component. * CVE-2026-92027: Use-after-free in the DOM: Streams component. * CVE-2026-92028: Use-after-free in the DOM: Core & HTML component. * CVE-2026-92029: Use-after-free in the SVG component. * CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. * CVE-2026-92031: Information disclosure in the Graphics: ImageLib component. * CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component. * CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component. * CVE-2026-92038: Mitigation bypass in the Remote Settings Client component. * CVE-2026-92039: Mitigation bypass in the DOM: Notifications component. * CVE-2026-92041: Mitigation bypass in the DOM: Networking component. * CVE-2026-92042: Race condition in the DOM: Content Processes component. * CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-92044: Information disclosure in the Networking: HTTP component. * CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component. * CVE-2026-92046: Use-after-free in the Graphics component. * CVE-2026-92047: Privilege escalation in the Crash Reporting component. * CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92049: Use-after-free in the Widget: Win32 component. * CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. * CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component. * CVE-2026-92054: Privilege escalation in the Memory component. * CVE-2026-92055: Privilege escalation in the DevTools component. * CVE-2026-92056: Use-after-free in the Graphics: Text component. * CVE-2026-92057: Mitigation bypass in the Enterprise Policies component. * CVE-2026-92058: Use-after-free in the Graphics component. * CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-92060: Use-after-free in the Internationalization component. * CVE-2026-92062: Privilege escalation in the Session Restore component. * CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92067: Use-after-free in the Widget: Gtk component. * CVE-2026-92068: Site isolation issue in the Reader Mode component. * CVE-2026-92069: Spoofing issue in the DOM: Navigation component. * CVE-2026-92070: Information disclosure in the Networking component. * CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component. * CVE-2026-92073: Privilege escalation in the Enterprise Policies component. * CVE-2026-92074: Mitigation bypass in the Popup Blocker component. * CVE-2026-92075: Mitigation bypass in the Networking component. * CVE-2026-92076: Incorrect boundary conditions in the Networking component. * CVE-2026-92077: Denial-of-service in the SVG component. * CVE-2026-92078: Denial-of-service in the Security component. * CVE-2026-92079: Mitigation bypass in the Widget: Win32 component. * CVE-2026-92238: Ambiguous parsing of mail headers. * CVE-2026-92239: Buffer overrun in IMAP. * CVE-2026-92240: Out-of-bounds read in IMAP response parser. * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-103500: Heap buffer overflow opening large email. Changes for MozillaThunderbird: * changed: RNP command-line utilities are no longer included with Thunderbird (bmo#2068130) * changed: Thundermail built-in add-on updated to v2.0.16 (bmo#2071989) * fixed: Ctrl+Shift+K could fail to open the Quick Filter UI (bmo#2062942) * fixed: Nested S/MIME signed parts could fail to render (bmo#2062971) * fixed: Thunderbird could hang when waiting for IMAP server greeting during account setup (bmo#2028760) * fixed: Gmail OAuth2 authentication could intermittently fail on Windows (bmo#2063816) * fixed: `AppUpdatePin` policy did not prevent Thunderbird from updating beyond pinned version (bmo#1910603) * fixed: "What's New?" linked to Release channel notes instead of ESR release notes (bmo#2073813) * fixed: Detached attachment links were truncated when folder path contained `&` (bmo#2060451) * fixed: Save All, Detach All, and Delete All failed after deleting one attachment (bmo#2057025) * fixed: Blank 1970-dated messages could appear from incomplete message file copies (bmo#209501) * fixed: Forwarded messages could display incorrect encoding (bmo#2059963) * fixed: Manual Get Messages failed after startup until toggling offline mode (bmo#2057431) * fixed: Thunderbird could crash on shutdown while waiting for OAuth2 password entry (bmo#1524247) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4627 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4627 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4627 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-103500.html * https://www.suse.com/security/cve/CVE-2026-92005.html * https://www.suse.com/security/cve/CVE-2026-92006.html * https://www.suse.com/security/cve/CVE-2026-92007.html * https://www.suse.com/security/cve/CVE-2026-92008.html * https://www.suse.com/security/cve/CVE-2026-92009.html * https://www.suse.com/security/cve/CVE-2026-92010.html * https://www.suse.com/security/cve/CVE-2026-92011.html * https://www.suse.com/security/cve/CVE-2026-92012.html * https://www.suse.com/security/cve/CVE-2026-92013.html * https://www.suse.com/security/cve/CVE-2026-92015.html * https://www.suse.com/security/cve/CVE-2026-92016.html * https://www.suse.com/security/cve/CVE-2026-92017.html * https://www.suse.com/security/cve/CVE-2026-92018.html * https://www.suse.com/security/cve/CVE-2026-92019.html * https://www.suse.com/security/cve/CVE-2026-92020.html * https://www.suse.com/security/cve/CVE-2026-92022.html * https://www.suse.com/security/cve/CVE-2026-92023.html * https://www.suse.com/security/cve/CVE-2026-92024.html * https://www.suse.com/security/cve/CVE-2026-92025.html * https://www.suse.com/security/cve/CVE-2026-92026.html * https://www.suse.com/security/cve/CVE-2026-92027.html * https://www.suse.com/security/cve/CVE-2026-92028.html * https://www.suse.com/security/cve/CVE-2026-92029.html * https://www.suse.com/security/cve/CVE-2026-92030.html * https://www.suse.com/security/cve/CVE-2026-92031.html * https://www.suse.com/security/cve/CVE-2026-92032.html * https://www.suse.com/security/cve/CVE-2026-92035.html * https://www.suse.com/security/cve/CVE-2026-92038.html * https://www.suse.com/security/cve/CVE-2026-92039.html * https://www.suse.com/security/cve/CVE-2026-92041.html * https://www.suse.com/security/cve/CVE-2026-92042.html * https://www.suse.com/security/cve/CVE-2026-92043.html * https://www.suse.com/security/cve/CVE-2026-92044.html * https://www.suse.com/security/cve/CVE-2026-92045.html * https://www.suse.com/security/cve/CVE-2026-92046.html * https://www.suse.com/security/cve/CVE-2026-92047.html * https://www.suse.com/security/cve/CVE-2026-92048.html * https://www.suse.com/security/cve/CVE-2026-92049.html * https://www.suse.com/security/cve/CVE-2026-92052.html * https://www.suse.com/security/cve/CVE-2026-92053.html * https://www.suse.com/security/cve/CVE-2026-92054.html * https://www.suse.com/security/cve/CVE-2026-92055.html * https://www.suse.com/security/cve/CVE-2026-92056.html * https://www.suse.com/security/cve/CVE-2026-92057.html * https://www.suse.com/security/cve/CVE-2026-92058.html * https://www.suse.com/security/cve/CVE-2026-92059.html * https://www.suse.com/security/cve/CVE-2026-92060.html * https://www.suse.com/security/cve/CVE-2026-92062.html * https://www.suse.com/security/cve/CVE-2026-92064.html * https://www.suse.com/security/cve/CVE-2026-92065.html * https://www.suse.com/security/cve/CVE-2026-92067.html * https://www.suse.com/security/cve/CVE-2026-92068.html * https://www.suse.com/security/cve/CVE-2026-92069.html * https://www.suse.com/security/cve/CVE-2026-92070.html * https://www.suse.com/security/cve/CVE-2026-92071.html * https://www.suse.com/security/cve/CVE-2026-92072.html * https://www.suse.com/security/cve/CVE-2026-92073.html * https://www.suse.com/security/cve/CVE-2026-92074.html * https://www.suse.com/security/cve/CVE-2026-92075.html * https://www.suse.com/security/cve/CVE-2026-92076.html * https://www.suse.com/security/cve/CVE-2026-92077.html * https://www.suse.com/security/cve/CVE-2026-92078.html * https://www.suse.com/security/cve/CVE-2026-92079.html * https://www.suse.com/security/cve/CVE-2026-92238.html * https://www.suse.com/security/cve/CVE-2026-92239.html * https://www.suse.com/security/cve/CVE-2026-92240.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1280371 * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 12 Oct 2026 20:31:59 -0000 Subject: SUSE-SU-2026:4626-1: moderate: Security update for python-Django Message-ID: <179183711916.4018.13677932942026506378@00920b2f2f09> # Security update for python-Django Announcement ID: SUSE-SU-2026:4626-1 Release Date: 2026-10-12T14:57:16Z Rating: moderate References: * bsc#1284471 * bsc#1284472 * bsc#1284476 * bsc#1284481 Cross-References: * CVE-2026-77050 * CVE-2026-84429 * CVE-2026-87890 * CVE-2026-87975 CVSS scores: * CVE-2026-77050 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77050 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77050 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77050 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84429 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84429 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84429 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-87890 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-87890 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-87890 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-87975 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87975 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-87975 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for python-Django fixes the following issues: * CVE-2026-77050: potential denial-of-service in `get_supported_language_variant()` when processing many distinct, very long language codes (bsc#1284481). * CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter (bsc#1284476). * CVE-2026-87890: An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply `bytes` values to cause the Django process to make network requests via a crafted VRT document (bsc#1284472). * CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset, without any permission on the targeted object, marking an out-of-queryset object for deletion (bsc#1284471). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4626 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4626 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-Django-4.2.11-150600.3.68.1 * SUSE Package Hub 15 15-SP7 (noarch) * python311-Django-4.2.11-150600.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77050.html * https://www.suse.com/security/cve/CVE-2026-84429.html * https://www.suse.com/security/cve/CVE-2026-87890.html * https://www.suse.com/security/cve/CVE-2026-87975.html * https://bugzilla.suse.com/show_bug.cgi?id=1284471 * https://bugzilla.suse.com/show_bug.cgi?id=1284472 * https://bugzilla.suse.com/show_bug.cgi?id=1284476 * https://bugzilla.suse.com/show_bug.cgi?id=1284481 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:09 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:30:09 -0000 Subject: SUSE-SU-2026:24130-1: moderate: Security update for libpng16 Message-ID: <179188020915.4437.6074598808020300233@00920b2f2f09> # Security update for libpng16 Announcement ID: SUSE-SU-2026:24130-1 Release Date: 2026-10-10T11:21:38Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed CVE-2026-46675 (medium severity): Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (Reported independently by Ze Sheng and .) * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. (Contributed by Yuki Sekiguchi.) * Prevented a double free of `png_struct` members after an allocation failure. (Contributed by Anthony Hurtado.) * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1897 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:24 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:30:24 -0000 Subject: SUSE-SU-2026:24129-1: important: Security update for gcc13 Message-ID: <179188022420.4437.10104200037175114386@00920b2f2f09> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24129-1 Release Date: 2026-10-09T18:18:08Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1896 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gcc13-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:41 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:30:41 -0000 Subject: SUSE-SU-2026:24128-1: important: Security update for unbound Message-ID: <179188024199.4437.8599906039304267494@00920b2f2f09> # Security update for unbound Announcement ID: SUSE-SU-2026:24128-1 Release Date: 2026-10-09T15:10:18Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1895 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libunbound8-debuginfo-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:48 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:30:48 -0000 Subject: SUSE-SU-2026:24127-1: important: Security update for virtiofsd Message-ID: <179188024894.4437.9930036167541611171@00920b2f2f09> # Security update for virtiofsd Announcement ID: SUSE-SU-2026:24127-1 Release Date: 2026-10-09T12:45:44Z Rating: important References: * bsc#1257912 * bsc#1283239 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for virtiofsd fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * Add command line options for UID/GID translation (bsc#1283239) * PassthroughFs: Add IdMap structures (bsc#1283239) * Add host/guest UID/GID translation code (bsc#1283239) * Custom UID/GID mapping for Attr (bsc#1283239) * Add UID/GID mapping functions to PassthroughFs (bsc#1283239) * Use explicit UID/GID types (bsc#1283239) * Introduce explicit UID/GID types (bsc#1283239) * Use SetattrIn without conversion (bsc#1283239) * Use fuse::Attr in FileSystem interfaces (bsc#1283239) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1892 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * virtiofsd-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-debugsource-1.12.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257912 * https://bugzilla.suse.com/show_bug.cgi?id=1283239 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:07 -0000 Subject: SUSE-SU-2026:24126-1: important: Security update for python-PyJWT Message-ID: <179188026762.4437.9042491183420950233@00920b2f2f09> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24126-1 Release Date: 2026-10-09T12:17:21Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1887 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-PyJWT-2.12.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:15 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:15 -0000 Subject: SUSE-SU-2026:24125-1: important: Security update for python-urllib3 Message-ID: <179188027572.4437.13126720822982184297@00920b2f2f09> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:24125-1 Release Date: 2026-10-09T11:45:30Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1884 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-urllib3-2.5.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:19 -0000 Subject: SUSE-RU-2026:24124-1: moderate: Recommended update for jeos-firstboot Message-ID: <179188027954.4437.7797324000769313753@00920b2f2f09> # Recommended update for jeos-firstboot Announcement ID: SUSE-RU-2026:24124-1 Release Date: 2026-10-09T06:30:57Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for jeos-firstboot fixes the following issues: Changes in jeos-firstboot: * Update to version 1.5.14: * Refine the JEOS_USER_GROUPS option and use it for the builtin default * Read jeos-firstboot.conf in jeos-config as well * Add configuration variables on groups to add users to * Move welcome_screen_with_console_switch stub to end of file * Fix welcome_screen_with_console_switch undefined in jeos-config * Update to version 1.5.9: * Use snapper create on transactional systems again ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1879 ## Package List: * SUSE Linux Micro 6.2 (noarch) * jeos-firstboot-1.5.14-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:23 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:23 -0000 Subject: SUSE-RU-2026:24123-1: moderate: Recommended update for timezone Message-ID: <179188028335.4437.5706953070054545175@00920b2f2f09> # Recommended update for timezone Announcement ID: SUSE-RU-2026:24123-1 Release Date: 2026-10-08T15:17:22Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for timezone fixes the following issues: Changes in timezone: * Update to 2026e: * Manitoba moves to permanent -05 on 2026-10-31 * Update to 2026d: * Canada?s Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1875 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * timezone-2026e-160000.1.1 * timezone-debuginfo-2026e-160000.1.1 * timezone-debugsource-2026e-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:31 -0000 Subject: SUSE-SU-2026:24122-1: important: Security update for python-anyio Message-ID: <179188029117.4437.1733522042333331926@00920b2f2f09> # Security update for python-anyio Announcement ID: SUSE-SU-2026:24122-1 Release Date: 2026-10-08T10:52:11Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1873 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-anyio-4.8.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:40 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:40 -0000 Subject: SUSE-SU-2026:24121-1: important: Security update for python-tornado6 Message-ID: <179188030078.4437.4376730190729372713@00920b2f2f09> # Security update for python-tornado6 Announcement ID: SUSE-SU-2026:24121-1 Release Date: 2026-10-08T10:52:11Z Rating: important References: * bsc#1261922 * bsc#1277725 * bsc#1281439 * bsc#1281440 Cross-References: * CVE-2026-82397 * CVE-2026-91990 * CVE-2026-91991 CVSS scores: * CVE-2026-82397 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82397 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91991 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2026-91991 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91991 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for python-tornado6 fixes the following issues: * CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). * CVE-2026-91990: splitting of multipart data before validation of the `max_parts` limit allows for resource exhaustion and a denial of service (bsc#1281439). * CVE-2026-91991: incomplete fix for cookie attribute injection allows for cookie validation bypass via semicolon- delimited data in capitalized parameters (bsc#1281440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1872 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 * python313-tornado6-debuginfo-6.5-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82397.html * https://www.suse.com/security/cve/CVE-2026-91990.html * https://www.suse.com/security/cve/CVE-2026-91991.html * https://bugzilla.suse.com/show_bug.cgi?id=1261922 * https://bugzilla.suse.com/show_bug.cgi?id=1277725 * https://bugzilla.suse.com/show_bug.cgi?id=1281439 * https://bugzilla.suse.com/show_bug.cgi?id=1281440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:48 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:31:48 -0000 Subject: SUSE-SU-2026:24120-1: important: Security update for helm Message-ID: <179188030822.4437.14056761216409317908@00920b2f2f09> # Security update for helm Announcement ID: SUSE-SU-2026:24120-1 Release Date: 2026-10-08T06:16:18Z Rating: important References: * bsc#1281112 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-63209 * CVE-2026-81870 * CVE-2026-85732 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1870 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Micro 6.2 (noarch) * helm-bash-completion-4.3.0-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:02 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:32:02 -0000 Subject: SUSE-SU-2026:24119-1: moderate: Security update for libXi Message-ID: <179188032268.4437.18183566979806625864@00920b2f2f09> # Security update for libXi Announcement ID: SUSE-SU-2026:24119-1 Release Date: 2026-10-08T06:15:07Z Rating: moderate References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 Cross-References: * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: out-of-bounds read in XI2 class parser (bsc#1281608). * CVE-2026-93544: out-of-bounds read in XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: out-of-bounds read in ListInputDevices() (bsc#1281612). * CVE-2026-94281: out-of-bounds read in XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: out-of-bounds read in XI2 enter/leave/focus cookie conversio (bsc#1281651). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1867 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libXi-debugsource-1.8.2-160000.4.1 * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:10 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:32:10 -0000 Subject: SUSE-SU-2026:24118-1: moderate: Security update for libX11 Message-ID: <179188033084.4437.13888730243389143666@00920b2f2f09> # Security update for libX11 Announcement ID: SUSE-SU-2026:24118-1 Release Date: 2026-10-08T06:13:50Z Rating: moderate References: * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1868 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * SUSE Linux Micro 6.2 (noarch) * libX11-data-1.8.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:32:16 -0000 Subject: SUSE-SU-2026:24117-1: important: Security update for librsvg Message-ID: <179188033630.4437.6165313157226685477@00920b2f2f09> # Security update for librsvg Announcement ID: SUSE-SU-2026:24117-1 Release Date: 2026-10-08T06:12:42Z Rating: important References: * bsc#1282612 Cross-References: * CVE-2026-96889 CVSS scores: * CVE-2026-96889 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96889 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96889 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: * CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: * Update to version 2.60.3: * Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. * The minimum supported Rust version (MSRV) is 1.89.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1864 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96889.html * https://bugzilla.suse.com/show_bug.cgi?id=1282612 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:24 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 08:32:24 -0000 Subject: SUSE-SU-2026:24116-1: important: Security update for gcc13 Message-ID: <179188034441.4437.6853372633493207820@00920b2f2f09> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24116-1 Release Date: 2026-10-09T21:01:41Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1896 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * gcc13-PIE-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-160000.1.1 * gcc13-c++-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debugsource-13.5.0+git10516-160000.1.1 * gcc13-c++-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:30:10 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 12:30:10 -0000 Subject: SUSE-SU-2026:4637-1: important: Security update for gcc48 Message-ID: <179189461074.10778.12692775425178669363@81803ed3a673> # Security update for gcc48 Announcement ID: SUSE-SU-2026:4637-1 Release Date: 2026-10-13T07:54:18Z Rating: important References: * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gcc48 fixes the following issue: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4637 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4637 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * gcc48-locale-4.8.5-31.32.1 * gcc48-debugsource-4.8.5-31.32.1 * gcc48-c++-4.8.5-31.32.1 * gcc48-c++-debuginfo-4.8.5-31.32.1 * gcc48-debuginfo-4.8.5-31.32.1 * cpp48-4.8.5-31.32.1 * gcc48-4.8.5-31.32.1 * libstdc++48-devel-4.8.5-31.32.1 * cpp48-debuginfo-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * gcc48-32bit-4.8.5-31.32.1 * libstdc++48-devel-32bit-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * gcc48-info-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * libasan0-4.8.5-31.32.1 * libasan0-debuginfo-4.8.5-31.32.1 * libasan0-32bit-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * gcc48-locale-4.8.5-31.32.1 * libstdc++48-devel-32bit-4.8.5-31.32.1 * gcc48-debugsource-4.8.5-31.32.1 * gcc48-c++-4.8.5-31.32.1 * libasan0-4.8.5-31.32.1 * gcc48-32bit-4.8.5-31.32.1 * gcc48-c++-debuginfo-4.8.5-31.32.1 * gcc48-debuginfo-4.8.5-31.32.1 * cpp48-4.8.5-31.32.1 * libasan0-32bit-4.8.5-31.32.1 * gcc48-4.8.5-31.32.1 * libstdc++48-devel-4.8.5-31.32.1 * cpp48-debuginfo-4.8.5-31.32.1 * libasan0-debuginfo-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * gcc48-info-4.8.5-31.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:30:45 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 12:30:45 -0000 Subject: SUSE-SU-2026:4636-1: important: Security update for xorg-x11-server Message-ID: <179189464550.10778.9767425378556838231@81803ed3a673> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4636-1 Release Date: 2026-10-13T07:43:13Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4636 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4636 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debuginfo-1.19.6-10.108.1 * xorg-x11-server-1.19.6-10.108.1 * xorg-x11-server-extra-debuginfo-1.19.6-10.108.1 * xorg-x11-server-debugsource-1.19.6-10.108.1 * xorg-x11-server-extra-1.19.6-10.108.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * xorg-x11-server-debuginfo-1.19.6-10.108.1 * xorg-x11-server-1.19.6-10.108.1 * xorg-x11-server-extra-debuginfo-1.19.6-10.108.1 * xorg-x11-server-debugsource-1.19.6-10.108.1 * xorg-x11-server-extra-1.19.6-10.108.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:31:00 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 12:31:00 -0000 Subject: SUSE-SU-2026:4635-1: important: Security update for bind Message-ID: <179189466034.10778.3164462133971401044@81803ed3a673> # Security update for bind Announcement ID: SUSE-SU-2026:4635-1 Release Date: 2026-10-13T07:42:58Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280437 * bsc#1280438 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4635 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4635 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libisccc161-9.11.22-3.77.1 * libirs161-9.11.22-3.77.1 * libisc1107-debuginfo-9.11.22-3.77.1 * liblwres161-9.11.22-3.77.1 * bind-chrootenv-9.11.22-3.77.1 * libirs161-debuginfo-9.11.22-3.77.1 * bind-debuginfo-9.11.22-3.77.1 * bind-9.11.22-3.77.1 * bind-utils-debuginfo-9.11.22-3.77.1 * libisccfg163-debuginfo-9.11.22-3.77.1 * libdns1110-debuginfo-9.11.22-3.77.1 * libisccc161-debuginfo-9.11.22-3.77.1 * bind-utils-9.11.22-3.77.1 * libdns1110-9.11.22-3.77.1 * libbind9-161-debuginfo-9.11.22-3.77.1 * libbind9-161-9.11.22-3.77.1 * bind-devel-9.11.22-3.77.1 * libisccfg163-9.11.22-3.77.1 * bind-debugsource-9.11.22-3.77.1 * liblwres161-debuginfo-9.11.22-3.77.1 * libisc1107-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * bind-doc-9.11.22-3.77.1 * python-bind-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libisc1107-32bit-9.11.22-3.77.1 * libisc1107-debuginfo-32bit-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libisccc161-9.11.22-3.77.1 * libirs161-9.11.22-3.77.1 * libisc1107-debuginfo-9.11.22-3.77.1 * liblwres161-9.11.22-3.77.1 * bind-chrootenv-9.11.22-3.77.1 * libirs161-debuginfo-9.11.22-3.77.1 * bind-debuginfo-9.11.22-3.77.1 * bind-9.11.22-3.77.1 * bind-utils-debuginfo-9.11.22-3.77.1 * libisccfg163-debuginfo-9.11.22-3.77.1 * libdns1110-debuginfo-9.11.22-3.77.1 * libisccc161-debuginfo-9.11.22-3.77.1 * bind-utils-9.11.22-3.77.1 * libdns1110-9.11.22-3.77.1 * libbind9-161-debuginfo-9.11.22-3.77.1 * libbind9-161-9.11.22-3.77.1 * bind-devel-9.11.22-3.77.1 * libisccfg163-9.11.22-3.77.1 * bind-debugsource-9.11.22-3.77.1 * libisc1107-32bit-9.11.22-3.77.1 * liblwres161-debuginfo-9.11.22-3.77.1 * libisc1107-debuginfo-32bit-9.11.22-3.77.1 * libisc1107-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * bind-doc-9.11.22-3.77.1 * python-bind-9.11.22-3.77.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:31:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 12:31:16 -0000 Subject: SUSE-SU-2026:4633-1: moderate: Security update for python Message-ID: <179189467618.10778.5285046838905075188@81803ed3a673> # Security update for python Announcement ID: SUSE-SU-2026:4633-1 Release Date: 2026-10-13T07:42:32Z Rating: moderate References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 Cross-References: * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-6879 * CVE-2026-9669 CVSS scores: * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for python fixes the following issues: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: * Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4633 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython2_7-1_0-2.7.18-33.88.1 * python-tk-debuginfo-2.7.18-33.88.1 * python-idle-2.7.18-33.88.1 * python-debugsource-2.7.18-33.88.1 * python-devel-2.7.18-33.88.1 * python-gdbm-debuginfo-2.7.18-33.88.1 * python-32bit-2.7.18-33.88.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.88.1 * python-curses-2.7.18-33.88.1 * python-demo-2.7.18-33.88.1 * python-curses-debuginfo-2.7.18-33.88.1 * python-base-debuginfo-2.7.18-33.88.1 * python-debuginfo-2.7.18-33.88.1 * python-xml-debuginfo-2.7.18-33.88.1 * python-xml-2.7.18-33.88.1 * python-base-2.7.18-33.88.1 * python-tk-2.7.18-33.88.1 * python-base-debugsource-2.7.18-33.88.1 * python-base-32bit-2.7.18-33.88.1 * python-2.7.18-33.88.1 * python-debuginfo-32bit-2.7.18-33.88.1 * python-gdbm-2.7.18-33.88.1 * python-base-debuginfo-32bit-2.7.18-33.88.1 * libpython2_7-1_0-32bit-2.7.18-33.88.1 * libpython2_7-1_0-debuginfo-2.7.18-33.88.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-doc-pdf-2.7.18-33.88.1 * python-doc-2.7.18-33.88.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 16:41:33 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 16:41:33 -0000 Subject: SUSE-SU-2026:4640-1: important: Security update for the Linux Kernel Message-ID: <179190969325.28273.2448154369255671249@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4640-1 Release Date: 2026-10-13T11:52:07Z Rating: important References: * bsc#1222538 * bsc#1250951 * bsc#1254408 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267882 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1272971 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273320 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274824 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274900 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275137 * bsc#1275142 * bsc#1275238 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275680 * bsc#1275681 * bsc#1275682 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275801 * bsc#1275802 * bsc#1275804 * bsc#1275812 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275956 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276471 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276852 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1276947 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277153 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277234 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277407 * bsc#1277410 * bsc#1277451 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277535 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277773 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277845 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278709 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279590 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280239 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280309 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280927 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283121 * bsc#1283130 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283489 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16968 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23352 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63987 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68128 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68258 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68395 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72018 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72125 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72147 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72337 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-72491 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74286 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74440 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74513 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74533 * CVE-2026-74534 * CVE-2026-74535 * CVE-2026-74536 * CVE-2026-74538 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74551 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74665 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80721 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80947 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90047 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98030 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63987 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63987 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63987 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68128 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68128 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-68128 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68395 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72337 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74286 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74534 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74535 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74535 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74665 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74665 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80721 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80947 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90047 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90047 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Real Time Module 15-SP7 An update that solves 508 vulnerabilities, contains seven features and has 20 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804). * CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). * CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). * ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: bound firmware ID by TLV length (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git- fixes). * Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git- fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix race condition during device registration (git- fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git- fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). * EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968). * EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: core: fix adapter registration race (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: s390: pci: Fix aisb calculation (bsc#1277451). * KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451). * KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451). * KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451). * KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451). * KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451). * KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451). * KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451). * KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451). * KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git- fixes). * media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852). * net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852). * net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852). * net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * nvme-tcp: fix usage of page_frag_cache (bsc#1267882). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (git-fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * USB: make to_usb_driver() use container_of_const() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mce: Add support for physical address valid bit (jsc#PED-16968). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951). * x86/tsx: Make tsx_ctrl_state static (bsc#1250951). * xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709). * xhci: fix lost bounce buffers on TDs spanning several ring segments (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4640 * SUSE Real Time Module 15-SP7 zypper in -t patch SUSE-SLE-Module-RT-15-SP7-2026-4640 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_78-rt-debuginfo-1-150700.1.3.1 * kernel-livepatch-6_4_0-150700_7_78-rt-1-150700.1.3.1 * kernel-livepatch-SLE15-SP7-RT_Update_21-debugsource-1-150700.1.3.1 * SUSE Real Time Module 15-SP7 (x86_64) * ocfs2-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * cluster-md-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-devel-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-devel-6.4.0-150700.7.78.1 * dlm-kmp-rt-6.4.0-150700.7.78.1 * kernel-syms-rt-6.4.0-150700.7.78.1 * kernel-rt-debugsource-6.4.0-150700.7.78.1 * cluster-md-kmp-rt-6.4.0-150700.7.78.1 * dlm-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * gfs2-kmp-rt-6.4.0-150700.7.78.1 * gfs2-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * ocfs2-kmp-rt-6.4.0-150700.7.78.1 * SUSE Real Time Module 15-SP7 (noarch) * kernel-source-rt-6.4.0-150700.7.78.1 * kernel-devel-rt-6.4.0-150700.7.78.1 * SUSE Real Time Module 15-SP7 (nosrc x86_64) * kernel-rt-6.4.0-150700.7.78.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63987.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68128.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68395.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72125.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72337.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74286.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74513.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74533.html * https://www.suse.com/security/cve/CVE-2026-74534.html * https://www.suse.com/security/cve/CVE-2026-74535.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74551.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74665.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80721.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80947.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90047.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1250951 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267882 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1272971 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274900 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275238 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275680 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275801 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275804 * https://bugzilla.suse.com/show_bug.cgi?id=1275812 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275956 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276471 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277407 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277451 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277535 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277773 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277845 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278709 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280239 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280927 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16968 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 16:42:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 16:42:07 -0000 Subject: SUSE-SU-2026:4639-1: important: Security update for the Linux Kernel Message-ID: <179190972764.28273.15530972337259991072@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4639-1 Release Date: 2026-10-13T11:51:50Z Rating: important References: * bsc#1273290 * bsc#1274037 * bsc#1274836 * bsc#1275535 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276007 * bsc#1276381 * bsc#1277493 * bsc#1277766 * bsc#1277908 * bsc#1278191 * bsc#1278253 * bsc#1278310 * bsc#1278315 * bsc#1279619 * bsc#1280786 * bsc#1281397 * bsc#1281546 * jsc#PED-16892 * jsc#PED-17000 Cross-References: * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-72083 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72348 * CVE-2026-72398 * CVE-2026-74388 * CVE-2026-74556 * CVE-2026-74588 * CVE-2026-74597 * CVE-2026-74630 * CVE-2026-74641 * CVE-2026-74743 * CVE-2026-74752 * CVE-2026-80785 * CVE-2026-89479 * CVE-2026-90088 * CVE-2026-90104 CVSS scores: * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74641 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves 20 vulnerabilities and contains two features can now be installed. ## Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). * CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). The following non security issue was fixed: * Disable BATMAN in supported.conf * Disable CONFIG_BATMAN_ADV (jsc#PED-16892) * Disable CONFIG_CAN (jsc#PED-17000) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (nosrc x86_64) * kernel-xen-3.0.101-108.223.1 * kernel-ec2-3.0.101-108.223.1 * kernel-default-3.0.101-108.223.1 * kernel-trace-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * kernel-xen-base-3.0.101-108.223.1 * kernel-default-debugsource-3.0.101-108.223.1 * kernel-xen-devel-debuginfo-3.0.101-108.223.1 * kernel-xen-debuginfo-3.0.101-108.223.1 * kernel-default-devel-3.0.101-108.223.1 * kernel-trace-devel-debuginfo-3.0.101-108.223.1 * kernel-default-debuginfo-3.0.101-108.223.1 * kernel-syms-3.0.101-108.223.1 * kernel-trace-debugsource-3.0.101-108.223.1 * kernel-ec2-devel-3.0.101-108.223.1 * kernel-trace-base-3.0.101-108.223.1 * kernel-default-base-3.0.101-108.223.1 * kernel-default-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-debugsource-3.0.101-108.223.1 * kernel-ec2-debuginfo-3.0.101-108.223.1 * kernel-trace-debuginfo-3.0.101-108.223.1 * kernel-source-3.0.101-108.223.1 * kernel-xen-debugsource-3.0.101-108.223.1 * kernel-trace-devel-3.0.101-108.223.1 * kernel-ec2-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-base-3.0.101-108.223.1 * kernel-xen-devel-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch nosrc) * kernel-docs-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) * kernel-xen-3.0.101-108.223.1 * kernel-ec2-3.0.101-108.223.1 * kernel-default-3.0.101-108.223.1 * kernel-trace-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * kernel-xen-base-3.0.101-108.223.1 * kernel-default-debugsource-3.0.101-108.223.1 * kernel-xen-devel-debuginfo-3.0.101-108.223.1 * kernel-xen-debuginfo-3.0.101-108.223.1 * kernel-default-devel-3.0.101-108.223.1 * kernel-trace-devel-debuginfo-3.0.101-108.223.1 * kernel-default-debuginfo-3.0.101-108.223.1 * kernel-syms-3.0.101-108.223.1 * kernel-trace-debugsource-3.0.101-108.223.1 * kernel-ec2-devel-3.0.101-108.223.1 * kernel-trace-base-3.0.101-108.223.1 * kernel-default-base-3.0.101-108.223.1 * kernel-default-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-debugsource-3.0.101-108.223.1 * kernel-ec2-debuginfo-3.0.101-108.223.1 * kernel-trace-debuginfo-3.0.101-108.223.1 * kernel-source-3.0.101-108.223.1 * kernel-xen-debugsource-3.0.101-108.223.1 * kernel-trace-devel-3.0.101-108.223.1 * kernel-ec2-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-base-3.0.101-108.223.1 * kernel-xen-devel-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (noarch nosrc) * kernel-docs-3.0.101-108.223.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74641.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278310 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-17000 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 16:42:14 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 16:42:14 -0000 Subject: SUSE-RU-2026:4638-1: important: Recommended update for ca-certificates-mozilla Message-ID: <179190973433.28273.10328864639054958790@35d72aa18c5b> # Recommended update for ca-certificates-mozilla Announcement ID: SUSE-RU-2026:4638-1 Release Date: 2026-10-13T08:57:59Z Rating: important References: * bsc#1258002 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: * Updated to 2.84 state (bsc#1258002): * Removed: * Baltimore CyberTrust Root * CommScope Public Trust ECC Root-01 * CommScope Public Trust ECC Root-02 * CommScope Public Trust RSA Root-01 * CommScope Public Trust RSA Root-02 * DigiNotar Root CA * Added: * e-Szigno TLS Root CA 2023 * OISTE Client Root ECC G1 * OISTE Client Root RSA G1 * OISTE Server Root ECC G1 * OISTE Server Root RSA G1 * SwissSign RSA SMIME Root CA 2022 - 1 * SwissSign RSA TLS Root CA 2022 - 1 * TrustAsia SMIME ECC Root CA * TrustAsia SMIME RSA Root CA * TrustAsia TLS ECC Root CA * TrustAsia TLS RSA Root CA ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4638 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4638 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * ca-certificates-mozilla-2.90-12.57.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * ca-certificates-mozilla-2.90-12.57.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1258002 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:25 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:30:25 -0000 Subject: SUSE-SU-2026:24140-1: moderate: Security update for openssh Message-ID: <179192342524.5627.16565199959373244142@d580628b9e86> # Security update for openssh Announcement ID: SUSE-SU-2026:24140-1 Release Date: 2026-10-12T08:19:25Z Rating: moderate References: * bsc#1259462 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-929 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * openssh-clients-9.6p1-159998.1.1 * openssh-9.6p1-159998.1.1 * openssh-common-9.6p1-159998.1.1 * openssh-server-debuginfo-9.6p1-159998.1.1 * openssh-server-9.6p1-159998.1.1 * openssh-debuginfo-9.6p1-159998.1.1 * openssh-common-debuginfo-9.6p1-159998.1.1 * openssh-clients-debuginfo-9.6p1-159998.1.1 * openssh-server-config-rootlogin-9.6p1-159998.1.1 * openssh-fips-9.6p1-159998.1.1 * openssh-debugsource-9.6p1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:30:35 -0000 Subject: SUSE-SU-2026:24139-1: moderate: Security update for python-oauthlib Message-ID: <179192343542.5627.3620459879951707153@d580628b9e86> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24139-1 Release Date: 2026-10-12T08:19:25Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-928 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python311-oauthlib-3.2.2-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:24138-1: moderate: Security update for python311 Message-ID: <179192344237.5627.206654935681874194@d580628b9e86> # Security update for python311 Announcement ID: SUSE-SU-2026:24138-1 Release Date: 2026-10-10T17:03:03Z Rating: moderate References: * bsc#1276227 * bsc#1277111 Cross-References: * CVE-2026-15310 * CVE-2026-19672 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-924 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python311-curses-debuginfo-3.11.16-159998.1.1 * python311-base-3.11.16-159998.1.1 * python311-debuginfo-3.11.16-159998.1.1 * python311-curses-3.11.16-159998.1.1 * python311-core-debugsource-3.11.16-159998.1.1 * python311-debugsource-3.11.16-159998.1.1 * libpython3_11-1_0-debuginfo-3.11.16-159998.1.1 * python311-base-debuginfo-3.11.16-159998.1.1 * python311-3.11.16-159998.1.1 * libpython3_11-1_0-3.11.16-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:30:55 -0000 Subject: SUSE-SU-2026:24137-1: important: Security update for busybox Message-ID: <179192345519.5627.16799127470082584488@d580628b9e86> # Security update for busybox Announcement ID: SUSE-SU-2026:24137-1 Release Date: 2026-10-10T16:38:09Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-926 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * busybox-1.36.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:00 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:00 -0000 Subject: SUSE-SU-2026:24136-1: important: Security update for containerd Message-ID: <179192346073.5627.12099040618150623695@d580628b9e86> # Security update for containerd Announcement ID: SUSE-SU-2026:24136-1 Release Date: 2026-10-10T16:35:20Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-34986 * CVE-2026-35469 * CVE-2026-39821 * CVE-2026-53488 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35469 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-35469 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35469 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35469 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-925 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * containerd-1.7.29-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-34986.html * https://www.suse.com/security/cve/CVE-2026-35469.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:16 -0000 Subject: SUSE-SU-2026:24135-1: important: Security update for unbound Message-ID: <179192347617.5627.6515859326384813463@d580628b9e86> # Security update for unbound Announcement ID: SUSE-SU-2026:24135-1 Release Date: 2026-10-09T11:53:45Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-921 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libunbound8-debuginfo-1.26.1-159998.1.1 * unbound-anchor-1.26.1-159998.1.1 * unbound-anchor-debuginfo-1.26.1-159998.1.1 * libunbound8-1.26.1-159998.1.1 * unbound-debugsource-1.26.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:31 -0000 Subject: SUSE-SU-2026:24134-1: important: Security update for python-PyJWT Message-ID: <179192349126.5627.7432355676175162548@d580628b9e86> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24134-1 Release Date: 2026-10-09T11:52:25Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-922 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python311-PyJWT-2.9.0-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:42 -0000 Subject: SUSE-SU-2026:24133-1: important: Security update for openssl-3 Message-ID: <179192350293.5627.5267813311466320747@d580628b9e86> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24133-1 Release Date: 2026-10-09T11:51:43Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-923 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.1.4-159998.1.1 * libopenssl-3-fips-provider-3.1.4-159998.1.1 * openssl-3-debuginfo-3.1.4-159998.1.1 * libopenssl-3-devel-3.1.4-159998.1.1 * openssl-3-3.1.4-159998.1.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-159998.1.1 * openssl-3-debugsource-3.1.4-159998.1.1 * libopenssl3-3.1.4-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:48 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:48 -0000 Subject: SUSE-SU-2026:24132-1: important: Security update for wpa_supplicant Message-ID: <179192350820.5627.6570476038401498499@d580628b9e86> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24132-1 Release Date: 2026-10-09T07:36:36Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). * Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-919 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * wpa_supplicant-2.10-159998.1.1 * wpa_supplicant-debuginfo-2.10-159998.1.1 * wpa_supplicant-debugsource-2.10-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:53 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:53 -0000 Subject: SUSE-SU-2026:24131-1: important: Security update for google-osconfig-agent Message-ID: <179192351374.5627.13336350960737897763@d580628b9e86> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24131-1 Release Date: 2026-10-09T07:36:36Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-918 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * google-osconfig-agent-debuginfo-20260928.01-159998.1.1 * google-osconfig-agent-20260928.01-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:57 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:31:57 -0000 Subject: SUSE-RU-2026:4644-1: moderate: Recommended update for post-build-checks-malwarescan Message-ID: <179192351777.5627.14404749689372811970@d580628b9e86> # Recommended update for post-build-checks-malwarescan Announcement ID: SUSE-RU-2026:4644-1 Release Date: 2026-10-13T15:47:39Z Rating: moderate References: Affected Products: * openSUSE Leap 15.5 An update that can now be installed. ## Description: This update for post-build-checks-malwarescan fixes the following issues: * exclude pdfium-7681.tar.bz2 false positive. * This pdfium tarball is needed to build LibreOffice 26.8.1.1. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4644 ## Package List: * openSUSE Leap 15.5 (noarch) * post-build-checks-malwarescan-0.1-150500.20.24.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:32:03 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:32:03 -0000 Subject: SUSE-RU-2026:4643-1: moderate: Recommended update for libvirt Message-ID: <179192352312.5627.7160879420669681825@d580628b9e86> # Recommended update for libvirt Announcement ID: SUSE-RU-2026:4643-1 Release Date: 2026-10-13T13:41:22Z Rating: moderate References: * bsc#1273447 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for libvirt fixes the following issues: * qemu: Fix: SLES 15 SP6 - Live Migration of guest fails from z16 - z17 (bsc#1273447): * Support deprecated CPU features ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4643 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4643 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4643 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libvirt-daemon-driver-storage-disk-10.0.0-150600.8.21.1 * libvirt-10.0.0-150600.8.21.1 * libvirt-daemon-lock-10.0.0-150600.8.21.1 * libvirt-daemon-log-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-common-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.21.1 * libvirt-daemon-log-10.0.0-150600.8.21.1 * libvirt-daemon-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-10.0.0-150600.8.21.1 * libvirt-devel-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-150600.8.21.1 * libvirt-debugsource-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-10.0.0-150600.8.21.1 * libvirt-client-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-config-nwfilter-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-10.0.0-150600.8.21.1 * libvirt-daemon-config-network-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-10.0.0-150600.8.21.1 * libvirt-nss-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-150600.8.21.1 * libvirt-nss-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.21.1 * libvirt-libs-10.0.0-150600.8.21.1 * libvirt-libs-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-lock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.21.1 * libvirt-daemon-common-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-hooks-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-debuginfo-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-10.0.0-150600.8.21.1 * libvirt-daemon-xen-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-debuginfo-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libvirt-doc-10.0.0-150600.8.21.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libvirt-daemon-driver-storage-gluster-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-disk-10.0.0-150600.8.21.1 * libvirt-10.0.0-150600.8.21.1 * libvirt-daemon-lock-10.0.0-150600.8.21.1 * libvirt-daemon-log-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-common-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.21.1 * libvirt-daemon-log-10.0.0-150600.8.21.1 * libvirt-daemon-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-10.0.0-150600.8.21.1 * libvirt-devel-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-150600.8.21.1 * libvirt-debugsource-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-10.0.0-150600.8.21.1 * libvirt-client-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-config-nwfilter-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-10.0.0-150600.8.21.1 * libvirt-daemon-config-network-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-lxc-10.0.0-150600.8.21.1 * libvirt-daemon-driver-lxc-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-debuginfo-10.0.0-150600.8.21.1 * libvirt-nss-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-150600.8.21.1 * libvirt-nss-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-gluster-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.21.1 * libvirt-libs-10.0.0-150600.8.21.1 * libvirt-libs-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-lock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.21.1 * libvirt-daemon-common-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.21.1 * libvirt-daemon-lxc-10.0.0-150600.8.21.1 * wireshark-plugin-libvirt-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-hooks-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-debuginfo-10.0.0-150600.8.21.1 * wireshark-plugin-libvirt-10.0.0-150600.8.21.1 * openSUSE Leap 15.6 (x86_64) * libvirt-client-32bit-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-10.0.0-150600.8.21.1 * libvirt-daemon-xen-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-debuginfo-10.0.0-150600.8.21.1 * libvirt-devel-32bit-10.0.0-150600.8.21.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libvirt-devel-64bit-10.0.0-150600.8.21.1 * libvirt-client-64bit-debuginfo-10.0.0-150600.8.21.1 * openSUSE Leap 15.6 (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-150600.8.21.1 * openSUSE Leap 15.6 (noarch) * libvirt-doc-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libvirt-daemon-driver-storage-disk-10.0.0-150600.8.21.1 * libvirt-10.0.0-150600.8.21.1 * libvirt-daemon-lock-10.0.0-150600.8.21.1 * libvirt-daemon-log-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-common-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-10.0.0-150600.8.21.1 * libvirt-daemon-log-10.0.0-150600.8.21.1 * libvirt-daemon-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-10.0.0-150600.8.21.1 * libvirt-devel-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-debuginfo-10.0.0-150600.8.21.1 * libvirt-debugsource-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-10.0.0-150600.8.21.1 * libvirt-client-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-config-nwfilter-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-10.0.0-150600.8.21.1 * libvirt-daemon-config-network-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-sanlock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-10.0.0-150600.8.21.1 * libvirt-nss-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-10.0.0-150600.8.21.1 * libvirt-nss-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-10.0.0-150600.8.21.1 * libvirt-libs-10.0.0-150600.8.21.1 * libvirt-libs-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-lock-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-plugin-lockd-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-network-debuginfo-10.0.0-150600.8.21.1 * libvirt-client-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-driver-secret-10.0.0-150600.8.21.1 * libvirt-daemon-driver-qemu-10.0.0-150600.8.21.1 * libvirt-daemon-driver-interface-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-proxy-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-logical-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nwfilter-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-iscsi-10.0.0-150600.8.21.1 * libvirt-daemon-common-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-mpath-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-disk-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-core-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-scsi-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-hooks-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-10.0.0-150600.8.21.1 * libvirt-daemon-driver-nodedev-debuginfo-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libvirt-doc-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 x86_64) * libvirt-daemon-driver-storage-rbd-10.0.0-150600.8.21.1 * libvirt-daemon-driver-storage-rbd-debuginfo-10.0.0-150600.8.21.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libvirt-daemon-xen-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-debuginfo-10.0.0-150600.8.21.1 * libvirt-daemon-driver-libxl-10.0.0-150600.8.21.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273447 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:32:12 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:32:12 -0000 Subject: SUSE-SU-2026:4642-1: important: Security update for xen Message-ID: <179192353227.5627.3820666450904712473@d580628b9e86> # Security update for xen Announcement ID: SUSE-SU-2026:4642-1 Release Date: 2026-10-13T13:09:35Z Rating: important References: * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4642 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4642 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4642 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4642 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4642 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4642 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4642 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4642 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4642 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (x86_64) * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-libs-32bit-debuginfo-4.16.7_16-150400.4.95.1 * xen-doc-html-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-32bit-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (i586 x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:32:23 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 13 Oct 2026 20:32:23 -0000 Subject: SUSE-SU-2026:4641-1: important: Security update for xen Message-ID: <179192354334.5627.8037576309042276996@d580628b9e86> # Security update for xen Announcement ID: SUSE-SU-2026:4641-1 Release Date: 2026-10-13T13:09:07Z Rating: important References: * bsc#1027519 * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for xen fixes the following issues: Security issues fixed: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). Non security issue fixed: * Xen: Missing upstream bug fixes (bsc#1027519). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4641 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4641 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4641 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4641 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4641 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4641 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-libs-32bit-debuginfo-4.17.7_02-150500.3.82.1 * xen-doc-html-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (i586 x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:44 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:31:44 -0000 Subject: SUSE-SU-2026:24141-1: moderate: Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Message-ID: <179196670485.6256.14293954330118294222@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:24141-1 Release Date: 2026-10-13T15:11:56Z Rating: moderate References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Proxy 5.2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 * SUSE Multi-Linux Manager Server 5.2 An update that solves four vulnerabilities, contains one feature and has 60 fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 * SUSE Multi-Linux Manager Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrctl-debuginfo-5.2.17-160000.1.1 * mgradm-5.2.17-160000.1.1 * mgradm-debuginfo-5.2.17-160000.1.1 * mgrctl-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (noarch) * mgrctl-zsh-completion-5.2.17-160000.1.1 * mgrctl-bash-completion-5.2.17-160000.1.1 * mgradm-bash-completion-5.2.17-160000.1.1 * mgradm-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 * SUSE Multi-Linux Manager Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:52 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:31:52 -0000 Subject: SUSE-SU-2026:4654-1: important: Security update for glibc Message-ID: <179196671269.6256.13975902447410681598@d580628b9e86> # Security update for glibc Announcement ID: SUSE-SU-2026:4654-1 Release Date: 2026-10-13T16:56:09Z Rating: important References: * bsc#1282449 * bsc#1282509 Cross-References: * CVE-2026-86805 * CVE-2026-89092 CVSS scores: * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4654 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4654 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * nscd-2.22-114.55.1 * glibc-locale-2.22-114.55.1 * glibc-profile-2.22-114.55.1 * glibc-devel-2.22-114.55.1 * glibc-devel-debuginfo-2.22-114.55.1 * glibc-debuginfo-2.22-114.55.1 * glibc-locale-debuginfo-2.22-114.55.1 * nscd-debuginfo-2.22-114.55.1 * glibc-devel-static-2.22-114.55.1 * glibc-debugsource-2.22-114.55.1 * glibc-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * glibc-32bit-2.22-114.55.1 * glibc-devel-32bit-2.22-114.55.1 * glibc-locale-32bit-2.22-114.55.1 * glibc-profile-32bit-2.22-114.55.1 * glibc-devel-debuginfo-32bit-2.22-114.55.1 * glibc-locale-debuginfo-32bit-2.22-114.55.1 * glibc-debuginfo-32bit-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * glibc-i18ndata-2.22-114.55.1 * glibc-html-2.22-114.55.1 * glibc-info-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * nscd-2.22-114.55.1 * glibc-32bit-2.22-114.55.1 * glibc-devel-32bit-2.22-114.55.1 * glibc-locale-2.22-114.55.1 * glibc-locale-32bit-2.22-114.55.1 * glibc-profile-2.22-114.55.1 * glibc-devel-debuginfo-32bit-2.22-114.55.1 * glibc-devel-2.22-114.55.1 * glibc-devel-debuginfo-2.22-114.55.1 * glibc-debuginfo-2.22-114.55.1 * glibc-locale-debuginfo-2.22-114.55.1 * glibc-profile-32bit-2.22-114.55.1 * glibc-devel-static-2.22-114.55.1 * nscd-debuginfo-2.22-114.55.1 * glibc-debugsource-2.22-114.55.1 * glibc-locale-debuginfo-32bit-2.22-114.55.1 * glibc-debuginfo-32bit-2.22-114.55.1 * glibc-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * glibc-i18ndata-2.22-114.55.1 * glibc-html-2.22-114.55.1 * glibc-info-2.22-114.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:58 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:31:58 -0000 Subject: SUSE-SU-2026:4653-1: important: Security update for gimp Message-ID: <179196671828.6256.15906945782941883918@d580628b9e86> # Security update for gimp Announcement ID: SUSE-SU-2026:4653-1 Release Date: 2026-10-13T16:55:41Z Rating: important References: * bsc#1282596 Cross-References: * CVE-2026-97185 CVSS scores: * CVE-2026-97185 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97185 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for gimp fixes the following issue: * CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4653 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4653 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4653 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-debuginfo-2.10.30-150400.3.82.1 * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.82.1 * gimp-plugin-aa-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (x86_64) * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.82.1 * libgimpui-2_0-0-32bit-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimpui-2_0-0-64bit-2.10.30-150400.3.82.1 * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.82.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-debuginfo-2.10.30-150400.3.82.1 * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * gimp-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.82.1 * gimp-plugin-aa-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.82.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97185.html * https://bugzilla.suse.com/show_bug.cgi?id=1282596 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:05 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:32:05 -0000 Subject: SUSE-SU-2026:4652-1: important: Security update for python-virtualenv Message-ID: <179196672532.6256.3671441739933749430@d580628b9e86> # Security update for python-virtualenv Announcement ID: SUSE-SU-2026:4652-1 Release Date: 2026-10-13T16:55:07Z Rating: important References: * bsc#1283890 * bsc#1283904 Cross-References: * CVE-2026-102930 * CVE-2026-102938 CVSS scores: * CVE-2026-102930 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102930 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-102930 ( NVD ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102938 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-102938 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-102938 ( NVD ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-virtualenv fixes the following issues: * CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). * CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4652 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4652 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4652 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4652 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4652 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4652 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4652 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4652 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4652 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4652 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4652 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4652 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * openSUSE Leap 15.4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * Python 3 Module 15-SP7 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102930.html * https://www.suse.com/security/cve/CVE-2026-102938.html * https://bugzilla.suse.com/show_bug.cgi?id=1283890 * https://bugzilla.suse.com/show_bug.cgi?id=1283904 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:23 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:32:23 -0000 Subject: SUSE-SU-2026:4651-1: important: Security update for php8 Message-ID: <179196674303.6256.11548925130682283715@d580628b9e86> # Security update for php8 Announcement ID: SUSE-SU-2026:4651-1 Release Date: 2026-10-13T16:53:22Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4651 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4651 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4651 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4651 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4651 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4651 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4651 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4651 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4651 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:30 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:32:30 -0000 Subject: SUSE-SU-2026:4650-1: important: Security update for python-urllib3 Message-ID: <179196675012.6256.12024364999416479446@d580628b9e86> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4650-1 Release Date: 2026-10-13T16:52:01Z Rating: important References: * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4650 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4650 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4650 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4650 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4650 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4650 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4650 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4650 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4650 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4650 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4650 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4650 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4650 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4650 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * Basesystem Module 15-SP7 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:37 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:32:37 -0000 Subject: SUSE-SU-2026:4649-1: important: Security update for python-urllib3 Message-ID: <179196675735.6256.17953933495707202618@d580628b9e86> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4649-1 Release Date: 2026-10-13T16:49:54Z Rating: important References: * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4649 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4649 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4649 ## Package List: * Public Cloud Module 12 (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:42 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:32:42 -0000 Subject: SUSE-SU-2026:4648-1: important: Security update for cups-filters Message-ID: <179196676294.6256.13227264129276270219@d580628b9e86> # Security update for cups-filters Announcement ID: SUSE-SU-2026:4648-1 Release Date: 2026-10-13T16:49:16Z Rating: important References: * bsc#1282291 Cross-References: * CVE-2026-95511 CVSS scores: * CVE-2026-95511 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-95511 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-95511 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cups-filters fixes the following issue: * CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4648 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4648 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-debuginfo-1.0.58-19.41.1 * cups-filters-foomatic-rip-debuginfo-1.0.58-19.41.1 * cups-filters-1.0.58-19.41.1 * cups-filters-foomatic-rip-1.0.58-19.41.1 * cups-filters-ghostscript-debuginfo-1.0.58-19.41.1 * cups-filters-debugsource-1.0.58-19.41.1 * cups-filters-ghostscript-1.0.58-19.41.1 * cups-filters-cups-browsed-1.0.58-19.41.1 * cups-filters-cups-browsed-debuginfo-1.0.58-19.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cups-filters-debuginfo-1.0.58-19.41.1 * cups-filters-foomatic-rip-debuginfo-1.0.58-19.41.1 * cups-filters-1.0.58-19.41.1 * cups-filters-foomatic-rip-1.0.58-19.41.1 * cups-filters-ghostscript-debuginfo-1.0.58-19.41.1 * cups-filters-debugsource-1.0.58-19.41.1 * cups-filters-ghostscript-1.0.58-19.41.1 * cups-filters-cups-browsed-1.0.58-19.41.1 * cups-filters-cups-browsed-debuginfo-1.0.58-19.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-95511.html * https://bugzilla.suse.com/show_bug.cgi?id=1282291 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:00 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:33:00 -0000 Subject: SUSE-SU-2026:4647-1: important: Security update for xorg-x11-server Message-ID: <179196678082.6256.8308035249335426808@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4647-1 Release Date: 2026-10-13T16:48:50Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4647 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4647 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4647 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-source-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:18 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:33:18 -0000 Subject: SUSE-SU-2026:4646-1: important: Security update for xorg-x11-server Message-ID: <179196679860.6256.1026776247858947848@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4646-1 Release Date: 2026-10-13T16:48:25Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4646 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4646 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.15-150700.5.25.1 * xorg-x11-server-extra-21.1.15-150700.5.25.1 * xorg-x11-server-Xvfb-21.1.15-150700.5.25.1 * xorg-x11-server-Xvfb-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-extra-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-21.1.15-150700.5.25.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.15-150700.5.25.1 * xorg-x11-server-sdk-21.1.15-150700.5.25.1 * xorg-x11-server-debuginfo-21.1.15-150700.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:37 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 08:33:37 -0000 Subject: SUSE-SU-2026:4645-1: important: Security update for xorg-x11-server Message-ID: <179196681713.6256.7519531856553185822@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4645-1 Release Date: 2026-10-13T16:47:52Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4645 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4645 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4645 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4645 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4645 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-source-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:14 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 12:30:14 -0000 Subject: SUSE-SU-2026:4658-1: important: Security update for libtcnative-2-0 Message-ID: <179198101491.6676.13083980769144616490@929e079ff995> # Security update for libtcnative-2-0 Announcement ID: SUSE-SU-2026:4658-1 Release Date: 2026-10-14T07:51:19Z Rating: important References: * bsc#1282621 * bsc#1282622 * bsc#1282623 Cross-References: * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 CVSS scores: * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for libtcnative-2-0 fixes the following issues: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). Changes for libtcnative-2-0: * Upgrade to version 2.0.16 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Update: Remove support for Windows build on IA64 architecture (Itanium) * Update: Make x64 the default architecture for Windows build * Update: Make Windows 10 / 11 the default target version for Windows builds * Fix: Fix a potential crash when negotiating ALPN * Fix: If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Fix: Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4658 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4658 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4658 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4658 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4658 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4658 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4658 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4658 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4658 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4658 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4658 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4658 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4658 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:28 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 12:30:28 -0000 Subject: SUSE-SU-2026:4657-1: important: Security update for bind Message-ID: <179198102897.6676.13227335611912356108@929e079ff995> # Security update for bind Announcement ID: SUSE-SU-2026:4657-1 Release Date: 2026-10-14T07:49:41Z Rating: important References: * bsc#1280433 * bsc#1280435 * bsc#1280443 Cross-References: * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-80274 CVSS scores: * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4657 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4657 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4657 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4657 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libns1604-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * bind-utils-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * bind-9.16.6-150300.22.65.1 * libbind9-1600-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libns1604-debuginfo-9.16.6-150300.22.65.1 * bind-chrootenv-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libbind9-1600-debuginfo-9.16.6-150300.22.65.1 * bind-devel-9.16.6-150300.22.65.1 * libisccc1600-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * bind-utils-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * libisccc1600-debuginfo-9.16.6-150300.22.65.1 * openSUSE Leap 15.3 (noarch) * python3-bind-9.16.6-150300.22.65.1 * bind-doc-9.16.6-150300.22.65.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:49 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 12:30:49 -0000 Subject: SUSE-SU-2026:4656-1: important: Security update for glibc Message-ID: <179198104977.6676.14065746377281307650@929e079ff995> # Security update for glibc Announcement ID: SUSE-SU-2026:4656-1 Release Date: 2026-10-14T07:48:58Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4656 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4656 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4656 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4656 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4656 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64 i586 i686 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * openSUSE Leap 15.6 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-devel-static-32bit-2.38-150600.14.61.1 * glibc-profile-32bit-2.38-150600.14.61.1 * glibc-utils-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * glibc-utils-32bit-debuginfo-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64_ilp32) * glibc-devel-64bit-2.38-150600.14.61.1 * libnsl1-64bit-debuginfo-2.38-150600.14.61.1 * glibc-profile-64bit-2.38-150600.14.61.1 * glibc-devel-static-64bit-2.38-150600.14.61.1 * libnsl1-64bit-2.38-150600.14.61.1 * glibc-devel-64bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-64bit-2.38-150600.14.61.1 * glibc-64bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-64bit-debuginfo-2.38-150600.14.61.1 * glibc-64bit-2.38-150600.14.61.1 * glibc-utils-64bit-debuginfo-2.38-150600.14.61.1 * glibc-utils-64bit-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * glibc-extra-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * openSUSE Leap 15.6 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * glibc-html-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * Development Tools Module 15-SP7 (x86_64) * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * glibc-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 12:30:54 -0000 Subject: SUSE-SU-2026:4655-1: important: Security update for podman Message-ID: <179198105425.6676.13969078535532915275@929e079ff995> # Security update for podman Announcement ID: SUSE-SU-2026:4655-1 Release Date: 2026-10-14T07:40:43Z Rating: important References: Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4655 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4655 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150300.9.87.1 * podman-remote-debuginfo-4.9.5-150300.9.87.1 * podman-4.9.5-150300.9.87.1 * podmansh-4.9.5-150300.9.87.1 * podman-remote-4.9.5-150300.9.87.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.87.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-debuginfo-4.9.5-150300.9.87.1 * podman-4.9.5-150300.9.87.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:33 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4663-1: important: Security update for xorg-x11-server Message-ID: <179199543339.24636.3641296144854372148@81803ed3a673> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4663-1 Release Date: 2026-10-14T11:34:17Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4663 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4663 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4663 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4663 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4663 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-source-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:40 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 16:30:40 -0000 Subject: SUSE-SU-2026:4662-1: important: Security update for amazon-cloudwatch-agent Message-ID: <179199544007.24636.13658698108609190506@81803ed3a673> # Security update for amazon-cloudwatch-agent Announcement ID: SUSE-SU-2026:4662-1 Release Date: 2026-10-14T11:33:41Z Rating: important References: * bsc#1283594 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for amazon-cloudwatch-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594). Changes for amazon-cloudwatch-agent: Update to version 1.300073.0 * [Agent] Add Google Cloud support for GCE and GKE by @jefchien in (#2255), (#2258) and (#2260) * [Agent] Add opt-in self-telemetry endpoint for agent metrics by @movence in (#2246) * [ContainerInsights] Add KEDA and Karpenter metrics scraping by @Paamicky in (#2250) * [ContainerInsights] Add watch_replicaset toggle to disable the ReplicaSet informer by @movence in (#2246) * [Metrics/JMX] Format JVM metric units for Tomcat by @Paamicky in (#2235) * [ContainerInsights] Fix EKS OTel Container Insights log delivery and stabilize cluster-scoped metric identity by @sky333999 in (#2249) * [ContainerInsights] Only resolve cluster name when running in Kubernetes by @Paamicky in (#2259) * [Logs] Prevent high log throughput from stalling log collection while recording file read progress by @lorespiz in (#2253) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283594, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4662 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4662 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4662 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4662 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4662 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283594 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:46 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 16:30:46 -0000 Subject: SUSE-SU-2026:4661-1: important: Security update for google-osconfig-agent Message-ID: <179199544650.24636.3698107035812964162@81803ed3a673> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:4661-1 Release Date: 2026-10-14T11:32:56Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4661 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4661 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4661 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4661 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4661 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:33:44 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 16:33:44 -0000 Subject: SUSE-SU-2026:4660-1: important: Security update for the Linux Kernel Message-ID: <179199562495.24636.13011372486815708164@81803ed3a673> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4660-1 Release Date: 2026-10-14T10:09:04Z Rating: important References: * bsc#1254408 * bsc#1266008 * bsc#1267373 * bsc#1267564 * bsc#1269136 * bsc#1271906 * bsc#1271955 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273420 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1274920 * bsc#1275455 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275694 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276341 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276553 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277742 * bsc#1277766 * bsc#1277792 * bsc#1277796 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278063 * bsc#1278070 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278195 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1278335 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279811 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280298 * bsc#1280350 * bsc#1280387 * bsc#1280487 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281383 * bsc#1281397 * bsc#1281427 * bsc#1281546 * bsc#1281680 * bsc#1281786 * bsc#1281789 * bsc#1281818 * bsc#1281927 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-46135 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68162 * CVE-2026-68290 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72301 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74363 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80663 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80725 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80799 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-80976 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89702 * CVE-2026-89899 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90088 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90259 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 CVSS scores: * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 124 vulnerabilities, contains three features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Also reflect disabled BATMAN in supported.conf. * Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * Disable CONFIG_CAN (jsc#PED-16993). * Fif selftests build failure caused by jsc#PED-16401 backport (bsc#1281927). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * docs: tls: document TLS1.3 key updates (bsc#1267564 jsc#PED-16401). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kabi: tls add counters for rekey (bsc#1267564 jsc#PED-16401). * kernel-binary.spec.in: Fix syntax error. * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * perf: Reject exited events as group leaders (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4660 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4660 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4660 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4660 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4660 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 * kernel-default-devel-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * kernel-macros-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Live Patching 15-SP6 (nosrc) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_138-default-1-150600.13.3.1 * kernel-livepatch-SLE15-SP6_Update_32-debugsource-1-150600.13.3.1 * kernel-livepatch-6_4_0-150600_23_138-default-debuginfo-1-150600.13.3.1 * kernel-default-livepatch-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-livepatch-devel-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64) * cluster-md-kmp-64kb-6.4.0-150600.23.138.1 * kernel-64kb-extra-6.4.0-150600.23.138.1 * gfs2-kmp-64kb-6.4.0-150600.23.138.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.138.1 * dlm-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-exynos-6.4.0-150600.23.138.1 * dtb-lg-6.4.0-150600.23.138.1 * dtb-marvell-6.4.0-150600.23.138.1 * dtb-xilinx-6.4.0-150600.23.138.1 * reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-cavium-6.4.0-150600.23.138.1 * dtb-socionext-6.4.0-150600.23.138.1 * ocfs2-kmp-64kb-6.4.0-150600.23.138.1 * dtb-mediatek-6.4.0-150600.23.138.1 * kernel-64kb-devel-6.4.0-150600.23.138.1 * kselftests-kmp-64kb-6.4.0-150600.23.138.1 * kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-optional-6.4.0-150600.23.138.1 * dtb-apple-6.4.0-150600.23.138.1 * dtb-altera-6.4.0-150600.23.138.1 * dtb-allwinner-6.4.0-150600.23.138.1 * dlm-kmp-64kb-6.4.0-150600.23.138.1 * dtb-amlogic-6.4.0-150600.23.138.1 * dtb-broadcom-6.4.0-150600.23.138.1 * dtb-freescale-6.4.0-150600.23.138.1 * dtb-nvidia-6.4.0-150600.23.138.1 * ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-sprd-6.4.0-150600.23.138.1 * dtb-amd-6.4.0-150600.23.138.1 * dtb-rockchip-6.4.0-150600.23.138.1 * gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-64kb-6.4.0-150600.23.138.1 * dtb-hisilicon-6.4.0-150600.23.138.1 * kernel-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-renesas-6.4.0-150600.23.138.1 * kernel-64kb-extra-debuginfo-6.4.0-150600.23.138.1 * dtb-qcom-6.4.0-150600.23.138.1 * kernel-64kb-optional-debuginfo-6.4.0-150600.23.138.1 * dtb-apm-6.4.0-150600.23.138.1 * dtb-arm-6.4.0-150600.23.138.1 * dtb-amazon-6.4.0-150600.23.138.1 * kernel-64kb-debugsource-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-150600.23.138.1 * kernel-default-livepatch-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * kselftests-kmp-default-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * kernel-default-optional-debuginfo-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-extra-debuginfo-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-optional-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kselftests-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-qa-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-extra-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc) * dtb-aarch64-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc ppc64le x86_64) * kernel-debug-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (ppc64le x86_64) * kernel-debug-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-debug-debugsource-6.4.0-150600.23.138.1 * kernel-debug-debuginfo-6.4.0-150600.23.138.1 * kernel-debug-devel-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (x86_64) * kernel-kvmsmall-vdso-6.4.0-150600.23.138.1 * kernel-debug-vdso-6.4.0-150600.23.138.1 * kernel-default-vdso-debuginfo-6.4.0-150600.23.138.1 * kernel-default-vdso-6.4.0-150600.23.138.1 * kernel-debug-vdso-debuginfo-6.4.0-150600.23.138.1 * kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 * kernel-kvmsmall-debuginfo-6.4.0-150600.23.138.1 * kernel-kvmsmall-devel-6.4.0-150600.23.138.1 * kernel-kvmsmall-debugsource-6.4.0-150600.23.138.1 * kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-default-base-rebuild-6.4.0-150600.23.138.1.150600.12.64.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_138-default-1-150600.13.3.1 * kernel-default-livepatch-devel-6.4.0-150600.23.138.1 * kernel-livepatch-6_4_0-150600_23_138-default-debuginfo-1-150600.13.3.1 * kernel-livepatch-SLE15-SP6_Update_32-debugsource-1-150600.13.3.1 * openSUSE Leap 15.6 (noarch) * kernel-docs-html-6.4.0-150600.23.138.1 * kernel-source-vanilla-6.4.0-150600.23.138.1 * kernel-macros-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.138.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-default-devel-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * kernel-macros-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.138.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64) * kernel-64kb-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-devel-6.4.0-150600.23.138.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-debugsource-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:33:54 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 16:33:54 -0000 Subject: SUSE-SU-2026:4659-1: important: Security update for python312 Message-ID: <179199563479.24636.299865031247286376@81803ed3a673> # Security update for python312 Announcement ID: SUSE-SU-2026:4659-1 Release Date: 2026-10-14T10:07:30Z Rating: important References: * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-82049 CVSS scores: * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python312: * Update to 3.12.15 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4659 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4659 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4659 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python312-doc-devhelp-3.12.15-150600.3.71.1 * python312-doc-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * python312-testsuite-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 * python312-testsuite-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-32bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-32bit-3.12.15-150600.3.71.1 * python312-32bit-3.12.15-150600.3.71.1 * libpython3_12-1_0-32bit-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-32bit-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-64bit-3.12.15-150600.3.71.1 * libpython3_12-1_0-64bit-3.12.15-150600.3.71.1 * python312-64bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-64bit-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-64bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-64bit-3.12.15-150600.3.71.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:34 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:30:34 -0000 Subject: SUSE-SU-2026:4676-1: critical: Security update for webkit2gtk3 Message-ID: <179200983452.46.5564375552600162794@95e70f47255d> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4676-1 Release Date: 2026-10-14T14:47:48Z Rating: critical References: * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1281116 * bsc#1284619 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43670 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64715 * CVE-2026-64753 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64784 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 233 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): * CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. * CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. * CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. * CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. * CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. * CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. * CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. * CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. * CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. * CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. * CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. * CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. * CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. * CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. * CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. * CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. * CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. * CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. * CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. * CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. * CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. * CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. * CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. * CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. * CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. * CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. * CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. * CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. * CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. * CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. * CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. * CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. * CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. * CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4676 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4676 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4676 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4676 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4676 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4676 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4676 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4676 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4676 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * webkit-jsc-6.0-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-minibrowser-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * webkit-jsc-4-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-minibrowser-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-devel-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit-6_0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * webkit2gtk4-minibrowser-2.54.1-150400.4.152.2 * webkit-jsc-6.0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit-jsc-4.1-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * webkit-jsc-4.1-2.54.1-150400.4.152.2 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150400.4.152.2 * webkit-jsc-4-debuginfo-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-32bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-32bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-64bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-64bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:4675-1: important: Security update for container-suseconnect Message-ID: <179200984231.46.6547310577065804997@95e70f47255d> # Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4675-1 Release Date: 2026-10-14T14:29:00Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for container-suseconnect rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4675 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4675 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4675 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4675 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4675 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4675 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4675 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4675 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4675 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4675 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4675 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:49 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:30:49 -0000 Subject: SUSE-SU-2026:4674-1: important: Security update for helm Message-ID: <179200984985.46.16787362062660388306@95e70f47255d> # Security update for helm Announcement ID: SUSE-SU-2026:4674-1 Release Date: 2026-10-14T14:26:54Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that can now be installed. ## Description: This update for helm rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4674 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4674 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4674 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4674 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4674 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4674 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4674 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4674 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4674 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4674 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4674 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4674 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4674 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * Containers Module 15-SP7 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Package Hub 15 15-SP7 (noarch) * helm-fish-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:56 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:30:56 -0000 Subject: SUSE-RU-2026:4673-1: important: Recommended update for resource-agents Message-ID: <179200985628.46.12892816357355556747@95e70f47255d> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:4673-1 Release Date: 2026-10-14T14:07:51Z Rating: important References: * bsc#1281122 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issues: * Fix: aws-vpc-move-ip fails to start (bsc#1281122) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-4673 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4673 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * resource-agents-debuginfo-4.12.0+git30.7fd7c8fa-150500.3.26.1 * ldirectord-4.12.0+git30.7fd7c8fa-150500.3.26.1 * resource-agents-debugsource-4.12.0+git30.7fd7c8fa-150500.3.26.1 * resource-agents-4.12.0+git30.7fd7c8fa-150500.3.26.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * monitoring-plugins-metadata-4.12.0+git30.7fd7c8fa-150500.3.26.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * resource-agents-debugsource-4.12.0+git30.7fd7c8fa-150500.3.26.1 * resource-agents-zfs-4.12.0+git30.7fd7c8fa-150500.3.26.1 * resource-agents-debuginfo-4.12.0+git30.7fd7c8fa-150500.3.26.1 * ldirectord-4.12.0+git30.7fd7c8fa-150500.3.26.1 * resource-agents-4.12.0+git30.7fd7c8fa-150500.3.26.1 * openSUSE Leap 15.5 (noarch) * monitoring-plugins-metadata-4.12.0+git30.7fd7c8fa-150500.3.26.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:02 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:31:02 -0000 Subject: SUSE-RU-2026:4672-1: important: Recommended update for resource-agents Message-ID: <179200986234.46.17675895279567939207@95e70f47255d> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:4672-1 Release Date: 2026-10-14T14:07:27Z Rating: important References: * bsc#1281122 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for resource-agents fixes the following issues: * Fix: aws-vpc-move-ip fails to start (bsc#1281122) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4672 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4672 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ldirectord-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-debuginfo-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-debugsource-4.10.0+git40.0f4de473-150400.3.45.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * monitoring-plugins-metadata-4.10.0+git40.0f4de473-150400.3.45.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * ldirectord-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-debuginfo-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-4.10.0+git40.0f4de473-150400.3.45.1 * resource-agents-debugsource-4.10.0+git40.0f4de473-150400.3.45.1 * openSUSE Leap 15.4 (noarch) * monitoring-plugins-metadata-4.10.0+git40.0f4de473-150400.3.45.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:09 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:31:09 -0000 Subject: SUSE-SU-2026:4671-1: important: Security update for containerd Message-ID: <179200986948.46.2891889133326435890@95e70f47255d> # Security update for containerd Announcement ID: SUSE-SU-2026:4671-1 Release Date: 2026-10-14T13:40:27Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-53488 CVSS scores: * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4671 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4671 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * containerd-devel-1.7.29-16.116.1 * containerd-1.7.29-16.116.1 * containerd-ctr-1.7.29-16.116.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * containerd-devel-1.7.29-16.116.1 * containerd-1.7.29-16.116.1 * containerd-ctr-1.7.29-16.116.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:14 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:31:14 -0000 Subject: SUSE-RU-2026:4670-1: moderate: Recommended update for timezone Message-ID: <179200987416.46.12767532812779582272@95e70f47255d> # Recommended update for timezone Announcement ID: SUSE-RU-2026:4670-1 Release Date: 2026-10-14T13:40:04Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that can now be installed. ## Description: This update for timezone fixes the following issues: * Update to version 2026e: * Manitoba moves to permanent -05 on 2026-10-31 * Update to version 2026d: * Canada's Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4670 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4670 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * timezone-debuginfo-2026e-74.95.1 * timezone-debugsource-2026e-74.95.1 * timezone-2026e-74.95.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * timezone-java-2026e-74.95.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * timezone-debuginfo-2026e-74.95.1 * timezone-debugsource-2026e-74.95.1 * timezone-2026e-74.95.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * timezone-java-2026e-74.95.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:21 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:31:21 -0000 Subject: SUSE-SU-2026:4669-1: important: Security update for glibc Message-ID: <179200988159.46.13264561256297158828@95e70f47255d> # Security update for glibc Announcement ID: SUSE-SU-2026:4669-1 Release Date: 2026-10-14T13:33:43Z Rating: important References: * bsc#1282509 Cross-References: * CVE-2026-86805 CVSS scores: * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves one vulnerability can now be installed. ## Description: This update for glibc fixes the following issue: * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * glibc-info-2.11.3-17.110.58.1 * glibc-32bit-2.11.3-17.110.58.1 * nscd-2.11.3-17.110.58.1 * glibc-debuginfo-2.11.3-17.110.58.1 * glibc-html-2.11.3-17.110.58.1 * glibc-2.11.3-17.110.58.1 * glibc-profile-32bit-2.11.3-17.110.58.1 * glibc-locale-2.11.3-17.110.58.1 * glibc-debuginfo-32bit-2.11.3-17.110.58.1 * glibc-devel-2.11.3-17.110.58.1 * glibc-i18ndata-2.11.3-17.110.58.1 * glibc-debugsource-2.11.3-17.110.58.1 * glibc-devel-32bit-2.11.3-17.110.58.1 * glibc-profile-2.11.3-17.110.58.1 * glibc-locale-32bit-2.11.3-17.110.58.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * glibc-info-2.11.3-17.110.58.1 * glibc-32bit-2.11.3-17.110.58.1 * nscd-2.11.3-17.110.58.1 * glibc-debuginfo-2.11.3-17.110.58.1 * glibc-html-2.11.3-17.110.58.1 * glibc-2.11.3-17.110.58.1 * glibc-profile-32bit-2.11.3-17.110.58.1 * glibc-locale-2.11.3-17.110.58.1 * glibc-debuginfo-32bit-2.11.3-17.110.58.1 * glibc-devel-2.11.3-17.110.58.1 * glibc-i18ndata-2.11.3-17.110.58.1 * glibc-debugsource-2.11.3-17.110.58.1 * glibc-devel-32bit-2.11.3-17.110.58.1 * glibc-profile-2.11.3-17.110.58.1 * glibc-locale-32bit-2.11.3-17.110.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:33:19 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:33:19 -0000 Subject: SUSE-SU-2026:4668-1: important: Security update for the Linux Kernel Message-ID: <179200999939.46.3095818366887544756@95e70f47255d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4668-1 Release Date: 2026-10-14T13:01:16Z Rating: important References: * bsc#1216813 * bsc#1235133 * bsc#1251966 * bsc#1252682 * bsc#1254633 * bsc#1269136 * bsc#1271906 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277820 * bsc#1277857 * bsc#1277904 * bsc#1277906 * bsc#1278054 * bsc#1278094 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278315 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281042 * bsc#1281046 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2024-56644 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74398 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56644 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133). * CVE-2025-39964: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2025-40022: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4668 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4668 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4668 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4668 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4668 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4668 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4668 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4668 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4668 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4668 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4668 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * gfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-default-5.14.21-150400.24.243.1 * gfs2-kmp-default-5.14.21-150400.24.243.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-5.14.21-150400.24.243.1 * dlm-kmp-default-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-5.14.21-150400.24.243.1 * kernel-livepatch-5_14_21-150400_24_243-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_60-debugsource-1-150400.9.3.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-livepatch-5_14_21-150400_24_243-default-1-150400.9.3.1 * kernel-default-livepatch-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64) * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * dlm-kmp-64kb-5.14.21-150400.24.243.1 * dtb-marvell-5.14.21-150400.24.243.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-extra-5.14.21-150400.24.243.1 * reiserfs-kmp-64kb-5.14.21-150400.24.243.1 * dtb-mediatek-5.14.21-150400.24.243.1 * kselftests-kmp-64kb-5.14.21-150400.24.243.1 * dtb-renesas-5.14.21-150400.24.243.1 * dtb-amd-5.14.21-150400.24.243.1 * dtb-apm-5.14.21-150400.24.243.1 * dtb-socionext-5.14.21-150400.24.243.1 * dtb-altera-5.14.21-150400.24.243.1 * dtb-amazon-5.14.21-150400.24.243.1 * dtb-xilinx-5.14.21-150400.24.243.1 * dtb-nvidia-5.14.21-150400.24.243.1 * dtb-freescale-5.14.21-150400.24.243.1 * dtb-sprd-5.14.21-150400.24.243.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-64kb-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * dtb-exynos-5.14.21-150400.24.243.1 * dtb-cavium-5.14.21-150400.24.243.1 * dtb-amlogic-5.14.21-150400.24.243.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * dtb-arm-5.14.21-150400.24.243.1 * dtb-lg-5.14.21-150400.24.243.1 * dtb-hisilicon-5.14.21-150400.24.243.1 * dtb-apple-5.14.21-150400.24.243.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * dtb-qcom-5.14.21-150400.24.243.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * dtb-allwinner-5.14.21-150400.24.243.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-optional-5.14.21-150400.24.243.1 * dtb-broadcom-5.14.21-150400.24.243.1 * gfs2-kmp-64kb-5.14.21-150400.24.243.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.243.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-64kb-5.14.21-150400.24.243.1 * dtb-rockchip-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * gfs2-kmp-default-5.14.21-150400.24.243.1 * kernel-default-optional-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kselftests-kmp-default-5.14.21-150400.24.243.1 * kernel-default-livepatch-5.14.21-150400.24.243.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.243.1 * dlm-kmp-default-5.14.21-150400.24.243.1 * kernel-default-extra-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-obs-qa-5.14.21-150400.24.243.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.243.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.243.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150400.24.243.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-rebuild-5.14.21-150400.24.243.1.150400.24.122.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_243-default-debuginfo-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.243.1 * kernel-livepatch-SLE15-SP4_Update_60-debugsource-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_243-default-1-150400.9.3.1 * openSUSE Leap 15.4 (noarch) * kernel-source-vanilla-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-docs-html-5.14.21-150400.24.243.1 * kernel-source-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.243.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.243.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2024-56644.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1216813 * https://bugzilla.suse.com/show_bug.cgi?id=1235133 * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:38:00 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:38:00 -0000 Subject: SUSE-SU-2026:4665-1: important: Security update for the Linux Kernel Message-ID: <179201028081.46.17776227107153103776@95e70f47255d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4665-1 Release Date: 2026-10-14T12:53:56Z Rating: important References: * bsc#1251966 * bsc#1252682 * bsc#1253005 * bsc#1254633 * bsc#1266008 * bsc#1269136 * bsc#1271906 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275304 * bsc#1275307 * bsc#1275470 * bsc#1275535 * bsc#1275540 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277254 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68155 * CVE-2026-68158 * CVE-2026-68159 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72083 * CVE-2026-72084 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72339 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74556 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68155 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68155 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68155 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68159 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68159 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68159 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). * CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). * CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: \- Disable BATMAN in supported.conf. \- Disable CONFIG_BATMAN_ADV (jsc#PED-16892). \- Disable CONFIG_CAN (jsc#PED-16993). \- default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). \- fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). \- i2c: core: fix irq domain leak on adapter registration failure (git-fixes). \- kernel-binary.spec.in: Fix syntax error. \- net: mana: Cap MSI-X vectors to the device MSI-X table size (bsc#1277254). \- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes). \- net: mana: Fall back to scattered pages for GDMA queues (bsc#1281085). \- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). \- perf: Reject exited events as group leaders (git-fixes). \- slab: Introduce kmalloc_obj() and family (bsc#1280139). \- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). \- smb: client: fix data/file corruption on reconnects (bsc#1253005). \- smb: client: fix stuck kworkers on reconnects during writes (bsc#1253005). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4665 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4665 ## Package List: * openSUSE Leap 15.5 (x86_64) * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.164.1 * cluster-md-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.164.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-extra-5.14.21-150500.13.164.1 * kernel-rt-vdso-5.14.21-150500.13.164.1 * kernel-rt_debug-devel-5.14.21-150500.13.164.1 * reiserfs-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt-debugsource-5.14.21-150500.13.164.1 * kernel-rt-optional-5.14.21-150500.13.164.1 * dlm-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-vdso-5.14.21-150500.13.164.1 * kselftests-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt-debuginfo-5.14.21-150500.13.164.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.164.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.164.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-livepatch-5.14.21-150500.13.164.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.164.1 * gfs2-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-devel-5.14.21-150500.13.164.1 * kernel-syms-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.164.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.164.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * ocfs2-kmp-rt-5.14.21-150500.13.164.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.164.1 * kernel-source-rt-5.14.21-150500.13.164.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.164.1 * kernel-source-rt-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debugsource-5.14.21-150500.13.164.1 * kernel-rt-debuginfo-5.14.21-150500.13.164.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68155.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://www.suse.com/security/cve/CVE-2026-68159.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1253005 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275304 * https://bugzilla.suse.com/show_bug.cgi?id=1275307 * https://bugzilla.suse.com/show_bug.cgi?id=1275470 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:38:19 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 14 Oct 2026 20:38:19 -0000 Subject: SUSE-SU-2026:4664-1: important: Security update for bind Message-ID: <179201029959.46.15268630985869499396@95e70f47255d> # Security update for bind Announcement ID: SUSE-SU-2026:4664-1 Release Date: 2026-10-14T12:53:17Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280440 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-77119 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4664 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4664 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4664 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4664 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4664 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * openSUSE Leap 15.4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 08:33:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 08:33:04 -0000 Subject: SUSE-SU-2026:4667-1: important: Security update for the Linux Kernel Message-ID: <179205318463.20509.17986899178680793538@43884348fd0a> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4667-1 Release Date: 2026-10-14T12:57:55Z Rating: important References: * bsc#1251966 * bsc#1252682 * bsc#1253005 * bsc#1254633 * bsc#1266008 * bsc#1269136 * bsc#1271906 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275304 * bsc#1275307 * bsc#1275470 * bsc#1275535 * bsc#1275540 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277254 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68155 * CVE-2026-68158 * CVE-2026-68159 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72083 * CVE-2026-72084 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72339 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74556 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68155 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68155 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68155 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68159 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68159 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68159 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2025-39964: kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). * CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). * CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * net: mana: Cap MSI-X vectors to the device MSI-X table size (bsc#1277254). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Fall back to scattered pages for GDMA queues (bsc#1281085). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * perf: Reject exited events as group leaders (git-fixes). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: fix data/file corruption on reconnects (bsc#1253005). * smb: client: fix stuck kworkers on reconnects during writes (bsc#1253005). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4667 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4667 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4667 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4667 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4667 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4667 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4667 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.192.2 * kernel-livepatch-5_14_21-150500_55_192-default-1-150500.11.3.2 * kernel-livepatch-SLE15-SP5_Update_46-debugsource-1-150500.11.3.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * kernel-default-livepatch-devel-5.14.21-150500.55.192.2 * kernel-livepatch-5_14_21-150500_55_192-default-debuginfo-1-150500.11.3.2 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-extra-5.14.21-150500.55.192.2 * dlm-kmp-64kb-5.14.21-150500.55.192.2 * ocfs2-kmp-64kb-5.14.21-150500.55.192.2 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kselftests-kmp-64kb-5.14.21-150500.55.192.2 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-optional-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * reiserfs-kmp-64kb-5.14.21-150500.55.192.2 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-64kb-5.14.21-150500.55.192.2 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-64kb-5.14.21-150500.55.192.2 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.192.2 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-extra-debuginfo-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-optional-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-qa-5.14.21-150500.55.192.1 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * kselftests-kmp-default-5.14.21-150500.55.192.2 * ocfs2-kmp-default-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-extra-5.14.21-150500.55.192.2 * kernel-default-optional-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debugsource-5.14.21-150500.55.192.2 * kernel-default-base-rebuild-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-kvmsmall-devel-5.14.21-150500.55.192.2 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.192.2 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_192-default-1-150500.11.3.2 * kernel-livepatch-5_14_21-150500_55_192-default-debuginfo-1-150500.11.3.2 * kernel-livepatch-SLE15-SP5_Update_46-debugsource-1-150500.11.3.2 * kernel-default-livepatch-devel-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (x86_64) * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.192.2 * kernel-default-vdso-debuginfo-5.14.21-150500.55.192.2 * kernel-kvmsmall-vdso-5.14.21-150500.55.192.2 * kernel-default-vdso-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-vanilla-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * kernel-docs-html-5.14.21-150500.55.192.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.192.2 * kernel-zfcpdump-debugsource-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.192.2 * kernel-zfcpdump-debugsource-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68155.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://www.suse.com/security/cve/CVE-2026-68159.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1253005 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275304 * https://bugzilla.suse.com/show_bug.cgi?id=1275307 * https://bugzilla.suse.com/show_bug.cgi?id=1275470 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 08:35:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 08:35:13 -0000 Subject: SUSE-SU-2026:4666-1: important: Security update for the Linux Kernel Message-ID: <179205331383.20509.1097285243673059742@43884348fd0a> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4666-1 Release Date: 2026-10-14T12:54:21Z Rating: important References: * bsc#1216813 * bsc#1235133 * bsc#1251966 * bsc#1252682 * bsc#1254633 * bsc#1269136 * bsc#1271906 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277820 * bsc#1277857 * bsc#1277904 * bsc#1277906 * bsc#1278054 * bsc#1278094 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278315 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281042 * bsc#1281046 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2024-56644 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74398 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56644 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133). * CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Also reflect disabled BATMAN in supported.conf. * Disable CONFIG_CAN (jsc#PED-16993). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4666 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4666 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4666 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4666 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2024-56644.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1216813 * https://bugzilla.suse.com/show_bug.cgi?id=1235133 * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:30:06 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:30:06 -0000 Subject: SUSE-RU-2026:24177-1: moderate: Recommended update for libzpc Message-ID: <179206740642.22980.14248192675675886124@3bce49fe9f47> # Recommended update for libzpc Announcement ID: SUSE-RU-2026:24177-1 Release Date: 2026-10-06T15:07:15Z Rating: moderate References: * jsc#PED-14603 * jsc#PED-15023 * jsc#PED-15049 * jsc#PED-15051 * jsc#PED-16483 Affected Products: * SUSE Linux Enterprise Server 16.0 An update that contains five features can now be installed. ## Description: This update for libzpc fixes the following issues: Changes in libzpc: * Upgrade libzpc to version 2.0.1 (jsc#PED-16483) * Add new sub-packages: libzpc-provider, libzpc-tools ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1853 ## Package List: * SUSE Linux Enterprise Server 16.0 (s390x) * libzpc-provider-debuginfo-2.0.1-160000.1.1 * libzpc-tools-2.0.1-160000.1.1 * libzpc-debugsource-2.0.1-160000.1.1 * libzpc-2.0.1-160000.1.1 * libzpc-tools-debuginfo-2.0.1-160000.1.1 * libzpc-provider-2.0.1-160000.1.1 * libzpc-debuginfo-2.0.1-160000.1.1 ## References: * https://jira.suse.com/browse/PED-14603 * https://jira.suse.com/browse/PED-15023 * https://jira.suse.com/browse/PED-15049 * https://jira.suse.com/browse/PED-15051 * https://jira.suse.com/browse/PED-16483 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:30:20 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:30:20 -0000 Subject: SUSE-RU-2026:24176-1: moderate: Recommended update for libpulp Message-ID: <179206742098.22980.13658565973439104784@3bce49fe9f47> # Recommended update for libpulp Announcement ID: SUSE-RU-2026:24176-1 Release Date: 2026-10-07T09:28:17Z Rating: moderate References: * bsc#1280765 * jsc#PED-14756 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature and has one fix can now be installed. ## Description: This update for libpulp fixes the following issues: Changes in libpulp: * Add python3-base build requirement (bsc#1280765) * Clean up SPEC file * Make Makefile to use configured Python interpreter instead of python3 * Make build work with the system Python * Update scripts to comply with Immutable Mode (jsc#PED-14756) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1859 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1859 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libpulp-debugsource-0.3.17-160000.2.1 * libpulp0-0.3.17-160000.2.1 * libpulp-tools-0.3.17-160000.2.1 * libpulp-debuginfo-0.3.17-160000.2.1 * libpulp-tools-debuginfo-0.3.17-160000.2.1 * libpulp0-debuginfo-0.3.17-160000.2.1 * SUSE Linux Enterprise Server 16.0 (ppc64le x86_64) * libpulp-debugsource-0.3.17-160000.2.1 * libpulp0-0.3.17-160000.2.1 * libpulp-tools-0.3.17-160000.2.1 * libpulp-debuginfo-0.3.17-160000.2.1 * libpulp-tools-debuginfo-0.3.17-160000.2.1 * libpulp0-debuginfo-0.3.17-160000.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1280765 * https://jira.suse.com/browse/PED-14756 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:31:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:31:13 -0000 Subject: SUSE-SU-2026:24175-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179206747364.22980.6773115687009846221@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24175-1 Release Date: 2026-10-06T11:01:59Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1845 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1845 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:31:44 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:31:44 -0000 Subject: SUSE-SU-2026:24174-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179206750461.22980.14994542532326549780@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24174-1 Release Date: 2026-10-06T10:42:40Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1844 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1844 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:32:18 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:32:18 -0000 Subject: SUSE-SU-2026:24173-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179206753882.22980.12813910470258341987@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24173-1 Release Date: 2026-10-06T09:09:25Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1843 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1843 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:32:50 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:32:50 -0000 Subject: SUSE-SU-2026:24172-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179206757057.22980.13445020012806326607@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24172-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1842 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1842 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:33:24 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:33:24 -0000 Subject: SUSE-SU-2026:24171-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179206760415.22980.7100663911582371773@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24171-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1841 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1841 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:33:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:33:55 -0000 Subject: SUSE-SU-2026:24170-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179206763569.22980.18321081261534598337@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24170-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1840 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1840 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:34:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:34:27 -0000 Subject: SUSE-SU-2026:24169-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179206766736.22980.16230317438550031427@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24169-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1839 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1839 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:34:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:34:59 -0000 Subject: SUSE-SU-2026:24168-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179206769920.22980.4031436973788573620@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24168-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1838 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1838 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:35:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:35:28 -0000 Subject: SUSE-SU-2026:24167-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179206772883.22980.7847199224154467541@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24167-1 Release Date: 2026-10-05T21:37:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1837 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1837 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:36:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:36:01 -0000 Subject: SUSE-SU-2026:24166-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179206776170.22980.17637239282928364343@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24166-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1836 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1836 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:36:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:36:31 -0000 Subject: SUSE-SU-2026:24165-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179206779195.22980.4260637559156845082@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24165-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1835 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1835 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:37:04 -0000 Subject: SUSE-SU-2026:24164-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179206782490.22980.18357292669730549835@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24164-1 Release Date: 2026-10-05T19:09:29Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1834 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1834 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:36 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:37:36 -0000 Subject: SUSE-SU-2026:24163-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179206785621.22980.17875213696427823252@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24163-1 Release Date: 2026-10-05T17:08:09Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1832 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1832 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:56 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:37:56 -0000 Subject: SUSE-SU-2026:24162-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179206787647.22980.17293508791837659755@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24162-1 Release Date: 2026-10-05T15:56:29Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1831 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1831 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:38:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:38:29 -0000 Subject: SUSE-SU-2026:24161-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179206790925.22980.136281787022664034@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24161-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1830 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1830 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:39:01 -0000 Subject: SUSE-SU-2026:24160-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179206794122.22980.15193953474873304459@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24160-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1829 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1829 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:39:12 -0000 Subject: SUSE-SU-2026:24159-1: important: Security update for qemu Message-ID: <179206795258.22980.9229220469623650173@3bce49fe9f47> # Security update for qemu Announcement ID: SUSE-SU-2026:24159-1 Release Date: 2026-10-07T09:59:52Z Rating: important References: * bsc#1263864 * bsc#1279962 * bsc#1282077 * bsc#1282578 * bsc#1282918 Cross-References: * CVE-2026-81627 * CVE-2026-93834 CVSS scores: * CVE-2026-81627 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-81627 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-81627 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93834 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-93834 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has three fixes can now be installed. ## Description: This update for qemu fixes the following issues: Security issues fixed: * CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Management Mode memory (bsc#1282077). * CVE-2026-93834: hw/9pfs: mutate FID path from main thread only (bsc#1282578). Changes for qemu: * Bugfixes: * [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918) * virtio: fix queue size validation against allocated maximum (bsc#1279962) * virtio-mmio: fix QUEUE_NUM_MAX (bsc#1279962) * target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864) * target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864) * linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864) * linux-headers: Update to Linux v7.2-rc1 with KVM_S390_VM_CPU_FEAT_ASTFLEIE2 (bsc#1263864) * linux-headers: Update to Linux v7.1-rc4 (bsc#1263864) * scripts/update-linux-headers: Add typelimits.h (bsc#1263864) * update-linux-headers: Inject VIRTIO_RING_NO_LEGACY in virtio_ring.h (bsc#1263864) * linux-headers: Add nitro_enclaves.h (bsc#1263864) * scripts/update-linux-headers: Add Nitro Enclaves header (bsc#1263864) * standard-headers: Update virtio_spi.h from Linux v6.18-rc3 (bsc#1263864) * linux-headers: Update to Linux v6.19-rc1 (bsc#1263864) * update-linux-headers: Remove "asm-s390/unistd_32.h" (bsc#1263864) * linux-headers: Update to Linux v6.18-rc3 (bsc#1263864) * linux-headers/linux: Add mshv.h headers (bsc#1263864) * include/hw/hyperv: Add MSHV ABI header definitions (bsc#1263864) * linux-headers: Update to Linux v6.17-rc1 (bsc#1263864) * linux-headers: deal with counted_by annotation (bsc#1263864) * linux-headers: Remove the 32-bit arm headers (bsc#1263864) * update Linux headers to KVM tree master (bsc#1263864) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1860 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1860 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * qemu-audio-dbus-10.0.13-160000.2.1 * qemu-block-nfs-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-audio-alsa-debuginfo-10.0.13-160000.2.1 * qemu-audio-dbus-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-arm-10.0.13-160000.2.1 * qemu-headless-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-linux-user-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-linux-user-debugsource-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-block-curl-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-linux-user-debuginfo-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-block-dmg-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-block-dmg-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-guest-agent-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-block-curl-10.0.13-160000.2.1 * qemu-ivshmem-tools-10.0.13-160000.2.1 * qemu-vhost-user-gpu-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * qemu-audio-alsa-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-10.0.13-160000.2.1 * qemu-audio-oss-10.0.13-160000.2.1 * qemu-audio-oss-debuginfo-10.0.13-160000.2.1 * qemu-block-nfs-debuginfo-10.0.13-160000.2.1 * qemu-extra-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-extra-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-vhost-user-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-ivshmem-tools-debuginfo-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * qemu-doc-10.0.13-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-skiboot-10.0.13-160000.2.1 * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-microvm-10.0.13-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * qemu-audio-dbus-10.0.13-160000.2.1 * qemu-block-nfs-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-audio-alsa-debuginfo-10.0.13-160000.2.1 * qemu-audio-dbus-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-arm-10.0.13-160000.2.1 * qemu-headless-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-linux-user-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-linux-user-debugsource-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-block-curl-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-linux-user-debuginfo-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-block-dmg-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-block-dmg-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-guest-agent-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-block-curl-10.0.13-160000.2.1 * qemu-ivshmem-tools-10.0.13-160000.2.1 * qemu-vhost-user-gpu-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * qemu-audio-alsa-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-10.0.13-160000.2.1 * qemu-audio-oss-10.0.13-160000.2.1 * qemu-audio-oss-debuginfo-10.0.13-160000.2.1 * qemu-block-nfs-debuginfo-10.0.13-160000.2.1 * qemu-extra-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-extra-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-vhost-user-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-ivshmem-tools-debuginfo-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * qemu-doc-10.0.13-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-skiboot-10.0.13-160000.2.1 * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-microvm-10.0.13-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81627.html * https://www.suse.com/security/cve/CVE-2026-93834.html * https://bugzilla.suse.com/show_bug.cgi?id=1263864 * https://bugzilla.suse.com/show_bug.cgi?id=1279962 * https://bugzilla.suse.com/show_bug.cgi?id=1282077 * https://bugzilla.suse.com/show_bug.cgi?id=1282578 * https://bugzilla.suse.com/show_bug.cgi?id=1282918 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:39:30 -0000 Subject: SUSE-SU-2026:24158-1: important: Security update for php8 Message-ID: <179206797025.22980.11505409363062833349@3bce49fe9f47> # Security update for php8 Announcement ID: SUSE-SU-2026:24158-1 Release Date: 2026-10-07T09:41:30Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.4.26 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1858 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1858 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * php8-opcache-debuginfo-8.4.26-160000.1.1 * php8-sysvshm-8.4.26-160000.1.1 * php8-sysvshm-debuginfo-8.4.26-160000.1.1 * php8-sysvsem-debuginfo-8.4.26-160000.1.1 * apache2-mod_php8-8.4.26-160000.1.1 * php8-ffi-8.4.26-160000.1.1 * php8-intl-debuginfo-8.4.26-160000.1.1 * php8-posix-debuginfo-8.4.26-160000.1.1 * php8-shmop-debuginfo-8.4.26-160000.1.1 * php8-fpm-8.4.26-160000.1.1 * php8-calendar-8.4.26-160000.1.1 * php8-fileinfo-8.4.26-160000.1.1 * php8-sqlite-8.4.26-160000.1.1 * php8-odbc-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-debuginfo-8.4.26-160000.1.1 * php8-enchant-debuginfo-8.4.26-160000.1.1 * php8-fpm-debugsource-8.4.26-160000.1.1 * php8-opcache-8.4.26-160000.1.1 * php8-xmlwriter-8.4.26-160000.1.1 * php8-mbstring-8.4.26-160000.1.1 * php8-ftp-debuginfo-8.4.26-160000.1.1 * php8-mysql-8.4.26-160000.1.1 * php8-odbc-8.4.26-160000.1.1 * php8-debugsource-8.4.26-160000.1.1 * php8-curl-debuginfo-8.4.26-160000.1.1 * php8-bcmath-debuginfo-8.4.26-160000.1.1 * php8-pgsql-8.4.26-160000.1.1 * php8-tidy-8.4.26-160000.1.1 * php8-fastcgi-debuginfo-8.4.26-160000.1.1 * php8-xmlreader-debuginfo-8.4.26-160000.1.1 * php8-sysvmsg-8.4.26-160000.1.1 * php8-xsl-debuginfo-8.4.26-160000.1.1 * php8-embed-8.4.26-160000.1.1 * php8-bz2-debuginfo-8.4.26-160000.1.1 * php8-ldap-debuginfo-8.4.26-160000.1.1 * php8-gd-debuginfo-8.4.26-160000.1.1 * php8-pgsql-debuginfo-8.4.26-160000.1.1 * php8-readline-8.4.26-160000.1.1 * php8-gd-8.4.26-160000.1.1 * apache2-mod_php8-debugsource-8.4.26-160000.1.1 * php8-sysvsem-8.4.26-160000.1.1 * apache2-mod_php8-debuginfo-8.4.26-160000.1.1 * php8-ldap-8.4.26-160000.1.1 * php8-fastcgi-debugsource-8.4.26-160000.1.1 * php8-openssl-debuginfo-8.4.26-160000.1.1 * php8-cli-8.4.26-160000.1.1 * php8-ctype-debuginfo-8.4.26-160000.1.1 * php8-zlib-debuginfo-8.4.26-160000.1.1 * php8-intl-8.4.26-160000.1.1 * php8-debuginfo-8.4.26-160000.1.1 * php8-ffi-debuginfo-8.4.26-160000.1.1 * php8-ftp-8.4.26-160000.1.1 * php8-iconv-debuginfo-8.4.26-160000.1.1 * php8-sodium-debuginfo-8.4.26-160000.1.1 * php8-fileinfo-debuginfo-8.4.26-160000.1.1 * php8-tidy-debuginfo-8.4.26-160000.1.1 * php8-xsl-8.4.26-160000.1.1 * php8-zlib-8.4.26-160000.1.1 * php8-pdo-debuginfo-8.4.26-160000.1.1 * php8-soap-debuginfo-8.4.26-160000.1.1 * php8-sockets-debuginfo-8.4.26-160000.1.1 * php8-pdo-8.4.26-160000.1.1 * php8-sysvmsg-debuginfo-8.4.26-160000.1.1 * php8-snmp-debuginfo-8.4.26-160000.1.1 * php8-calendar-debuginfo-8.4.26-160000.1.1 * php8-snmp-8.4.26-160000.1.1 * php8-fpm-debuginfo-8.4.26-160000.1.1 * php8-pcntl-debuginfo-8.4.26-160000.1.1 * php8-dom-debuginfo-8.4.26-160000.1.1 * php8-gmp-debuginfo-8.4.26-160000.1.1 * php8-bcmath-8.4.26-160000.1.1 * php8-bz2-8.4.26-160000.1.1 * php8-fastcgi-8.4.26-160000.1.1 * php8-gettext-debuginfo-8.4.26-160000.1.1 * php8-gettext-8.4.26-160000.1.1 * php8-dba-debuginfo-8.4.26-160000.1.1 * php8-8.4.26-160000.1.1 * php8-mbstring-debuginfo-8.4.26-160000.1.1 * php8-dba-8.4.26-160000.1.1 * php8-posix-8.4.26-160000.1.1 * php8-phar-8.4.26-160000.1.1 * php8-cli-debuginfo-8.4.26-160000.1.1 * php8-devel-8.4.26-160000.1.1 * php8-xmlreader-8.4.26-160000.1.1 * php8-zip-debuginfo-8.4.26-160000.1.1 * php8-phar-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-8.4.26-160000.1.1 * php8-exif-8.4.26-160000.1.1 * php8-exif-debuginfo-8.4.26-160000.1.1 * php8-dom-8.4.26-160000.1.1 * php8-readline-debuginfo-8.4.26-160000.1.1 * php8-sockets-8.4.26-160000.1.1 * php8-openssl-8.4.26-160000.1.1 * php8-pcntl-8.4.26-160000.1.1 * php8-curl-8.4.26-160000.1.1 * php8-gmp-8.4.26-160000.1.1 * php8-sodium-8.4.26-160000.1.1 * php8-zip-8.4.26-160000.1.1 * php8-ctype-8.4.26-160000.1.1 * php8-mysql-debuginfo-8.4.26-160000.1.1 * php8-enchant-8.4.26-160000.1.1 * php8-shmop-8.4.26-160000.1.1 * php8-sqlite-debuginfo-8.4.26-160000.1.1 * php8-embed-debuginfo-8.4.26-160000.1.1 * php8-xmlwriter-debuginfo-8.4.26-160000.1.1 * php8-embed-debugsource-8.4.26-160000.1.1 * php8-soap-8.4.26-160000.1.1 * php8-iconv-8.4.26-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php8-fpm-apache-8.4.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * php8-opcache-debuginfo-8.4.26-160000.1.1 * php8-sysvshm-8.4.26-160000.1.1 * php8-sysvshm-debuginfo-8.4.26-160000.1.1 * php8-sysvsem-debuginfo-8.4.26-160000.1.1 * apache2-mod_php8-8.4.26-160000.1.1 * php8-ffi-8.4.26-160000.1.1 * php8-intl-debuginfo-8.4.26-160000.1.1 * php8-posix-debuginfo-8.4.26-160000.1.1 * php8-shmop-debuginfo-8.4.26-160000.1.1 * php8-fpm-8.4.26-160000.1.1 * php8-calendar-8.4.26-160000.1.1 * php8-fileinfo-8.4.26-160000.1.1 * php8-sqlite-8.4.26-160000.1.1 * php8-odbc-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-debuginfo-8.4.26-160000.1.1 * php8-enchant-debuginfo-8.4.26-160000.1.1 * php8-fpm-debugsource-8.4.26-160000.1.1 * php8-opcache-8.4.26-160000.1.1 * php8-xmlwriter-8.4.26-160000.1.1 * php8-mbstring-8.4.26-160000.1.1 * php8-ftp-debuginfo-8.4.26-160000.1.1 * php8-mysql-8.4.26-160000.1.1 * php8-odbc-8.4.26-160000.1.1 * php8-debugsource-8.4.26-160000.1.1 * php8-curl-debuginfo-8.4.26-160000.1.1 * php8-bcmath-debuginfo-8.4.26-160000.1.1 * php8-pgsql-8.4.26-160000.1.1 * php8-tidy-8.4.26-160000.1.1 * php8-fastcgi-debuginfo-8.4.26-160000.1.1 * php8-xmlreader-debuginfo-8.4.26-160000.1.1 * php8-sysvmsg-8.4.26-160000.1.1 * php8-xsl-debuginfo-8.4.26-160000.1.1 * php8-embed-8.4.26-160000.1.1 * php8-bz2-debuginfo-8.4.26-160000.1.1 * php8-ldap-debuginfo-8.4.26-160000.1.1 * php8-gd-debuginfo-8.4.26-160000.1.1 * php8-pgsql-debuginfo-8.4.26-160000.1.1 * php8-readline-8.4.26-160000.1.1 * php8-gd-8.4.26-160000.1.1 * apache2-mod_php8-debugsource-8.4.26-160000.1.1 * php8-sysvsem-8.4.26-160000.1.1 * apache2-mod_php8-debuginfo-8.4.26-160000.1.1 * php8-ldap-8.4.26-160000.1.1 * php8-fastcgi-debugsource-8.4.26-160000.1.1 * php8-openssl-debuginfo-8.4.26-160000.1.1 * php8-cli-8.4.26-160000.1.1 * php8-ctype-debuginfo-8.4.26-160000.1.1 * php8-zlib-debuginfo-8.4.26-160000.1.1 * php8-intl-8.4.26-160000.1.1 * php8-debuginfo-8.4.26-160000.1.1 * php8-ffi-debuginfo-8.4.26-160000.1.1 * php8-ftp-8.4.26-160000.1.1 * php8-iconv-debuginfo-8.4.26-160000.1.1 * php8-sodium-debuginfo-8.4.26-160000.1.1 * php8-fileinfo-debuginfo-8.4.26-160000.1.1 * php8-tidy-debuginfo-8.4.26-160000.1.1 * php8-xsl-8.4.26-160000.1.1 * php8-zlib-8.4.26-160000.1.1 * php8-pdo-debuginfo-8.4.26-160000.1.1 * php8-soap-debuginfo-8.4.26-160000.1.1 * php8-sockets-debuginfo-8.4.26-160000.1.1 * php8-pdo-8.4.26-160000.1.1 * php8-sysvmsg-debuginfo-8.4.26-160000.1.1 * php8-snmp-debuginfo-8.4.26-160000.1.1 * php8-calendar-debuginfo-8.4.26-160000.1.1 * php8-snmp-8.4.26-160000.1.1 * php8-fpm-debuginfo-8.4.26-160000.1.1 * php8-pcntl-debuginfo-8.4.26-160000.1.1 * php8-dom-debuginfo-8.4.26-160000.1.1 * php8-gmp-debuginfo-8.4.26-160000.1.1 * php8-bcmath-8.4.26-160000.1.1 * php8-bz2-8.4.26-160000.1.1 * php8-fastcgi-8.4.26-160000.1.1 * php8-gettext-debuginfo-8.4.26-160000.1.1 * php8-gettext-8.4.26-160000.1.1 * php8-dba-debuginfo-8.4.26-160000.1.1 * php8-8.4.26-160000.1.1 * php8-mbstring-debuginfo-8.4.26-160000.1.1 * php8-dba-8.4.26-160000.1.1 * php8-posix-8.4.26-160000.1.1 * php8-phar-8.4.26-160000.1.1 * php8-cli-debuginfo-8.4.26-160000.1.1 * php8-devel-8.4.26-160000.1.1 * php8-xmlreader-8.4.26-160000.1.1 * php8-zip-debuginfo-8.4.26-160000.1.1 * php8-phar-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-8.4.26-160000.1.1 * php8-exif-8.4.26-160000.1.1 * php8-exif-debuginfo-8.4.26-160000.1.1 * php8-dom-8.4.26-160000.1.1 * php8-readline-debuginfo-8.4.26-160000.1.1 * php8-sockets-8.4.26-160000.1.1 * php8-openssl-8.4.26-160000.1.1 * php8-pcntl-8.4.26-160000.1.1 * php8-curl-8.4.26-160000.1.1 * php8-gmp-8.4.26-160000.1.1 * php8-sodium-8.4.26-160000.1.1 * php8-zip-8.4.26-160000.1.1 * php8-ctype-8.4.26-160000.1.1 * php8-mysql-debuginfo-8.4.26-160000.1.1 * php8-enchant-8.4.26-160000.1.1 * php8-shmop-8.4.26-160000.1.1 * php8-sqlite-debuginfo-8.4.26-160000.1.1 * php8-embed-debuginfo-8.4.26-160000.1.1 * php8-xmlwriter-debuginfo-8.4.26-160000.1.1 * php8-embed-debugsource-8.4.26-160000.1.1 * php8-soap-8.4.26-160000.1.1 * php8-iconv-8.4.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php8-fpm-apache-8.4.26-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:39:54 -0000 Subject: SUSE-SU-2026:24157-1: important: Security update for bind Message-ID: <179206799449.22980.17485852887813205745@3bce49fe9f47> # Security update for bind Announcement ID: SUSE-SU-2026:24157-1 Release Date: 2026-10-07T09:32:20Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280439 * bsc#1280440 * bsc#1280441 * bsc#1280442 * bsc#1280443 * bsc#1280444 * bsc#1280445 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-76163 * CVE-2026-77119 * CVE-2026-77692 * CVE-2026-78301 * CVE-2026-80274 * CVE-2026-81563 * CVE-2026-81736 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76163 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-76163 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76163 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77692 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77692 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81563 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81736 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement (bsc#1280439). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) request (bsc#1280441). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). * CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444). * CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445). Changes for bind: * Upgrade to release 9.20.29 Feature Changes: * Reject oversized and malformed DNSKEY records up front. * Speed up RPZ policy zone updates. Bug Fixes: * Prevent a crash when using both dns64 and filter-a. * Stop passing UDP client addresses to update-policy external helpers. * Missing required NSEC3 for delegation not detected. * Tighten EUI48 and EUI64 text parsing. * GeoIP ACL state could be stale or wrong after reload. * Honor DNSSEC policy key tag ranges. * Fix a double free in mdig when EDNS options are specified. * Fix a crash when an IXFR falls back to AXFR with updates still pending. * Fix DS requests to parental agents over TLS. * Fix the rndc-confgen -q (quiet) option. * Enforce query ACLs for redirect zones and searched DLZs. * Check asnum validity in GeoIP ACLs. * Fix a crash on remote-servers lists that reference themselves. * A record from outside a response policy zone could crash named. * Invalid key-store configuration could abort the DNSSEC tools. * NSEC signature set could bypass the secure-delegation check. * Fix a possible nsupdate issue when using GSS-TSIG. * Fix a crash with a single-element geoip sortlist. * Prevent out-of-bailiwick CNAMEs from evicting cached records. * Restore periodic cleanup of stale resolver address data. * Fix named-checkconf/named crash with malformed key name. * Prevent resolver crashes while processing DNS over TCP. * Ensure NSEC authority does not cross zonecut boundary. * Treat an unusable NSEC3 chain as a verification failure. * Treat non-canonical RPZ prefixes as any other failure. * Negative caching stopped working with stale-answer-client-timeout set to 0. * An unterminated OpenSSL private-key Label: field could be read past its parser buffer. * Restore SMF support on Solaris and illumos. * Fix compilation on GNU/Hurd. * dig +yaml was producing invalid YAML when a lookup failed. * Properly prevent TSIG generation command line injection attacks. * Fix a potential heap bounds overflow write in dnssec-signzone. * Fix crashes on invalid DNSTAP input in dnstap-read. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1862 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1862 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * bind-modules-ldap-debuginfo-9.20.29-160000.1.1 * bind-utils-debuginfo-9.20.29-160000.1.1 * bind-debugsource-9.20.29-160000.1.1 * bind-modules-ldap-9.20.29-160000.1.1 * bind-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-9.20.29-160000.1.1 * bind-modules-generic-debuginfo-9.20.29-160000.1.1 * bind-utils-9.20.29-160000.1.1 * bind-modules-generic-9.20.29-160000.1.1 * bind-modules-sqlite3-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-debuginfo-9.20.29-160000.1.1 * bind-modules-sqlite3-9.20.29-160000.1.1 * bind-9.20.29-160000.1.1 * bind-modules-perl-9.20.29-160000.1.1 * bind-modules-perl-debuginfo-9.20.29-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * bind-doc-9.20.29-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * bind-modules-ldap-debuginfo-9.20.29-160000.1.1 * bind-utils-debuginfo-9.20.29-160000.1.1 * bind-debugsource-9.20.29-160000.1.1 * bind-modules-ldap-9.20.29-160000.1.1 * bind-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-9.20.29-160000.1.1 * bind-modules-generic-debuginfo-9.20.29-160000.1.1 * bind-utils-9.20.29-160000.1.1 * bind-modules-generic-9.20.29-160000.1.1 * bind-modules-sqlite3-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-debuginfo-9.20.29-160000.1.1 * bind-modules-sqlite3-9.20.29-160000.1.1 * bind-9.20.29-160000.1.1 * bind-modules-perl-9.20.29-160000.1.1 * bind-modules-perl-debuginfo-9.20.29-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * bind-doc-9.20.29-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-76163.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-77692.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://www.suse.com/security/cve/CVE-2026-81563.html * https://www.suse.com/security/cve/CVE-2026-81736.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280439 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280441 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 * https://bugzilla.suse.com/show_bug.cgi?id=1280444 * https://bugzilla.suse.com/show_bug.cgi?id=1280445 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:05 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:05 -0000 Subject: SUSE-SU-2026:24156-1: moderate: Security update for swtpm Message-ID: <179206800559.22980.3268474150939254888@3bce49fe9f47> # Security update for swtpm Announcement ID: SUSE-SU-2026:24156-1 Release Date: 2026-10-07T09:32:20Z Rating: moderate References: * bsc#1221342 * bsc#1251789 * bsc#1266339 * bsc#1271417 * bsc#1275653 Cross-References: * CVE-2026-75900 CVSS scores: * CVE-2026-75900 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-75900 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for swtpm fixes the following issues: Security issue fixed: * CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for truncation following snprintf call * add upstream signing key and validate source signature * Fix SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched), create and listen on Unix stream sockets with swtpm_t processes (bsc#1266339). Already accepted on upstream: https://github.com/stefanberger/swtpm/pull/1132 * Drop tunable in require to avoid policy loading issues with toolchain 3.11 (bsc#1271417). Can be dropped, once this is accepted upstream: https://github.com/stefanberger/swtpm/pull/1139 * Update SELinux module dir as macro to allow root path move from /var/lib/selinux to /etc/selinux (bsc#1221342) * Also load swtpm_libvirt in the selinux subpackage (bsc#1251789) * Update to version 0.10.1: * swtpm: Fix build error on 32bit systems due to inconsistent _FILE_OFFSET_BITS. * swtpm_setup: * Use DISTRO_PROFILES_DIR when listing profiles (fix path issue). * Do not pass a TPM 2 profile to swtpm when reconfiguring. * selinux: * Add rule for swtpm to be able to read password from pipe. * allow to map state file. * add NFS permissions for swtpm_t. * Add rule to allow swtpm_t opening of virt_log_t files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1861 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1861 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * swtpm-selinux-0.10.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * swtpm-selinux-0.10.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-75900.html * https://bugzilla.suse.com/show_bug.cgi?id=1221342 * https://bugzilla.suse.com/show_bug.cgi?id=1251789 * https://bugzilla.suse.com/show_bug.cgi?id=1266339 * https://bugzilla.suse.com/show_bug.cgi?id=1271417 * https://bugzilla.suse.com/show_bug.cgi?id=1275653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:16 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:16 -0000 Subject: SUSE-RU-2026:24155-1: important: Recommended update for crash Message-ID: <179206801616.22980.5860240044354644721@3bce49fe9f47> # Recommended update for crash Announcement ID: SUSE-RU-2026:24155-1 Release Date: 2026-10-07T09:30:16Z Rating: important References: * bsc#1244926 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for crash fixes the following issues: Changes in crash: * vmcoreinfo: read vmcoreinfo using 'vmcoreinfo_data' when unavailable in elf note (bsc#1244926). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1857 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1857 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * crash-debugsource-9.0.0-160000.3.1 * crash-kmp-default-9.0.0_k6.12.0_160000.38-160000.3.1 * crash-devel-9.0.0-160000.3.1 * crash-debuginfo-9.0.0-160000.3.1 * crash-doc-9.0.0-160000.3.1 * crash-kmp-default-debuginfo-9.0.0_k6.12.0_160000.38-160000.3.1 * crash-9.0.0-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * crash-gcore-debuginfo-9.0.0-160000.3.1 * crash-gcore-9.0.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * crash-debugsource-9.0.0-160000.3.1 * crash-kmp-default-9.0.0_k6.12.0_160000.38-160000.3.1 * crash-devel-9.0.0-160000.3.1 * crash-debuginfo-9.0.0-160000.3.1 * crash-doc-9.0.0-160000.3.1 * crash-kmp-default-debuginfo-9.0.0_k6.12.0_160000.38-160000.3.1 * crash-9.0.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * crash-kmp-64kb-9.0.0_k6.12.0_160000.38-160000.3.1 * crash-kmp-64kb-debuginfo-9.0.0_k6.12.0_160000.38-160000.3.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * crash-gcore-debuginfo-9.0.0-160000.3.1 * crash-gcore-9.0.0-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1244926 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:30 -0000 Subject: SUSE-SU-2026:24154-1: moderate: Security update for busybox Message-ID: <179206803011.22980.4195128506528472861@3bce49fe9f47> # Security update for busybox Announcement ID: SUSE-SU-2026:24154-1 Release Date: 2026-10-06T16:10:21Z Rating: moderate References: * bsc#1217586 * bsc#1271544 * bsc#1271545 * bsc#1271547 * bsc#1271548 Cross-References: * CVE-2023-42366 * CVE-2026-38752 * CVE-2026-38753 * CVE-2026-38754 * CVE-2026-38755 CVSS scores: * CVE-2023-42366 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-42366 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-38752 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38752 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-38752 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38752 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-38753 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-38753 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-38753 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-38753 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38754 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38754 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-38754 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38754 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-38755 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38755 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-38755 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38755 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). * CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). * CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). * CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). * CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1856 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1856 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * busybox-debuginfo-1.37.0-160000.7.1 * busybox-1.37.0-160000.7.1 * busybox-static-debuginfo-1.37.0-160000.7.1 * busybox-static-1.37.0-160000.7.1 * busybox-debugsource-1.37.0-160000.7.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.7.1 * busybox-warewulf3-1.37.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * busybox-debuginfo-1.37.0-160000.7.1 * busybox-1.37.0-160000.7.1 * busybox-static-debuginfo-1.37.0-160000.7.1 * busybox-static-1.37.0-160000.7.1 * busybox-debugsource-1.37.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.7.1 * busybox-warewulf3-1.37.0-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42366.html * https://www.suse.com/security/cve/CVE-2026-38752.html * https://www.suse.com/security/cve/CVE-2026-38753.html * https://www.suse.com/security/cve/CVE-2026-38754.html * https://www.suse.com/security/cve/CVE-2026-38755.html * https://bugzilla.suse.com/show_bug.cgi?id=1217586 * https://bugzilla.suse.com/show_bug.cgi?id=1271544 * https://bugzilla.suse.com/show_bug.cgi?id=1271545 * https://bugzilla.suse.com/show_bug.cgi?id=1271547 * https://bugzilla.suse.com/show_bug.cgi?id=1271548 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:37 -0000 Subject: SUSE-SU-2026:24153-1: important: Security update for distribution Message-ID: <179206803734.22980.16943532587416687863@3bce49fe9f47> # Security update for distribution Announcement ID: SUSE-SU-2026:24153-1 Release Date: 2026-10-06T15:08:34Z Rating: important References: * bsc#1283762 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for distribution fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1855 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1855 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * distribution-registry-3.1.1-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283762 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:45 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:45 -0000 Subject: SUSE-RU-2026:24152-1: moderate: Recommended update for python-gcemetadata Message-ID: <179206804544.22980.4699560866778698951@3bce49fe9f47> # Recommended update for python-gcemetadata Announcement ID: SUSE-RU-2026:24152-1 Release Date: 2026-10-06T15:07:16Z Rating: moderate References: * bsc#1261908 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for python-gcemetadata fixes the following issues: Changes in python-gcemetadata: * Update to version 1.1.2: * Fix: openQA publiccloud test fails to boot during instance creation waiting for guestregister.service (bsc#1261908): * Avoid connection attempt to black hole * Handle IPv6 and IPv4 access to the metadata server giving IPv6 preference ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1854 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1854 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python-gcemetadata-1.1.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python-gcemetadata-1.1.2-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261908 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:40:53 -0000 Subject: SUSE-RU-2026:24151-1: moderate: Recommended update for govulncheck Message-ID: <179206805389.22980.1393143445023342493@3bce49fe9f47> # Recommended update for govulncheck Announcement ID: SUSE-RU-2026:24151-1 Release Date: 2026-10-06T15:00:10Z Rating: moderate References: * bsc#1248678 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for govulncheck fixes the following issues: Changes in govulncheck: * Packaging improvements: * Update to BuildRequires: golang(API) >= 1.27 latest stable. This tool requires that it be built with the same or newer go1.x toolchain as the Go applications it operates on. * Refs boo#1248678 * Update to version 1.7.0: * go.mod: update golang.org/x dependencies * Update to version 1.6.0: * go.mod: update golang.org/x dependencies * Update to version 1.5.0: * go.mod: update golang.org/x dependencies * all: update to x/tools at 0602b30930e3 * Update to version 1.4.0: * cmd/govulncheck: fix exit code propagation for wrapped scan errors * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * Update to version 1.3.0: * go.mod: update golang.org/x dependencies * internal/scan: exit after printing version info * Update to version 1.2.0: * go.mod: update golang.org/x dependencies * Update to version 1.1.4+git24.4ac723d: * go.mod: update golang.org/x dependencies * Update to version 1.1.4+git23.a9cf566: * all: upgrade go directive to at least 1.25.0 [generated] * go.mod: update golang.org/x dependencies * vuln: add codereview.cfg * cmd/govulncheck: remove gotypesalias.go (not needed anymore) * internal/scan: improve error message for govulncheck * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * cmd/govulncheck: use docker image with go 1.25 * all: upgrade go directive to at least 1.24.0 [generated] * go.mod: update golang.org/x dependencies * internal/buildinfo: stop testing the windows/arm port * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * cmd/govulncheck/integration: update go version in Dockerfile * all: upgrade go directive to at least 1.23.0 [generated] * go.mod: update golang.org/x dependencies * internal/vulncheck: add Unalias call * Packaging improvements: * Update to BuildRequires: golang(API) >= 1.26 latest stable. This tool requires the latest stable Go toolchain to check other Go applications using that latest stable version of Go. * Refs boo#1248678 * _service tar_scm set revision to branch main until upstream next has a tagged release * _service tar_scm when revision is a branch name e.g. master use versionformat @PARENT_TAG at +git@TAG_OFFSET at .%h to represent git commit history included beyond last tagged release. Archive name will be: name-X.Y.Z+gitN.shortsha.tar.gz. When upstream project resumes tagged releases drop the param versionformat and restore revision to tag name e.g. vX.Y.Z. * Packaging improvements: * Update to BuildRequires: golang(API) >= 1.25 latest stable. This tool requires the latest stable Go toolchain to check other Go applications using that latest stable version of Go. * Refs boo#1248678 * Update to version 1.1.4: * go.mod: update golang.org/x dependencies * go.mod: update golang.org/x dependencies * cmd/govulncheck: remove unnecessary fixups * cmd/govulncheck: better mask new (sbom) versions * cmd/govulncheck: mask dirty dependency versions * cmd/govulncheck: add missing test data * cmd/govulncheck: set gotypesalias=1 when using >=1.23 toolchain * go.mod: update golang.org/x dependencies * internal/sarif: use empty arrays instead of nils * cmd/govulncheck/testdata: expand set of go versions in fixup * cmd/govulncheck: remove unused fixup * internal/scan: add amounts to sbom text output * internal/scan: remove 'scanning n packages...' msg * internal/scan: add SBOM to text output * internal/vulncheck: pass SBOM to handlers * go.mod: update golang.org/x dependencies * internal/semver: add SemverToGoTag * internal/govulncheck: add sbom message type * internal/openvex: refactor PURL * internal/openvex: populate product subcomponents * internal/scan: do not show stacks in traces mode for binaries * internal/scan: reorganize trace text layout in trace mode * go.mod: update golang.org/x dependencies * internal/vulncheck: remove use of ssautil.AllFunctions * cmd/govulncheck: update test file for main module vulnerabilities * cmd/govulncheck: add docs on detecting main module vulns * go.mod: update golang.org/x dependencies * cmd/govulncheck: update unit tests * internal/vulncheck: properly check for main package vulns * internal/vulncheck: explicitly exclude devel from affected ranges * internal/vulncheck: consider main module when checking bin vulns * internal/vulncheck: exclude dev go versions from ancient check * Packaging improvements: * Update to BuildRequires: golang(API) >= 1.22 matching go.mod ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1852 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1852 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * govulncheck-1.8.0-160000.1.1 * govulncheck-debuginfo-1.8.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * govulncheck-1.8.0-160000.1.1 * govulncheck-debuginfo-1.8.0-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1248678 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:41:03 -0000 Subject: SUSE-SU-2026:24150-1: important: Security update for amazon-ecs-init Message-ID: <179206806394.22980.15482971166952764418@3bce49fe9f47> # Security update for amazon-ecs-init Announcement ID: SUSE-SU-2026:24150-1 Release Date: 2026-10-06T14:54:50Z Rating: important References: * bsc#1276744 * bsc#1279231 * bsc#1279329 Cross-References: * CVE-2026-41178 * CVE-2026-84303 * CVE-2026-84304 CVSS scores: * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for amazon-ecs-init fixes the following issues: * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). * CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279329). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279231). Changes for amazon-ecs-init: * Update to version 1.107.0 * Feature - Add MPS GPU Sharing capability (#5139) * Enhancement - Add MPS control daemon health gate task resource (#5107) * Enhancement - Surface MPS control-daemon impairment reason as StatusReason (#5125) * Enhancement - Attach the MPS control daemon health gate to MPS tasks (#5119) * Enhancement - Add ACCELERATED_COMPUTE health check for the MPS control daemon (#5124) * Enhancement - Fetch GPG keys from S3 instead of GitHub in ECS Anywhere install script (#5130) * Enhancement - Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent (#5117) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.20.4 in /agent (#5128) * Enhancement - Bump github.com/containerd/containerd from 1.7.33 to 1.7.35 in /ecs-init (#5133) * Enhancement - Bump google.golang.org/grpc from 1.82.1 to 1.83.1, this also updated go.opentelemetry.io/otel to v1.44.0 in /ecs-agent, /ecs- agent/daemonimages/csidriver and /agent (#5123) * Enhancement - Bump k8s.io/api from 0.28.1 to 0.37.0 in /agent (#5118) * Enhancement - Correct broken systemd link in README (#5129) * Enhancement - Bump golang.org/x/text and related dependencies (#5100) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.33 to 1.18.38 in /ecs-agent (#5093) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.35.2 to 1.44.7 in /agent (#5094) * Enhancement - Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 (#5108) * Enhancement - Update Go version to 1.26.7 (#5105) * Enhancement - Add amazon-ecs-agent.gpg and amazon-ssm-agent.gpg to the CodePipeline release artifacts (#5101) * Enhancement - IMDS credentials scanner/refresher: Add logging and validations (#5091) * Enhancement - Bump github.com/containerd/cgroups/v3 from 3.0.4 to 3.1.3 in /agent (#5081) * Enhancement - Bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /ecs- agent and /agent (#5085) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.32 in /ecs-agent, /agent and /ecs-init (#5080) * Bugfix - fix(handlers): raise fault rate limit to 1 rps (#5092) * Feature - Nvidia MPS GPU sharing (not yet enabled) * Add MPS control-daemon health probe (#5095) * Add per-GPU memory accounting to host resource manager (#5090) * Allow MPS containers to colocate on a shared GPU (#5083) * Mount MPS control binary and pipe dir into the agent container (#5086) * Move MPS pipe directory to /run/mps-ecs (#5102) * Enhancement - Add retry for EFS volume creation to handle plugin timeout errors caused by concurrent mount operation (#5077) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.32.23 to 1.32.31 in /agent (#5064) * Enhancement - Bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /ecs- agent/daemonimages/csidriver (#5056) * Enhancement - Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /ecs-agent (#5063) * Enhancement - add nos3readcache S3 Files mount option (#5062) * Add ecs.capability.gpu-sharing-mps capability for NVIDIA MPS GPU sharing (#5053) * Inject NVIDIA MPS env vars and pipe mount into MPS containers (#5082) * Map ACS GPU sharingStrategy onto the internal container model for MPS (#5076) * Gate gpu-sharing-mps on complete per-GPU memory- (#5075) (#5075) * Regenerate ACS model for GPU sharingStrategy and validate it (#5071) * Report per-GPU memory at container instance registration for GPU sharing (#5061) * Regenerate ECS SDK with gpuInfo on PlatformDevice (#5060) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1851 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1851 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * amazon-ecs-init-1.107.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * amazon-ecs-init-1.107.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://bugzilla.suse.com/show_bug.cgi?id=1276744 * https://bugzilla.suse.com/show_bug.cgi?id=1279231 * https://bugzilla.suse.com/show_bug.cgi?id=1279329 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:23 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:41:23 -0000 Subject: SUSE-SU-2026:24149-1: important: Security update for jackson-annotations, jackson-core, jackson-databind Message-ID: <179206808327.22980.9157791096502895886@3bce49fe9f47> # Security update for jackson-annotations, jackson-core, jackson-databind Announcement ID: SUSE-SU-2026:24149-1 Release Date: 2026-10-06T14:12:46Z Rating: important References: * bsc#1273856 * bsc#1273857 * bsc#1277883 * bsc#1278008 * bsc#1280125 * bsc#1282491 * bsc#1282492 * bsc#1282505 * bsc#1282641 * bsc#1282645 Cross-References: * CVE-2026-18401 * CVE-2026-19032 * CVE-2026-68494 * CVE-2026-68497 * CVE-2026-68498 * CVE-2026-83557 * CVE-2026-89407 * CVE-2026-89425 * CVE-2026-91776 * CVE-2026-91777 CVSS scores: * CVE-2026-18401 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18401 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18401 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19032 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19032 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-19032 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-68494 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68494 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68494 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-68497 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68497 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68497 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68498 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-83557 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-83557 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-83557 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89407 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89407 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89425 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89425 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91776 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-91776 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-91776 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91777 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: * CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). * CVE-2026-19032: deserializer for `java.nio.file.Path` resolves attacker- supplied URIs without restricting the URI scheme (bsc#1277883). * CVE-2026-68494: Async parser maxNumberLength bypass via chunked digit accumulation (bsc#1273857). * CVE-2026-68497: An unauthenticated attacker can therefore submit a single request of a few megabytes (bsc#1280125). * CVE-2026-68498: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641). * CVE-2026-83557: incomplete `PolymorphicTypeValidator` denylist allows for arbitrary `Comparable` deserialization (bsc#1278008). * CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber (bsc#1282645). * CVE-2026-89425: `UTF8DataInputJsonParser._reportInvalidToken()`lacks `maxErrorTokenLength` limit, which allows for unbounded `StringBuilder` growth and can lead to a DoS when malformed tokens are processed (bsc#1282505). * CVE-2026-91776: `TypeDeserializerBase._findDeserializer()` caches the resolved deserializer under the raw, attacker- supplied type ID, which can lead to unbounded cache growth under certain configurations (bsc#1282491). * CVE-2026-91777: forward-reference completion for `@JsonIdentityInfo` object IDs performs a linear scan of the pending- reference accumulator for every resolved ID, which can lead to quadratic CPU work during deserialization (bsc#1282492). Changes for jackson-annotations: * Update to 2.18.11 Changes for jackson-core: * Update to 2.18.11 * # 1649: Optimize NumberInput.looksLikeValidNumber (bsc#1282645, CVE-2026-89407) * # 1698: UTF8DataInputJsonParser does not honor maxErrorTokenLength when reporting an unrecognized token (bsc#1282505, CVE-2026-89425) * # 1642: Fix maxDocumentLength bypass in async parser single-feedInput() case [GHSA-2c4j-63jj-9fqr] * # 1643: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641, CVE-2026-68498) of async parser (bsc#1273857, CVE-2026-68494) non-blocking (async) parser (bsc#1273856, CVE-2026-18401) Changes for jackson-databind: * Update to 2.18.11 * # 6185: Bracket unresolved IPv6 host name in InetSocketAddress serialization * # 6203: Prevent unbounded growth of type id cache in TypeDeserializer (bsc#1282491, CVE-2026-91776) * # 6204: Avoid quadratic forward-reference resolution in Collection/Map deserializers (bsc#1282492, CVE-2026-91777) * # 6099: Resolve classes without initialization in TypeFactory.findClass() * # 6116: Reject non-ASCII digits in InetAddress literal validation * # 6127: Add StreamReadConstraints number len constraint to javax.xml.datatype.XMLGregorianCalendar and javax.xml.datatype.Duration (bsc#1280125, CVE-2026-68497) * # 6129: Limit the supported URL schemes for java.nio.file.Path deserialization (bsc#1277883, CVE-2026-19032) * # 6156: Add java.lang.Comparable in set of unsafe polymorphic base types (bsc#1278008, CVE-2026-83557) * # 6165: Apply number length limits to BigDecimal/BigInteger/ /Double/Float Map keys ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1850 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1850 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * jackson-annotations-2.18.11-160000.1.1 * jackson-databind-javadoc-2.18.11-160000.1.1 * jackson-databind-2.18.11-160000.1.1 * jackson-core-2.18.11-160000.1.1 * jackson-core-javadoc-2.18.11-160000.1.1 * jackson-annotations-javadoc-2.18.11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * jackson-annotations-2.18.11-160000.1.1 * jackson-databind-javadoc-2.18.11-160000.1.1 * jackson-databind-2.18.11-160000.1.1 * jackson-core-2.18.11-160000.1.1 * jackson-core-javadoc-2.18.11-160000.1.1 * jackson-annotations-javadoc-2.18.11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18401.html * https://www.suse.com/security/cve/CVE-2026-19032.html * https://www.suse.com/security/cve/CVE-2026-68494.html * https://www.suse.com/security/cve/CVE-2026-68497.html * https://www.suse.com/security/cve/CVE-2026-68498.html * https://www.suse.com/security/cve/CVE-2026-83557.html * https://www.suse.com/security/cve/CVE-2026-89407.html * https://www.suse.com/security/cve/CVE-2026-89425.html * https://www.suse.com/security/cve/CVE-2026-91776.html * https://www.suse.com/security/cve/CVE-2026-91777.html * https://bugzilla.suse.com/show_bug.cgi?id=1273856 * https://bugzilla.suse.com/show_bug.cgi?id=1273857 * https://bugzilla.suse.com/show_bug.cgi?id=1277883 * https://bugzilla.suse.com/show_bug.cgi?id=1278008 * https://bugzilla.suse.com/show_bug.cgi?id=1280125 * https://bugzilla.suse.com/show_bug.cgi?id=1282491 * https://bugzilla.suse.com/show_bug.cgi?id=1282492 * https://bugzilla.suse.com/show_bug.cgi?id=1282505 * https://bugzilla.suse.com/show_bug.cgi?id=1282641 * https://bugzilla.suse.com/show_bug.cgi?id=1282645 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:50 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:41:50 -0000 Subject: SUSE-SU-2026:24148-1: important: Security update for alloy Message-ID: <179206811066.22980.3385313837469202199@3bce49fe9f47> # Security update for alloy Announcement ID: SUSE-SU-2026:24148-1 Release Date: 2026-10-06T13:15:27Z Rating: important References: * bsc#1267482 * bsc#1267483 * bsc#1267484 * bsc#1267486 * bsc#1267487 * bsc#1268982 * bsc#1269861 * bsc#1272028 * bsc#1272418 * bsc#1276742 * bsc#1276982 * bsc#1276992 * bsc#1277429 * bsc#1277996 * bsc#1278671 * bsc#1278693 * bsc#1280671 Cross-References: * CVE-2026-2303 * CVE-2026-37236 * CVE-2026-41178 * CVE-2026-45679 * CVE-2026-45680 * CVE-2026-45681 * CVE-2026-45683 * CVE-2026-45684 * CVE-2026-46600 * CVE-2026-48496 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-75889 * CVE-2026-78662 * CVE-2026-81521 * CVE-2026-89090 CVSS scores: * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-37236 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-37236 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-37236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45679 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-45679 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45679 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45680 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45680 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45681 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( NVD ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2026-45684 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45684 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-46600 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46600 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-75889 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-75889 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-75889 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81521 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-81521 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81521 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for alloy fixes the following issues: * CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of- Bounds Read in GSSAPI Error Handling (bsc#1269861). * CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method- Override header and bypass established access control (bsc#1277996). * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276742). * CVE-2026-45679: go.opentelemetry.io/obi: Redis error text is exported in span status messages and can lead to exfiltration of sensitive data (bsc#1267482). * CVE-2026-45680: go.opentelemetry.io/obi: unbounded BPF internal metrics replay can exhaust CPU and cause a DoS (bsc#1267483). * CVE-2026-45681: go.opentelemetry.io/obi: CPU-mismatch fallback uses 256-byte buffer with 8KB size and can cause OBI out-of-bounds reads to leak memory into telemetry (bsc#1267484). * CVE-2026-45683: go.opentelemetry.io/obi: Java TLS ioctl kprobe allows a user to point OBI at kernel memory and cause that memory to be copied into telemetry (bsc#1267486). * CVE-2026-45684: go.opentelemetry.io/obi: log enricher mishandled `writev` buffers and allows multi-segment calls to read and overwrite memory beyond the first segment (bsc#1267487). * CVE-2026-46600: golang.org/x/net/dns/dnsmessage: Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer (bsc#1272418). * CVE-2026-48496: opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent (bsc#1268982). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272028). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278671). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276982). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276992). * CVE-2026-75889: arbitrary file reads due to the `prometheus.operator.servicemonitors` component allowing users who can modify `ServiceMonitor` resources in a watched namespace to specify an arbitrary local file through `bearerTokenFile` (bsc#1277429). * CVE-2026-81521: go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (bsc#1278693). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280671). Changes for alloy: Update to version 1.19.2: * Remove withdrawn lib/pq CVEs from govulncheck * Add backticks to component name in generated doc output * BREAKING CHANGE: prometheus.operator.servicemonitors now rejects endpoints that reference local files by default. Set allow_arbitrary_file_access = true to preserve previous behavior. * prometheus.enrich: Support multi-label matching * prometheus.relabel: Add opt-in TTL cache mode * telemetry: Add new metrics for graph connections and pyroscope forwarded entries * database_observability: Exclude system schemas from MySQL health checks and redact query text in explain_plans * Add nop receiver to OTel Engine * Backport dependency upgrades to address GO-2026-6061 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1848 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1848 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * alloy-debuginfo-1.19.2-160000.1.1 * alloy-1.19.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * alloy-debuginfo-1.19.2-160000.1.1 * alloy-1.19.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-37236.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-45679.html * https://www.suse.com/security/cve/CVE-2026-45680.html * https://www.suse.com/security/cve/CVE-2026-45681.html * https://www.suse.com/security/cve/CVE-2026-45683.html * https://www.suse.com/security/cve/CVE-2026-45684.html * https://www.suse.com/security/cve/CVE-2026-46600.html * https://www.suse.com/security/cve/CVE-2026-48496.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-75889.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81521.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1267482 * https://bugzilla.suse.com/show_bug.cgi?id=1267483 * https://bugzilla.suse.com/show_bug.cgi?id=1267484 * https://bugzilla.suse.com/show_bug.cgi?id=1267486 * https://bugzilla.suse.com/show_bug.cgi?id=1267487 * https://bugzilla.suse.com/show_bug.cgi?id=1268982 * https://bugzilla.suse.com/show_bug.cgi?id=1269861 * https://bugzilla.suse.com/show_bug.cgi?id=1272028 * https://bugzilla.suse.com/show_bug.cgi?id=1272418 * https://bugzilla.suse.com/show_bug.cgi?id=1276742 * https://bugzilla.suse.com/show_bug.cgi?id=1276982 * https://bugzilla.suse.com/show_bug.cgi?id=1276992 * https://bugzilla.suse.com/show_bug.cgi?id=1277429 * https://bugzilla.suse.com/show_bug.cgi?id=1277996 * https://bugzilla.suse.com/show_bug.cgi?id=1278671 * https://bugzilla.suse.com/show_bug.cgi?id=1278693 * https://bugzilla.suse.com/show_bug.cgi?id=1280671 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:56 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:41:56 -0000 Subject: SUSE-RU-2026:24147-1: moderate: Recommended update for grub2 Message-ID: <179206811659.22980.5219407242795489937@3bce49fe9f47> # Recommended update for grub2 Announcement ID: SUSE-RU-2026:24147-1 Release Date: 2026-10-06T13:09:35Z Rating: moderate References: * bsc#1278729 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for grub2 fixes the following issues: Changes in grub2: * Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1849 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1849 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * grub2-2.12-160000.8.1 * grub2-common-debuginfo-2.12-160000.8.1 * grub2-common-2.12-160000.8.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * grub2-debugsource-2.12-160000.8.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * grub2-snapper-plugin-2.12-160000.8.1 * grub2-powerpc-ieee1275-2.12-160000.8.1 * grub2-x86_64-efi-2.12-160000.8.1 * grub2-systemd-sleep-plugin-2.12-160000.8.1 * grub2-i386-pc-2.12-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * grub2-2.12-160000.8.1 * grub2-common-debuginfo-2.12-160000.8.1 * grub2-common-2.12-160000.8.1 * SUSE Linux Enterprise Server 16.0 (noarch) * grub2-arm64-efi-2.12-160000.8.1 * grub2-snapper-plugin-2.12-160000.8.1 * grub2-powerpc-ieee1275-2.12-160000.8.1 * grub2-x86_64-efi-2.12-160000.8.1 * grub2-systemd-sleep-plugin-2.12-160000.8.1 * grub2-i386-pc-2.12-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 s390x x86_64) * grub2-debugsource-2.12-160000.8.1 * SUSE Linux Enterprise Server 16.0 (s390x) * grub2-s390x-emu-2.12-160000.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278729 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:03 -0000 Subject: SUSE-RU-2026:24146-1: moderate: Recommended update for osinfo-db Message-ID: <179206812355.22980.13128295630814288791@3bce49fe9f47> # Recommended update for osinfo-db Announcement ID: SUSE-RU-2026:24146-1 Release Date: 2026-10-06T13:02:10Z Rating: moderate References: * bsc#1268781 * jsc#PED-14625 * jsc#PED-14636 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains two features and has one fix can now be installed. ## Description: This update for osinfo-db fixes the following issues: Changes in osinfo-db: * Update to database version 20260812 (jsc#PED-14625): * Set UEFI as default for new VMs (jsc#PED-14636) * Drop patches contained in new tarball * Fix: inconsistent OS names in virt-install for 16.0 (bsc#1268781) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1846 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1846 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * osinfo-db-20260812-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * osinfo-db-20260812-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1268781 * https://jira.suse.com/browse/PED-14625 * https://jira.suse.com/browse/PED-14636 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:09 -0000 Subject: SUSE-SU-2026:24145-1: important: Security update for libXtst Message-ID: <179206812990.22980.17019960777942716421@3bce49fe9f47> # Security update for libXtst Announcement ID: SUSE-SU-2026:24145-1 Release Date: 2026-10-06T12:59:19Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1847 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1847 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXtst6-debuginfo-1.2.5-160000.4.1 * libXtst-devel-1.2.5-160000.4.1 * libXtst-debugsource-1.2.5-160000.4.1 * libXtst6-1.2.5-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXtst6-debuginfo-1.2.5-160000.4.1 * libXtst-devel-1.2.5-160000.4.1 * libXtst-debugsource-1.2.5-160000.4.1 * libXtst6-1.2.5-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:15 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:15 -0000 Subject: SUSE-SU-2026:24144-1: important: Security update for wpa_supplicant Message-ID: <179206813551.22980.7172047351127283903@3bce49fe9f47> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24144-1 Release Date: 2026-10-05T17:48:33Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: Security issues fixed: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1833 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1833 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 * wpa_supplicant-debugsource-2.11-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 * wpa_supplicant-debugsource-2.11-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:22 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:22 -0000 Subject: SUSE-RU-2026:24143-1: moderate: Recommended update for vexctl Message-ID: <179206814222.22980.9465007291004772518@3bce49fe9f47> # Recommended update for vexctl Announcement ID: SUSE-RU-2026:24143-1 Release Date: 2026-10-05T12:29:06Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for vexctl fixes the following issues: Changes in vexctl: * Update to version 0.4.4+git91.839fbf5. * Normalize document products once when attesting * Resolve image digests concurrently and honor context in attest * Preallocate slices and drop redundant stat before MkdirAll * Read SARIF report from stdin without a temp file * Index VEX statements by vulnerability when filtering SARIF reports * Update to version 0.4.4+git70.36f6f3a: * Fix Windows failures found by the OS test matrix * Modernize the release SBOM * Test on the stable Go release across operating systems * Drop the snapshot workflow * Update readme * Add e2e registry test * Fix image reference resolution * Attach attestations as OCI referrers and read both layouts * Move signing to sigstore bundles * Bump dep versions * Compute Go versions and run matrix tests * Do not dereference a missing document timestamp in ApplySingleVEX * Update to version 0.4.4+git44.d69ce1a: * Add OWNERS and aliases with new maintainers * fix: append package name to repository_url when normalizing oci purls ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1828 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1828 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * vexctl-0.4.4+git91.839fbf5-160000.1.1 * vexctl-debuginfo-0.4.4+git91.839fbf5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * vexctl-0.4.4+git91.839fbf5-160000.1.1 * vexctl-debuginfo-0.4.4+git91.839fbf5-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:27 -0000 Subject: SUSE-SU-2026:24142-1: moderate: Security update for govulncheck-vulndb Message-ID: <179206814799.22980.2819445842521237258@3bce49fe9f47> # Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2026:24142-1 Release Date: 2026-10-05T12:29:06Z Rating: moderate References: * jsc#PED-11136 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature can now be installed. ## Description: This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20261001T202415 2026-10-01T20:24:15Z (jsc#PED-11136): * GO-2024-2584 GHSA-86h5-xcpx-cfqc * GO-2026-5544 GHSA-pjv4-3c63-699f * GO-2026-6480 GHSA-2g8v-grq3-hq2g * GO-2026-6481 GHSA-g5vr-6pgg-74qv * GO-2026-6482 GHSA-h998-hxxj-8q83 * GO-2026-6483 GHSA-jqgv-39mg-7c2r * GO-2026-6484 GHSA-mxq2-5jpg-7474 * GO-2026-6485 GHSA-r8cr-4f9w-7r75 * GO-2026-6486 GHSA-rf68-8gjr-36q7 * GO-2026-6487 GHSA-4595-rvpx-4q34 * GO-2026-6488 GHSA-g3pg-frfm-pr2m * GO-2026-6490 GHSA-9468-v6mj-fppw * GO-2026-6491 GHSA-27gv-rfvv-22mv * GO-2026-6492 GHSA-33mj-cw25-m34h * GO-2026-6493 GHSA-465g-fh3v-9jw4 * GO-2026-6494 GHSA-4v58-74mf-rjx3 * GO-2026-6495 GHSA-5gpm-rgj3-9q76 * GO-2026-6496 GHSA-c5pq-fr2g-9jpf * GO-2026-6497 GHSA-h7vf-4x9w-h99v * GO-2026-6498 GHSA-j497-x9hr-x34x * GO-2026-6499 GHSA-m37j-52j7-pjw7 * GO-2026-6500 GHSA-r9c8-gcjp-xfwh * GO-2026-6502 GHSA-rm6m-hrcw-jw33 * GO-2026-6503 GHSA-xwwf-m8fg-p9q2 * GO-2026-6505 GHSA-8wmf-6v46-5gfg * GO-2026-6506 GHSA-9gm5-9rfh-m6vx * GO-2026-6507 GHSA-mrg3-qvqr-jw29 * GO-2026-6508 GHSA-w34q-cm8f-9c5x * GO-2026-6512 GHSA-j8px-rmrx-76h9 * GO-2026-6514 GHSA-4227-9989-jrhx * GO-2026-6515 GHSA-5gm3-9crp-6g3v * GO-2026-6516 GHSA-5p54-whvp-x327 * GO-2026-6517 GHSA-c8w2-fgvx-vhv4 * GO-2026-6518 GHSA-cjgj-2fwf-4c2w * GO-2026-6519 GHSA-f94q-w3w8-cj67 * GO-2026-6520 GHSA-gjw4-3v3v-rqxg * GO-2026-6521 GHSA-gxjc-74v5-3vx3 * GO-2026-6522 GHSA-jgh3-fggc-mcpm * GO-2026-6523 GHSA-p5vg-v7mj-f6q4 * GO-2026-6525 GHSA-pr6h-vr44-xq8j * GO-2026-6526 GHSA-qg2g-g9w3-m5h8 * GO-2026-6527 GHSA-qg67-7m6v-qg25 * GO-2026-6528 GHSA-vr5f-w35q-98jp * GO-2026-6529 GHSA-w72w-9qmj-c9qm * GO-2026-6530 GHSA-xwmw-prc4-v3cr * GO-2026-6535 GHSA-phg3-3g28-wq9v * GO-2026-6537 GHSA-hf33-q6cf-c66f * GO-2026-6538 GHSA-jhjp-4c2q-xmx4 * GO-2026-6539 GHSA-jr34-h97m-9hpx * GO-2026-6540 GHSA-pxcx-fv34-x9p5 * GO-2026-6541 GHSA-3w66-95m3-8jxg * GO-2026-6542 GHSA-9g84-39mm-q4p3 * GO-2026-6543 GHSA-crm4-q7v4-c2r2 * GO-2026-6544 GHSA-f74p-cwhp-x2wx * GO-2026-6545 GHSA-9493-h4f5-633x * GO-2026-6547 GHSA-xmfh-3ccg-c9fx * GO-2026-6548 GHSA-65gg-g7rw-6cpc * GO-2026-6549 GHSA-cqxr-jxr2-85pq * GO-2026-6550 GHSA-pg59-5vwg-4jxq * GO-2026-6552 GHSA-328g-jx67-v94g * GO-2026-6553 GHSA-34fc-gh42-pj53 * GO-2026-6554 GHSA-444v-8vxr-p36h * GO-2026-6555 GHSA-456h-ww26-f758 * GO-2026-6556 GHSA-59w7-v8rr-pr4p * GO-2026-6557 GHSA-5jpj-293f-rhvj * GO-2026-6558 GHSA-8fcf-v89g-xpg6 * GO-2026-6559 GHSA-8h6x-h86x-75wh * GO-2026-6560 GHSA-992g-9cr3-vm5x * GO-2026-6561 GHSA-9q4h-f4x5-ffq8 * GO-2026-6563 GHSA-9vm9-pqxx-x83v * GO-2026-6564 GHSA-9xhm-w3wj-xhqh * GO-2026-6565 GHSA-fjwv-jf2v-j499 * GO-2026-6566 GHSA-fq95-v8xc-jm3v * GO-2026-6567 GHSA-g26x-m427-f48f * GO-2026-6568 GHSA-gfjv-gqf2-c888 * GO-2026-6569 GHSA-gfw4-49f9-cp25 * GO-2026-6570 GHSA-jpf4-98qj-qr67 * GO-2026-6571 GHSA-jpvm-9frm-hjcq * GO-2026-6572 GHSA-jvh5-97xg-v99f * GO-2026-6573 GHSA-m3c6-2p7h-cfr3 * GO-2026-6574 GHSA-qgw5-7j4f-fg97 * GO-2026-6575 GHSA-vxg7-f2jj-jmqm * GO-2026-6576 GHSA-w89x-c962-c44g * GO-2026-6577 GHSA-xhmx-w2j4-rw3q * GO-2026-6578 GHSA-xj3h-wwxq-gfcj * GO-2026-6579 GHSA-xp3c-3jw3-4vcr * GO-2026-6581 GHSA-4fwh-wrm6-97xm * GO-2026-6582 GHSA-97cv-x867-6xhm * GO-2026-6583 GHSA-9v8p-frvj-2pcm * GO-2026-6584 GHSA-26r5-4mm2-px5c * GO-2026-6585 GHSA-7c7c-373r-gfjj * GO-2026-6586 GHSA-9wh6-9hq7-9688 * GO-2026-6588 GHSA-fx76-2j3w-2mx6 * GO-2026-6589 GHSA-9993-rfwp-rhwf * GO-2026-6590 GHSA-9xm2-gw56-wj7m * GO-2026-6591 GHSA-fgmf-7rf8-m6vf * GO-2026-6592 GHSA-xcw9-qmmf-vqxj * GO-2026-6594 GHSA-4hq8-gpf5-8p68 * GO-2026-6595 GHSA-w3rp-4cm2-4wgc * GO-2026-6596 GHSA-w7c2-w76w-5hmj * GO-2026-6597 GHSA-pg57-6jwg-q645 * GO-2026-6615 GHSA-hjf4-fphr-2h65 * GO-2026-6616 GHSA-p9f8-wvj8-2fg8 * GO-2026-6619 GHSA-87x6-8m9v-g8c2 * GO-2026-6620 GHSA-mvmf-94v6-879g ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1827 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1827 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * govulncheck-vulndb-0.0.20261001T202415-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * govulncheck-vulndb-0.0.20261001T202415-160000.1.1 ## References: * https://jira.suse.com/browse/PED-11136 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:41 -0000 Subject: SUSE-SU-2026:4678-1: important: Security update for iperf Message-ID: <179206816156.22980.3843190969301434670@3bce49fe9f47> # Security update for iperf Announcement ID: SUSE-SU-2026:4678-1 Release Date: 2026-10-15T07:27:45Z Rating: important References: * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1284404 * bsc#1284405 Cross-References: * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-71217 * CVE-2026-71218 CVSS scores: * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4678 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4678 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * iperf-debuginfo-3.22-150000.3.18.1 * libiperf0-debuginfo-3.22-150000.3.18.1 * iperf-debugsource-3.22-150000.3.18.1 * libiperf0-3.22-150000.3.18.1 * iperf-3.22-150000.3.18.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.22-150000.3.18.1 * iperf-devel-3.22-150000.3.18.1 * libiperf0-debuginfo-3.22-150000.3.18.1 * iperf-debugsource-3.22-150000.3.18.1 * libiperf0-3.22-150000.3.18.1 * iperf-3.22-150000.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:52 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 12:42:52 -0000 Subject: SUSE-SU-2026:4677-1: important: Security update for the Java stack Message-ID: <179206817240.22980.1381110251752974001@3bce49fe9f47> # Security update for the Java stack Announcement ID: SUSE-SU-2026:4677-1 Release Date: 2026-10-15T05:56:27Z Rating: important References: * bsc#1188469 * bsc#1246873 * bsc#1273185 * bsc#1280015 Cross-References: * CVE-2021-36374 * CVE-2025-7962 * CVE-2026-78254 CVSS scores: * CVE-2021-36374 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-36374 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-7962 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-7962 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2025-7962 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-7962 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78254 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78254 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78254 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant (Updated to version 1.10.18): * Security issues fixed: * CVE-2021-36374: Fixed excessive memory allocation when reading specially crafted ZIP archives or derived formats (bsc#1188469) * CVE-2025-7962: Fixed improper neutralization of line breaks to prevent SMTP injection (bsc#1246873) * CVE-2026-78254: Fixed path traversal in FTP and SCP tasks that could allow arbitrary file writes (bsc#1280015) * Other changes and bugs fixed: * Breaking changes: * FTPS tasks now use encrypted data channels by default. * FTP and SCP tasks now prevent files or directories from being written outside the target directory by default. * Other changes: * Added package `ant-junit5` that allows tests to be launched and run using the JUnit 5 framework. * Improved support for reproducible builds by standardizing timestamps, file modification times, and timezone handling. * Upgraded the jakarta.mail dependency to version 2.0.2. * Added an option to the "record" task to create log files relative to the project directory. * Bugs fixed: * Fixed compatibility and startup issues when running on newer Java versions. * Fixed network handling issues in FTP and SCP tasks, including proper support for IPv6 addresses. * Improved security in email tasks by verifying TLS server certificates and enforcing STARTTLS encryption. * Improved report generation performance in JUnit launcher tasks. * Fixed regressions and edge cases in resource mapping, path conversion, and command execution. json-simple (Updated to version 2.3.1): * Updated to a newer version that makes reading and writing structured web data (JSON) safer and more reliable. * Added a "pretty-printing" feature to format web data so it is easier to read. * Made reading and writing data safer when multiple tasks are running simultaneously. * Made looking up data more flexible, allowing the tool to automatically handle different format types (like numbers and text). junit5 (Updated to version 5.14.4): * Fixed an issue where tests could conflict or run incorrectly when executed at the same time. * Corrected test behavior on newer versions of Java so they run reliably. * Improved test reports so that test names are clearer, unique, and easier to distinguish from one another. * Added features to customize how test names are generated and better capture testing outputs. maven-doxia, maven-doxia-sitetools (Updated to version 2.1.0): * Added support for displaying the last modification date and author on generated web pages. * Added support for displaying interactive diagrams (such as flowcharts or charts) directly on web pages. * Improved formatting and layout for modern documents, including better tables, lists, and links. maven-surefire, maven-surefire-plugins (Updated to version 3.5.6): * Fixed a bug that caused software testing tasks to fail abruptly with an unexpected error [bsc#1273185]. * Added timestamps to testing reports so you can see exactly when tests ran. * Made running multiple tests at the same time much more reliable, preventing mixed-up report results. * Added the ability to immediately stop testing once a failure is detected (saving time). objectweb-asm (Updated to version 9.10.1): * Added support for newer Java versions, including bytecode support up to Java 27. * Prevented out-of-memory errors when processing invalid or corrupted class files. * Improved bytecode analysis and verification to correctly handle valid Java code and prevent unexpected analysis errors * Improved compliance with FIPS 140-3 security standards during class serialization. * Corrected package import ranges to prevent dependency conflicts in OSGi environments. * Fixed unexpected crashes and errors in code generation and inspection utilities. plexus-archiver (Updated to version 4.14.0): * Added support for following symbolic links when collecting files for archives. * Reduced memory usage when creating ZIP archives to prevent out-of-memory errors during large builds. * Fixed an issue where reading file attributes on Windows systems could cause unexpected errors. * Improved ZIP archive handling, fixing checksum calculation errors, negative timestamp issues, and file permissions. * Replaced compression components with Apache Commons Compress to eliminate vulnerable dependencies. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including commons-io to 2.22.0, xz to 1.12, and zstd- jni to 1.5.7-15. plexus-build-api (Updated to version 1.2.0): * Updated dependencies for compatibility with modern build and injection tools. plexus-cipher (Updated to version 2.1.0): * Updated dependencies for compatibility with modern build and injection tools. plexus-classworlds (Updated to version 2.12.1): * Fixed file pattern matching (glob matching) when loading classes and resources. * Restored backward compatibility with legacy Maven 2 configurations. * Added support for registering filtered class realms. * Implemented clean resource shutdown support (Closeable) for class loaders. * Added support for the PPC64LE architecture. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including jakarta.xml.bind-api, log4j-api, and ant. plexus-compiler (Updated to version 2.17.1): * Fixed a security issue (Zip Slip) that could allow arbitrary file overwrite during archive extraction. * Fixed an unexpected crash (ConcurrentModificationException) when processing compiler arguments concurrently. * Fixed compiler diagnostics and warning reporting to ensure multi-line messages and warning categories are properly displayed. * Fixed Java version detection when custom options or newer Java versions are present. * Fixed an issue where the Eclipse Java Compiler (ECJ) failed to detect annotation processors configured in the processor path. * Added support for quoting compiler argument files to safely handle paths containing spaces. * Fixed cross-drive file path handling on Windows systems. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including Google Guava to 33.7.1 and Eclipse Java Compiler (ECJ) to 3.46.100. plexus-containers (Updated to version 2.2.0): * Added the plexus-metadata-generator Ant task and command-line interface to generate component metadata. * Added the plexus-metadata-generator-ant package capability. plexus-i18n (Updated to version 1.2.0): * Corrected language translation lookup to prevent unintentionally falling back to the system default locale. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-interactivity (Updated to version 1.6.0): * Upgraded the terminal reader dependency to JLine 3 for improved console and terminal interaction. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including Sisu Inject to 1.1.0 and Guice to 5.1.0. plexus-interpolation (Updated to version 1.30.0): * Fixed caching issues in string and regular expression interpolators to significantly improve evaluation performance and consistency. * Added support for feedback value sources and delimiter tracking. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-io (Updated to version 3.8.0): * Improved performance by caching Unix user and group lookups. * Fixed file handling to properly follow symbolic links when configured. * Fixed an issue where temporary files were left unclosed, preventing file- not-found errors. * Improved resilience when querying file attributes on network file systems. * Added support for tracking hard-link identities for unchanged files. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including commons-io to 2.22.0, plexus-utils to 3.6.2, and Sisu Inject to 1.1.0. plexus-languages (Updated to version 1.6.0): * Replaced the source code parser with JavaParser for improved language support and modern Java compatibility. * Added support for newer Java versions, including JDK 23 and JDK 24 bytecode. * Improved the speed of detecting Java class file versions. * Added validation to detect and report duplicate modules on the module path. * Updated dependencies, including ObjectWeb ASM to 9.10.1. plexus-sec-dispatcher (Updated to version 2.0): * Modernized component injection by using standard javax.inject annotations. * Updated dependencies for compatibility with modern Sisu tools. plexus-utils (Updated to version 4.1.0): * Breaking change: File scanning no longer excludes ".gitignore" and ".cvsignore" files by default. * Fixed a security issue (Zip Slip) that could allow arbitrary file overwrite during archive extraction. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-velocity (Updated to version 2.4.0): * Reduced runtime dependency requirements by eliminating unnecessary injection components. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies to secure releases, including Apache Velocity Engine to 2.4.1 and Commons Lang to 3.20.0. plexus-xml (Updated to version 3.1.0): * Fixed XML parsing issues when reading documents in UTF-8 (without BOM) and ISO-8859-1 encodings. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies, including plexus-utils to 4.0.2. New package dependencies distributed: * apache-commons-digester3: XML-to-Java object mapping library; required at runtime by `velocity-tools`. * javaparser: Java source code parser and abstract syntax tree library; required at runtime by `plexus-languages`. * antlr: Parser generator for reading, processing, and translating structured text; required at runtime by `ant` (`ant-antlr`). * jakarta-mail: Implementation of the Jakarta Mail API for email handling (addresses CVE-2025-7962); required at runtime by `ant` (`ant-jakartamail`). * jakarta-activation: Framework for handling MIME data types and extensible data content; required at runtime by `jakarta-mail` and `ant` (`ant- jakartamail`). * univocity-parsers: Fast CSV, TSV, and fixed-width tabular text parser collection; required at runtime by `ant` (`ant-junit5`) and `junit5`. * opentest4j: Common exception and test assertion abstraction for JVM testing frameworks; required at runtime by `ant` (`ant-junit5`) and `junit5`. * picocli: Annotation-based command-line interface parser; required at runtime by `junit5`. * assertj-core: Fluent assertion library for Java testing; required at runtime by `junit5`. * plexus-build-api0: Compatibility API layer for Plexus build tooling; required at runtime by `plexus-build-api`. * qdox: High-speed parser for extracting class, interface, and Javadoc metadata; required at runtime by `plexus-containers` (`plexus-component- metadata`). * bsf: Bean Scripting Framework for running scripting languages from Java; required at runtime by `ant` (`ant-apache-bsf`). * jdepend: Metric generator analyzing Java package design and dependencies; required at runtime by `ant` (`ant-jdepend`). * javassist: Java bytecode manipulation and analysis toolkit; required at runtime by `javaparser`. * ant-contrib: Additional tasks, condition handlers, and control-flow logic for Apache Ant; optional runtime companion for `ant`. * byte-buddy: Runtime code generation and bytecode manipulation library; required at runtime by `junit5` and `ant-junit5`. * velocity-tools: Reusable tools and view support helpers for the Apache Velocity template engine; standalone runtime library for template-driven web applications. * zstd-jni: JNI bindings providing fast and high-ratio lossless compression via Zstandard; required at runtime by `plexus-archiver`. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4677 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4677 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4677 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4677 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4677 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4677 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4677 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4677 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4677 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4677 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4677 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4677 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4677 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * Basesystem Module 15-SP7 (noarch) * objectweb-asm-9.10.1-150200.3.20.3 * Development Tools Module 15-SP7 (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Package Hub 15 15-SP7 (noarch) * byte-buddy-agent-1.18.8-150200.5.13.2 * byte-buddy-javadoc-1.18.8-150200.5.13.2 * ant-junit5-1.10.18-150200.4.31.3 * byte-buddy-1.18.8-150200.5.13.2 * ant-xz-1.10.18-150200.4.31.3 * junit5-minimal-5.14.4-150200.3.15.10 * ant-commons-net-1.10.18-150200.4.31.3 * ant-jsch-1.10.18-150200.4.31.3 * picocli-4.7.6-150200.3.19.2 * junit5-5.14.4-150200.3.15.15 * byte-buddy-maven-plugin-1.18.8-150200.5.13.2 * opentest4j-1.2.0-150200.3.6.4 * univocity-parsers-2.9.1-150200.3.9.4 * ant-testutil-1.10.18-150200.4.31.3 * ant-apache-xalan2-1.10.18-150200.4.31.3 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 ## References: * https://www.suse.com/security/cve/CVE-2021-36374.html * https://www.suse.com/security/cve/CVE-2025-7962.html * https://www.suse.com/security/cve/CVE-2026-78254.html * https://bugzilla.suse.com/show_bug.cgi?id=1188469 * https://bugzilla.suse.com/show_bug.cgi?id=1246873 * https://bugzilla.suse.com/show_bug.cgi?id=1273185 * https://bugzilla.suse.com/show_bug.cgi?id=1280015 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 16:30:21 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 16:30:21 -0000 Subject: SUSE-RU-2026:4683-1: moderate: Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes-sles-for-sap, release-notes-sles Message-ID: <179208182134.1818.11923922150507663885@35dec7450499> # Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes- sles-for-sap, release-notes-sles Announcement ID: SUSE-RU-2026:4683-1 Release Date: 2026-10-15T09:49:05Z Rating: moderate References: * bsc#1274567 * bsc#1275537 * bsc#933411 * jsc#PED-11267 * jsc#PED-12409 * jsc#PED-12466 * jsc#PED-12468 * jsc#PED-12690 * jsc#PED-12807 * jsc#PED-13377 * jsc#PED-13389 * jsc#PED-13712 * jsc#PED-14233 * jsc#PED-14448 * jsc#PED-14451 * jsc#PED-14584 * jsc#PED-15471 * jsc#PED-15595 * jsc#PED-15619 * jsc#PED-15713 * jsc#PED-1590 * jsc#PED-15902 * jsc#PED-16001 * jsc#PED-16077 * jsc#PED-16395 * jsc#PED-16425 * jsc#PED-16489 * jsc#PED-16657 * jsc#PED-2814 * jsc#PED-3865 * jsc#PED-4597 * jsc#PED-5615 * jsc#PED-6185 * jsc#PED-6231 * jsc#PED-7876 * jsc#PED-7994 * jsc#SLE-21027 * jsc#SLE-23244 Affected Products: * HPC Module 15-SP7 * SAP Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains 35 features and has three fixes can now be installed. ## Description: This update for release-notes-sle_hpc,release-notes-ha, release-notes-sles-for- sap, release-notes-sles fixes the following issues: release-notes-sle_hpc: \- 15.7.20261001 (tracked in bsc#933411) \- HPC 15 SP7: Added Warewulf 4.6.x release notes (jsc#PED-12409) \- HPC 15 SP7: Supplement SLES release notes in title and abstract (jsc#PED-7876) release-notes-ha: \- 15.7.20261001 (tracked in bsc#933411) \- Document quarterly updated support (jsc#PED-14584) \- Added pre-migration check tool release notes (jsc#PED-16077,jsc#PED-12807) release-notes-sles-for-sap: \- 15.7.20261001 (tracked in bsc#933411) \- Convert changelog appendix to regular section \- Document quarterly updated support (jsc#PED-14584) \- SLES for SAP 15 SP7: Updated SAPHanaSR and filesystem resource agent deprecations wording (bsc#1274567) \- Drop meta to resolve build issue due to old Geekodoc package release-notes-sles: \- Drop standalone changelog.html and kernel-parameter- changes.html (bsc#933411) \- 15.7.20261001 (tracked in bsc#933411) \- Fixed broken links, convert appendices to sections, and replace image with text \- Fixed Java lifecycle inconsistencies (jsc#PED-1590, jsc#PED-13389) \- Added OpenJDK 25 to supported Java versions (jsc#PED-14233) \- authentication: krb5: Disable deprecated encryption types by default (jsc#PED-13712) \- security: squid: ESI processing disabled (jsc#PED-15619) \- Added clocksource watchdog disabled on HPE UV5 platforms (jsc#PED-16395) \- SLES 15 SP7: Added note about Valgrind support for IBM z17 hardware (jsc#PED-16489) \- Added OpenSSH mlkem768x25519-sha256 release note (jsc#PED-16657) \- SLES 15 SP7: Added release note for deprecated/removed global service variables (jsc#PED-6231) \- SLES 15 SP7: Added note about OpenMPI support for Gridware Cluster Scheduler (jsc#PED-13377) \- Added RMT 3 release note (jsc#PED-16425) \- Added python311-apache-libcloud release note (jsc#PED-14451) \- Added systemd-resolved release note (jsc#PED-12690) \- SLES 15 SP7: Added Warewulf 4.6.x release notes (jsc#PED-12409) \- Added release note for SLES 12 SP5 LTSS direct upgrade support (jsc#PED-7994) \- Added DOCTEAM-2174 reference to XFS v4 deprecation note \- Document quarterly updated support (jsc#PED-14584) \- Added note about KubeVirt support for AMD SEV and SEV-ES (jsc#SLE-23244) \- Added PINT link to online documentation section (jsc#DOCTEAM-351) \- document removal of haveged switch-root service (jsc#PED-6185) \- SLES 15 SP7: Added SLES 12 SP5 MariaDB lifecycle details (jsc#PED-2814) \- Added Intel True Scale support removal (jsc#PED-5615) \- SLES 15 SP7: Document deprecation of legacy XFS v4 filesystem format (bsc#1275537) \- RN: [HPC, Warewulf4] Provide a 'bootable container' Image thru registry.suse.com \- Updated munge release notes with compatibility info (jsc#PED-12468) \- Support for regular user accounts in container UID ranges (jsc#PED-15595) \- SLES 15 SP7: Restore deprecation notice for NIS (jsc#PED-3865) \- Updated HPC packages to latest version (jsc#PED-12466) \- SLES 15 SP7: Fixed HPC supplementary release notes URL (jsc#PED-7876) \- SLES 15 SP7: Added reference to supplementary HPC release notes (jsc#PED-7876) \- SLES 15 SP7: Added note about AMD SEV-SNP guest support (jsc#SLE-21027) \- SLES 15 SP7: Added note about ClamAV 1.0 update (jsc#PED-4597) \- SLES 15 SP7: Added note about Node.js 24 default version (jsc#PED-15471) \- SLES 15 SP7: Added note about post-quantum cryptography support (jsc#PED-15713) \- SLES 15 SP7: Added iptables and nftables to Minimal images (jsc#PED-16001) \- SLES 15 SP7: Added comprehensive component lifecycle documentation (jsc#DOCTEAM-2098) \- desktop: include gtk4-lang package for localization (jsc#PED-14448) \- Added release note for wire package deprecation (jsc#PED-15902) \- RN: document plymouth drop on s390x (jsc#PED-11267) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4683 SUSE-SLE-Product- SLES-15-SP7-2026-4683 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4683 * SUSE Linux Enterprise High Performance Computing 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4683 * SUSE Linux Enterprise Desktop 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4683 * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4683 * HPC Module 15-SP7 zypper in -t patch SUSE-SLE-Module-HPC-15-SP7-2026-4683 * SAP Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2026-4683 ## Package List: * SUSE Linux Enterprise Server 15 SP7 (noarch) * release-notes-sles-15.7.20261001-150700.3.22.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 (noarch) * release-notes-sles-15.7.20261001-150700.3.22.2 * SUSE Linux Enterprise High Performance Computing 15 SP7 (noarch) * release-notes-sles-15.7.20261001-150700.3.22.2 * SUSE Linux Enterprise Desktop 15 SP7 (noarch) * release-notes-sles-15.7.20261001-150700.3.22.2 * SUSE Linux Enterprise High Availability Extension 15 SP7 (noarch) * release-notes-ha-15.7.20261001-150700.3.15.2 * HPC Module 15-SP7 (noarch) * release-notes-sle_hpc-15.700000000.20261001-150700.3.12.2 * SAP Applications Module 15-SP7 (noarch) * release-notes-sles-for-sap-15.7.20261001-150700.3.9.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1274567 * https://bugzilla.suse.com/show_bug.cgi?id=1275537 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-11267 * https://jira.suse.com/browse/PED-12409 * https://jira.suse.com/browse/PED-12466 * https://jira.suse.com/browse/PED-12468 * https://jira.suse.com/browse/PED-12690 * https://jira.suse.com/browse/PED-12807 * https://jira.suse.com/browse/PED-13377 * https://jira.suse.com/browse/PED-13389 * https://jira.suse.com/browse/PED-13712 * https://jira.suse.com/browse/PED-14233 * https://jira.suse.com/browse/PED-14448 * https://jira.suse.com/browse/PED-14451 * https://jira.suse.com/browse/PED-14584 * https://jira.suse.com/browse/PED-15471 * https://jira.suse.com/browse/PED-15595 * https://jira.suse.com/browse/PED-15619 * https://jira.suse.com/browse/PED-15713 * https://jira.suse.com/browse/PED-1590 * https://jira.suse.com/browse/PED-15902 * https://jira.suse.com/browse/PED-16001 * https://jira.suse.com/browse/PED-16077 * https://jira.suse.com/browse/PED-16395 * https://jira.suse.com/browse/PED-16425 * https://jira.suse.com/browse/PED-16489 * https://jira.suse.com/browse/PED-16657 * https://jira.suse.com/browse/PED-2814 * https://jira.suse.com/browse/PED-3865 * https://jira.suse.com/browse/PED-4597 * https://jira.suse.com/browse/PED-5615 * https://jira.suse.com/browse/PED-6185 * https://jira.suse.com/browse/PED-6231 * https://jira.suse.com/browse/PED-7876 * https://jira.suse.com/browse/PED-7994 * https://jira.suse.com/browse/SLE-21027 * https://jira.suse.com/browse/SLE-23244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 16:30:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 16:30:28 -0000 Subject: SUSE-RU-2026:4682-1: moderate: Recommended update for release-notes-sles Message-ID: <179208182834.1818.6334465171978631832@35dec7450499> # Recommended update for release-notes-sles Announcement ID: SUSE-RU-2026:4682-1 Release Date: 2026-10-15T09:47:58Z Rating: moderate References: * bsc#933411 * jsc#PED-13712 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that contains one feature and has one fix can now be installed. ## Description: This update for release-notes-sles fixes the following issues: * 12.5.20261001 (tracked in bsc#933411) * authentication: krb5: Disable deprecated encryption types by default (jsc#PED-13712) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-INSTALLER-12-SP5-2026-4682 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-INSTALLER-12-SP5-2026-4682 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4682 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4682 ## Package List: * SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch) * release-notes-sles-12.5.20261001-3.55.2 * SUSE Linux Enterprise Server 12 SP5 (noarch) * release-notes-sles-12.5.20261001-3.55.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * release-notes-sles-12.5.20261001-3.55.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * release-notes-sles-12.5.20261001-3.55.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-13712 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 16:30:39 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 16:30:39 -0000 Subject: SUSE-RU-2026:4681-1: moderate: Recommended update for release-notes-ha, release-notes-sles, release-notes-sles-for-sap Message-ID: <179208183985.1818.3252373375937054918@35dec7450499> # Recommended update for release-notes-ha, release-notes-sles, release-notes- sles-for-sap Announcement ID: SUSE-RU-2026:4681-1 Release Date: 2026-10-15T09:47:34Z Rating: moderate References: * bsc#1213181 * bsc#1275537 * bsc#933411 * jsc#PED-11267 * jsc#PED-12517 * jsc#PED-12807 * jsc#PED-13284 * jsc#PED-13712 * jsc#PED-14451 * jsc#PED-15619 * jsc#PED-15902 * jsc#PED-16077 * jsc#PED-16335 * jsc#PED-2918 * jsc#PED-3865 * jsc#PED-4590 * jsc#PED-4597 * jsc#PED-5594 * jsc#PED-6185 * jsc#PED-6272 * jsc#PED-6484 * jsc#PED-7810 * jsc#PED-7994 * jsc#SLE-23244 Affected Products: * openSUSE Leap 15.4 * SAP Applications Module 15-SP4 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that contains 21 features and has three fixes can now be installed. ## Description: This update for release-notes-ha, release-notes-sles, release-notes-sles-for-sap fixes the following issues: release-notes-ha: \- 15.4.20261001 (tracked in bsc#933411) \- Added pre- migration check tool release notes (jsc#PED-16077, jsc#PED-12807) release-notes-sles: \- 12.1.20151104 (bsc#933411) \- Drop standalone changelog.html and kernel-parameter-changes.html (bsc#933411) \- 15.4.20261001 (tracked in bsc#933411) \- Fixed broken links and convert appendices to sections \- authentication: krb5: Disable deprecated encryption types by default (jsc#PED-13712) \- security: squid: ESI processing disabled (jsc#PED-15619) \- Added python311-apache-libcloud release note (jsc#PED-14451) \- Added rootless docker support release note (jsc#PED-6484) \- Added release note for SLES 12 SP5 LTSS direct upgrade support (jsc#PED-7994) \- Added a note for ddclient version 3.10.0 update (jsc#PED-7810, bsc#1213181) \- Added note about Hyper-V packages (jsc#PED-2918) \- Added sysctl_net_ipv6_route_max_size to kernel parameter changes (jsc#PED-12517) \- Added note about Apache 2.4.66 (jsc#PED-16335) \- Added note about KubeVirt support for AMD SEV (jsc#SLE-23244) \- Added PINT link to online documentation section (jsc#DOCTEAM-351) \- Added note about PostgreSQL 16 (jsc#PED-5594) \- development: added Erlang 23 upgrade note (jsc#PED-6272) \- document removal of haveged switch-root service (jsc#PED-6185) \- Added release note for strongSwan 5.9.11 update (jsc#PED-4590) \- SLES 15 SP4: Document deprecation of legacy XFS v4 filesystem format (bsc#1275537) \- trigger merge request creation (jsc#PED-13284) \- system-management: added python311-salt release notes (jsc#PED-13284) \- SLES 15 SP4: Updated tracking references for NIS deprecation (jsc#PED-3865) \- SLES 15 SP4: Added note about ClamAV 1.0 update (jsc#PED-4597) \- Added release note for wire package deprecation (jsc#PED-15902) \- RN: document plymouth workaround on s390x (jsc#PED-11267) release-notes-sles-for-sap: \- Drop standalone changelog.html (bsc#933411) \- 15.4.20261001 (tracked in bsc#933411) \- Convert changelog appendix to regular section ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Manager Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Linux Enterprise High Performance Computing 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Linux Enterprise Desktop 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Manager Retail Branch Server 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Manager Proxy 4.3 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Linux Enterprise Server 15 SP4 zypper in -t patch SUSE-SLE-INSTALLER-15-SP4-2026-4681 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4681 * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2026-4681 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4681 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4681 ## Package List: * SUSE Manager Server 4.3 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Linux Enterprise Desktop 15 SP4 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Manager Retail Branch Server 4.3 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Manager Proxy 4.3 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Linux Enterprise Server 15 SP4 (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 * SUSE Linux Enterprise High Availability Extension 15 SP4 (noarch) * release-notes-ha-15.4.20261001-150400.3.11.3 * SAP Applications Module 15-SP4 (noarch) * release-notes-sles-for-sap-15.4.20261001-150400.3.24.3 * openSUSE Leap 15.4 (noarch) * release-notes-ha-15.4.20261001-150400.3.11.3 * release-notes-sles-15.4.20261001-150400.3.38.3 * release-notes-sles-for-sap-15.4.20261001-150400.3.24.3 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * release-notes-sles-15.4.20261001-150400.3.38.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213181 * https://bugzilla.suse.com/show_bug.cgi?id=1275537 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-11267 * https://jira.suse.com/browse/PED-12517 * https://jira.suse.com/browse/PED-12807 * https://jira.suse.com/browse/PED-13284 * https://jira.suse.com/browse/PED-13712 * https://jira.suse.com/browse/PED-14451 * https://jira.suse.com/browse/PED-15619 * https://jira.suse.com/browse/PED-15902 * https://jira.suse.com/browse/PED-16077 * https://jira.suse.com/browse/PED-16335 * https://jira.suse.com/browse/PED-2918 * https://jira.suse.com/browse/PED-3865 * https://jira.suse.com/browse/PED-4590 * https://jira.suse.com/browse/PED-4597 * https://jira.suse.com/browse/PED-5594 * https://jira.suse.com/browse/PED-6185 * https://jira.suse.com/browse/PED-6272 * https://jira.suse.com/browse/PED-6484 * https://jira.suse.com/browse/PED-7810 * https://jira.suse.com/browse/PED-7994 * https://jira.suse.com/browse/SLE-23244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 16:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 16:30:54 -0000 Subject: SUSE-RU-2026:4680-1: moderate: Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes-sles, release-notes-sles-for-sap Message-ID: <179208185456.1818.2305321770387574929@35dec7450499> # Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes- sles, release-notes-sles-for-sap Announcement ID: SUSE-RU-2026:4680-1 Release Date: 2026-10-15T09:46:32Z Rating: moderate References: * bsc#1213181 * bsc#1275537 * bsc#933411 * jsc#PED-11267 * jsc#PED-12409 * jsc#PED-12517 * jsc#PED-126 * jsc#PED-12807 * jsc#PED-13284 * jsc#PED-13712 * jsc#PED-14448 * jsc#PED-14451 * jsc#PED-15902 * jsc#PED-16077 * jsc#PED-16335 * jsc#PED-2431 * jsc#PED-2918 * jsc#PED-3404 * jsc#PED-3865 * jsc#PED-4590 * jsc#PED-4597 * jsc#PED-5576 * jsc#PED-5594 * jsc#PED-5910 * jsc#PED-6185 * jsc#PED-6272 * jsc#PED-6484 * jsc#PED-7810 * jsc#PED-7994 * jsc#PED-8349 * jsc#SLE-23244 Affected Products: * openSUSE Leap 15.5 * SAP Applications Module 15-SP5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that contains 28 features and has three fixes can now be installed. ## Description: This update for release-notes-sle_hpc, release-notes-ha, release-notes-sles, release-notes-sles-for-sap fixes the following issues: release-notes-sle_hpc: \- 15.5.20261001 (tracked in bsc#933411) \- HPC 15 SP5: Added Warewulf 4.6.x release notes (jsc#PED-12409) \- RN: [HPC, Warewulf4] Provide a 'bootable container' Image thru registry.suse.com release-notes-ha: \- 15.5.20261001 (tracked in bsc#933411) \- Added pre- migration check tool release notes (jsc#PED-16077, jsc#PED-12807) release-notes-sles: \- 12.1.20151104 (bsc#933411) \- Drop standalone changelog.html and kernel-parameter-changes.html (bsc#933411) \- 15.5.20261001 (tracked in bsc#933411) \- Fixed broken links and convert appendices to sections \- authentication: krb5: Disable deprecated encryption types by default (jsc#PED-13712) \- Added release note for generic Cloud image first-boot fallback (jsc#PED-3404) \- Added python311-apache-libcloud release note (jsc#PED-14451) \- Added PCP 6.2.0 upgrade release notes (jsc#PED-8349) \- Added rootless docker support release note (jsc#PED-6484) \- Added release note for SLES 12 SP5 LTSS direct upgrade support (jsc#PED-7994) \- Added a note for ddclient version 3.10.0 update (jsc#PED-7810, bsc#1213181) \- Added note about Hyper-V packages (jsc#PED-2918) \- Added kernel parameter changes (jsc#PED-12517) \- Added DOCTEAM-2174 reference to XFS v4 deprecation note \- Added note about Apache 2.4.66 (jsc#PED-16335) \- Added note about KubeVirt support for AMD SEV and SEV-ES (jsc#SLE-23244) \- Added PINT link to online documentation section (jsc#DOCTEAM-351) \- Added note about PostgreSQL 16 (jsc#PED-5594) \- development: added Erlang 23 upgrade note (jsc#PED-6272) \- document removal of haveged switch-root service (jsc#PED-6185) \- SLES 15 SP5: Document lzip compressor availability (jsc#PED-5910) \- SLES 15 SP5: Added note about SLE BCI for kernel modules (jsc#PED-5576) \- Added release note for strongSwan 5.9.11 update (jsc#PED-4590) \- SLES 15 SP5: Document deprecation of legacy XFS v4 filesystem format (bsc#1275537) \- trigger merge request creation (jsc#PED-13284) \- system-management: added python311-salt release notes (jsc#PED-13284) \- SLES 15 SP5: Updated tracking references for NIS deprecation (jsc#PED-3865) \- Revert "SLES 15 SP5: Deprecate libgrss package (jsc#PED-2431)" \- SLES 15 SP5: Deprecate libgrss package (jsc#PED-2431) \- SLES 15 SP5: Added note about ClamAV 1.0 update (jsc#PED-4597) \- security: added GRUB 2 TPM measurement release note (jsc#PED-126) \- desktop: include gtk4-lang package for localization (jsc#PED-14448) \- Added release note for wire package deprecation (jsc#PED-15902) \- RN: document plymouth workaround on s390x (jsc#PED-11267) release-notes-sles-for-sap: \- Drop standalone changelog.html (bsc#933411) \- 15.5.20261001 (tracked in bsc#933411) \- Convert changelog appendix to regular section ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2026-4680 * SUSE Linux Enterprise Desktop 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2026-4680 * SUSE Linux Enterprise Server 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2026-4680 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-INSTALLER-15-SP5-2026-4680 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4680 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4680 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-4680 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2026-4680 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4680 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4680 ## Package List: * SUSE Linux Enterprise High Performance Computing 15 SP5 (noarch) * release-notes-sles-15.5.20261001-150500.3.38.3 * SUSE Linux Enterprise Desktop 15 SP5 (noarch) * release-notes-sles-15.5.20261001-150500.3.38.3 * SUSE Linux Enterprise Server 15 SP5 (noarch) * release-notes-sles-15.5.20261001-150500.3.38.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * release-notes-sles-15.5.20261001-150500.3.38.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * release-notes-sle_hpc-15.500000000.20261001-150500.3.15.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * release-notes-sle_hpc-15.500000000.20261001-150500.3.15.3 * SUSE Linux Enterprise High Availability Extension 15 SP5 (noarch) * release-notes-ha-15.5.20261001-150500.3.15.3 * SAP Applications Module 15-SP5 (noarch) * release-notes-sles-for-sap-15.5.20261001-150500.3.12.3 * openSUSE Leap 15.5 (noarch) * release-notes-sle_hpc-15.500000000.20261001-150500.3.15.3 * release-notes-ha-15.5.20261001-150500.3.15.3 * release-notes-sles-15.5.20261001-150500.3.38.3 * release-notes-sles-for-sap-15.5.20261001-150500.3.12.3 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * release-notes-sles-15.5.20261001-150500.3.38.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213181 * https://bugzilla.suse.com/show_bug.cgi?id=1275537 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-11267 * https://jira.suse.com/browse/PED-12409 * https://jira.suse.com/browse/PED-12517 * https://jira.suse.com/browse/PED-126 * https://jira.suse.com/browse/PED-12807 * https://jira.suse.com/browse/PED-13284 * https://jira.suse.com/browse/PED-13712 * https://jira.suse.com/browse/PED-14448 * https://jira.suse.com/browse/PED-14451 * https://jira.suse.com/browse/PED-15902 * https://jira.suse.com/browse/PED-16077 * https://jira.suse.com/browse/PED-16335 * https://jira.suse.com/browse/PED-2431 * https://jira.suse.com/browse/PED-2918 * https://jira.suse.com/browse/PED-3404 * https://jira.suse.com/browse/PED-3865 * https://jira.suse.com/browse/PED-4590 * https://jira.suse.com/browse/PED-4597 * https://jira.suse.com/browse/PED-5576 * https://jira.suse.com/browse/PED-5594 * https://jira.suse.com/browse/PED-5910 * https://jira.suse.com/browse/PED-6185 * https://jira.suse.com/browse/PED-6272 * https://jira.suse.com/browse/PED-6484 * https://jira.suse.com/browse/PED-7810 * https://jira.suse.com/browse/PED-7994 * https://jira.suse.com/browse/PED-8349 * https://jira.suse.com/browse/SLE-23244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 16:31:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 16:31:03 -0000 Subject: SUSE-RU-2026:4679-1: moderate: Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes-sles, release-notes-sles-for-sap Message-ID: <179208186348.1818.6198965347925651356@35dec7450499> # Recommended update for release-notes-sle_hpc, release-notes-ha, release-notes- sles, release-notes-sles-for-sap Announcement ID: SUSE-RU-2026:4679-1 Release Date: 2026-10-15T09:45:32Z Rating: moderate References: * bsc#1213181 * bsc#1275537 * bsc#933411 * jsc#PED-11267 * jsc#PED-11798 * jsc#PED-12099 * jsc#PED-12409 * jsc#PED-12447 * jsc#PED-12690 * jsc#PED-12807 * jsc#PED-13284 * jsc#PED-13712 * jsc#PED-14448 * jsc#PED-14451 * jsc#PED-14578 * jsc#PED-15619 * jsc#PED-15713 * jsc#PED-15902 * jsc#PED-16077 * jsc#PED-16395 * jsc#PED-2431 * jsc#PED-2696 * jsc#PED-3865 * jsc#PED-4597 * jsc#PED-5576 * jsc#PED-5592 * jsc#PED-5593 * jsc#PED-5594 * jsc#PED-5608 * jsc#PED-5615 * jsc#PED-5679 * jsc#PED-5768 * jsc#PED-5910 * jsc#PED-6185 * jsc#PED-6231 * jsc#PED-6420 * jsc#PED-6484 * jsc#PED-6560 * jsc#PED-6568 * jsc#PED-7375 * jsc#PED-7482 * jsc#PED-7810 * jsc#PED-7876 * jsc#PED-7911 * jsc#PED-7994 * jsc#PED-8004 * jsc#PED-8179 * jsc#PED-8349 * jsc#SLE-23244 Affected Products: * openSUSE Leap 15.6 * SAP Applications Module 15-SP6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that contains 46 features and has three fixes can now be installed. ## Description: This update for release-notes-sle_hpc, release-notes-ha, release-notes-sles, release-notes-sles-for-sap fixes the following issues: release-notes-sle_hpc: \- 15.6.20261001 (tracked in bsc#933411) \- HPC 15 SP6: Added Warewulf 4.6.x release notes (jsc#PED-12409) \- HPC 15 SP6: Supplement SLES release notes in title and abstract (jsc#PED-7876) release-notes-ha: \- 15.6.20261001 (tracked in bsc#933411) \- Added pre- migration check tool release notes (jsc#PED-16077, jsc#PED-12807) release-notes-sles: \- 12.1.20151104 (bsc#933411): \- Drop standalone changelog.html and kernel-parameter-changes.html (bsc#933411) \- 15.6.20261001 (tracked in bsc#933411) \- Fixed broken links, convert appendices to sections, and replace image with text \- Added note about Node.js 22 availability in the Web and Scripting Module (jsc#PED-11798) \- Added note about .NET 8 Base Container Images (jsc#PED-8179) \- Support sharing reserved memory with user space (jsc#PED-7911) \- Added MLM 5.0 extensions and container RPMs in QU4 release note (jsc#PED-12447) \- authentication: krb5: Disable deprecated encryption types by default (jsc#PED-13712) \- security: squid: ESI processing disabled (jsc#PED-15619) \- Added clocksource watchdog disabled on HPE UV5 platforms release note (jsc#PED-16395) \- SLES 15 SP6: Added release note for deprecated/removed globa service variables (jsc#PED-6231) \- RN: Drop Suse specific kernel.suid_dumpable sysctl (15 SP6) \- Added python311-apache-libcloud release note (jsc#PED-14451) \- Added release note for direct migration support from SLES 15 SP6 to SLES 16.0 (jsc#PED-14578) \- Added PCP 6.2.0 upgrade release notes (jsc#PED-8349) \- Added rootless docker support release note (jsc#PED-6484) \- Added systemd-resolved release note (jsc#PED-12690) \- SLES 15 SP6: Added Warewulf 4.6.x release notes (jsc#PED-12409) \- Added release note for removal of old LLVM packages and Beignet (jsc#PED-7375) \- Added release note for SLES 12 SP5 LTSS direct upgrade support (jsc#PED-7994) \- Added SLES 15 SP6 Minimal VM Cloud Image for aarch64 (jsc#PED-8004) \- Added a note for ddclient version 3.10.0 update (jsc#PED-7810, bsc#1213181) \- Added DOCTEAM-2174 reference to XFS v4 deprecation note \- Added note about KubeVirt support for AMD SEV and SEV-ES (jsc#SLE-23244) \- Added PINT link to online documentation section (jsc#DOCTEAM-351) \- Added release notes for AutoYaST encryption parameters (jsc#PED-5679) \- Added note about FreeRADIUS 3.2 (jsc#PED-6568) \- Added OpenSSL 1.1.1w update note (jsc#PED-6560) \- Added note about lftp_wrapper package split (jsc#PED-6420) \- Added note about redis 7.2 upgrade (jsc#PED-5592) \- SLES 15 SP6: Added release notes for MariaDB 10.11 upgrade (jsc#PED-5593) \- Reference jsc#PED-5594 for PostgreSQL 16 release notes \- Added PHP 8.2 release note (jsc#PED-5608) \- document removal of haveged switch- root service (jsc#PED-6185) \- SLES 15 SP6: Document lzip compressor availability (jsc#PED-5910) \- Register NFV updated in changelog (jsc#PED-5768) \- Added virtualization cross-reference for NFV updates (jsc#PED-5768) \- Added NFV update release notes for SLES 15 SP6 (jsc#PED-5768) \- SLES 15 SP6: Added note about SLE BCI for kernel modules (jsc#PED-5576) \- Added Intel True Scale support removal (jsc#PED-5615) \- SLES 15 SP6: Document deprecation of legacy XFS v4 filesystem format (bsc#1275537) \- RN: [HPC, Warewulf4] Provide a 'bootable container' Image thru registry.suse.com \- trigger merge request creation (jsc#PED-13284) \- system-management: added python311-salt release notes (jsc#PED-13284) \- SLES 15 SP6: Restore deprecation notice for NIS (jsc#PED-3865) \- Revert "SLES 15 SP6: Removed libgrss package (jsc#PED-2431)" \- SLES 15 SP6: Removed libgrss package (jsc#PED-2431) \- SLES 15 SP6: Fixed HPC supplementary release notes URL (jsc#PED-7876) \- SLES 15 SP6: Added reference to supplementary HPC release notes (jsc#PED-7876) \- SLES 15 SP6: Added note about ClamAV 1.0 update (jsc#PED-4597) \- SLES 15 SP6: Added note about post- quantum cryptography support (jsc#PED-15713) \- desktop: include gtk4-lang package for localization (jsc#PED-14448) \- Added release note for wire package deprecation (jsc#PED-15902) \- Added LTSS BCI release note (jsc#PED-7482) \- Added container tooling updates (jsc#PED-2696) \- Added Tomcat 11 release notes for SLES 15 SP6 (jsc#PED-12099) \- RN: document plymouth drop on s390x (jsc#PED-11267) release-notes-sles-for-sap: \- Drop standalone changelog.html (bsc#933411) \- 15.6.20261001 (tracked in bsc#933411) \- Convert changelog appendix to regular section ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4679 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4679 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4679 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4679 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4679 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2026-4679 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4679 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4679 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * release-notes-sles-15.6.20261001-150600.3.25.2 * SUSE Linux Enterprise High Performance Computing 15 SP6 (noarch) * release-notes-sles-15.6.20261001-150600.3.25.2 * SUSE Linux Enterprise Desktop 15 SP6 (noarch) * release-notes-sles-15.6.20261001-150600.3.25.2 * SUSE Linux Enterprise Server 15 SP6 (noarch) * release-notes-sles-15.6.20261001-150600.3.25.2 * SUSE Linux Enterprise High Availability Extension 15 SP6 (noarch) * release-notes-ha-15.6.20261001-150600.3.15.2 * SAP Applications Module 15-SP6 (noarch) * release-notes-sles-for-sap-15.6.20261001-150600.3.12.2 * openSUSE Leap 15.6 (noarch) * release-notes-ha-15.6.20261001-150600.3.15.2 * release-notes-sles-for-sap-15.6.20261001-150600.3.12.2 * release-notes-sle_hpc-15.600000000.20261001-150600.3.12.2 * release-notes-sles-15.6.20261001-150600.3.25.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * release-notes-sles-15.6.20261001-150600.3.25.2 * release-notes-sle_hpc-15.600000000.20261001-150600.3.12.2 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1213181 * https://bugzilla.suse.com/show_bug.cgi?id=1275537 * https://bugzilla.suse.com/show_bug.cgi?id=933411 * https://jira.suse.com/browse/PED-11267 * https://jira.suse.com/browse/PED-11798 * https://jira.suse.com/browse/PED-12099 * https://jira.suse.com/browse/PED-12409 * https://jira.suse.com/browse/PED-12447 * https://jira.suse.com/browse/PED-12690 * https://jira.suse.com/browse/PED-12807 * https://jira.suse.com/browse/PED-13284 * https://jira.suse.com/browse/PED-13712 * https://jira.suse.com/browse/PED-14448 * https://jira.suse.com/browse/PED-14451 * https://jira.suse.com/browse/PED-14578 * https://jira.suse.com/browse/PED-15619 * https://jira.suse.com/browse/PED-15713 * https://jira.suse.com/browse/PED-15902 * https://jira.suse.com/browse/PED-16077 * https://jira.suse.com/browse/PED-16395 * https://jira.suse.com/browse/PED-2431 * https://jira.suse.com/browse/PED-2696 * https://jira.suse.com/browse/PED-3865 * https://jira.suse.com/browse/PED-4597 * https://jira.suse.com/browse/PED-5576 * https://jira.suse.com/browse/PED-5592 * https://jira.suse.com/browse/PED-5593 * https://jira.suse.com/browse/PED-5594 * https://jira.suse.com/browse/PED-5608 * https://jira.suse.com/browse/PED-5615 * https://jira.suse.com/browse/PED-5679 * https://jira.suse.com/browse/PED-5768 * https://jira.suse.com/browse/PED-5910 * https://jira.suse.com/browse/PED-6185 * https://jira.suse.com/browse/PED-6231 * https://jira.suse.com/browse/PED-6420 * https://jira.suse.com/browse/PED-6484 * https://jira.suse.com/browse/PED-6560 * https://jira.suse.com/browse/PED-6568 * https://jira.suse.com/browse/PED-7375 * https://jira.suse.com/browse/PED-7482 * https://jira.suse.com/browse/PED-7810 * https://jira.suse.com/browse/PED-7876 * https://jira.suse.com/browse/PED-7911 * https://jira.suse.com/browse/PED-7994 * https://jira.suse.com/browse/PED-8004 * https://jira.suse.com/browse/PED-8179 * https://jira.suse.com/browse/PED-8349 * https://jira.suse.com/browse/SLE-23244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 20:35:17 -0000 Subject: SUSE-SU-2026:4687-1: important: Security update for the Linux Kernel Message-ID: <179209651732.2162.16459674905357095291@b67e7bbcf91d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4687-1 Release Date: 2026-10-15T12:38:45Z Rating: important References: * bsc#1031492 * bsc#1045298 * bsc#1254633 * bsc#1263133 * bsc#1265138 * bsc#1266410 * bsc#1266412 * bsc#1266848 * bsc#1267464 * bsc#1267985 * bsc#1267990 * bsc#1268276 * bsc#1269081 * bsc#1269131 * bsc#1269234 * bsc#1269816 * bsc#1271834 * bsc#1271906 * bsc#1272211 * bsc#1272471 * bsc#1272472 * bsc#1272473 * bsc#1272480 * bsc#1272499 * bsc#1272517 * bsc#1272522 * bsc#1272523 * bsc#1272642 * bsc#1272890 * bsc#1273023 * bsc#1273302 * bsc#1273420 * bsc#1273480 * bsc#1273600 * bsc#1273603 * bsc#1273769 * bsc#1273776 * bsc#1273868 * bsc#1273879 * bsc#1273889 * bsc#1273953 * bsc#1273976 * bsc#1273982 * bsc#1274011 * bsc#1274026 * bsc#1274037 * bsc#1274061 * bsc#1274629 * bsc#1274682 * bsc#1274831 * bsc#1274836 * bsc#1274869 * bsc#1274920 * bsc#1274981 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275954 * bsc#1275957 * bsc#1275958 * bsc#1275959 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276257 * bsc#1276277 * bsc#1276321 * bsc#1276335 * bsc#1276339 * bsc#1276340 * bsc#1276353 * bsc#1276381 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276475 * bsc#1276495 * bsc#1276508 * bsc#1276519 * bsc#1276565 * bsc#1276585 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276865 * bsc#1276866 * bsc#1276905 * bsc#1276921 * bsc#1276923 * bsc#1276925 * bsc#1276927 * bsc#1276934 * bsc#1277064 * bsc#1277070 * bsc#1277098 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277215 * bsc#1277231 * bsc#1277245 * bsc#1277249 * bsc#1277265 * bsc#1277268 * bsc#1277272 * bsc#1277321 * bsc#1277349 * bsc#1277392 * bsc#1277396 * bsc#1277405 * bsc#1277410 * bsc#1277485 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277555 * bsc#1277556 * bsc#1277590 * bsc#1277656 * bsc#1277674 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277820 * bsc#1277822 * bsc#1277857 * bsc#1277881 * bsc#1277892 * bsc#1277896 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277918 * bsc#1278035 * bsc#1278056 * bsc#1278067 * bsc#1278094 * bsc#1278100 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278247 * bsc#1278310 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278416 * bsc#1278716 * bsc#1279485 * bsc#1279525 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279619 * bsc#1279621 * bsc#1279627 * bsc#1279786 * bsc#1279799 * bsc#1279809 * bsc#1279812 * bsc#1279835 * bsc#1279850 * bsc#1280139 * bsc#1280184 * bsc#1280223 * bsc#1280230 * bsc#1280237 * bsc#1280243 * bsc#1280263 * bsc#1280338 * bsc#1280375 * bsc#1280379 * bsc#1280449 * bsc#1280451 * bsc#1280468 * bsc#1280508 * bsc#1280509 * bsc#1280546 * bsc#1280551 * bsc#1280577 * bsc#1280581 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1281054 * bsc#1281176 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281352 * bsc#1281358 * bsc#1281359 * bsc#1281397 * bsc#1281408 * bsc#1281429 * bsc#1281546 * bsc#1281599 * bsc#1281680 * bsc#1281708 * bsc#1281732 * bsc#1281738 * bsc#1281778 * bsc#1281808 * bsc#1281955 * bsc#1281973 * bsc#1282050 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282270 * bsc#1282284 * bsc#1282803 * bsc#1282812 * bsc#1282881 * bsc#1282906 * bsc#1283154 * bsc#1283163 * bsc#1283201 * bsc#1283935 * bsc#1283973 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2026-100075 * CVE-2026-31663 * CVE-2026-43428 * CVE-2026-45834 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-46312 * CVE-2026-52975 * CVE-2026-53037 * CVE-2026-53237 * CVE-2026-53284 * CVE-2026-53385 * CVE-2026-53400 * CVE-2026-63897 * CVE-2026-63900 * CVE-2026-63902 * CVE-2026-63903 * CVE-2026-63904 * CVE-2026-63913 * CVE-2026-63942 * CVE-2026-63956 * CVE-2026-63957 * CVE-2026-63961 * CVE-2026-63963 * CVE-2026-64009 * CVE-2026-64014 * CVE-2026-64097 * CVE-2026-64191 * CVE-2026-64279 * CVE-2026-64299 * CVE-2026-64320 * CVE-2026-64342 * CVE-2026-64348 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64375 * CVE-2026-64378 * CVE-2026-64388 * CVE-2026-64448 * CVE-2026-64496 * CVE-2026-64540 * CVE-2026-64580 * CVE-2026-68108 * CVE-2026-68162 * CVE-2026-68184 * CVE-2026-68343 * CVE-2026-68350 * CVE-2026-68365 * CVE-2026-68376 * CVE-2026-68377 * CVE-2026-68445 * CVE-2026-68477 * CVE-2026-68479 * CVE-2026-72019 * CVE-2026-72025 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72129 * CVE-2026-72157 * CVE-2026-72163 * CVE-2026-72166 * CVE-2026-72224 * CVE-2026-72243 * CVE-2026-72256 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72463 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74276 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74307 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74349 * CVE-2026-74359 * CVE-2026-74384 * CVE-2026-74386 * CVE-2026-74398 * CVE-2026-74424 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74474 * CVE-2026-74475 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74497 * CVE-2026-74498 * CVE-2026-74499 * CVE-2026-74512 * CVE-2026-74540 * CVE-2026-74585 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74601 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74641 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74682 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74691 * CVE-2026-74692 * CVE-2026-74701 * CVE-2026-74726 * CVE-2026-74739 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80558 * CVE-2026-80561 * CVE-2026-80664 * CVE-2026-80681 * CVE-2026-80731 * CVE-2026-80747 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80798 * CVE-2026-80800 * CVE-2026-80829 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80847 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80908 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-81005 * CVE-2026-89448 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89524 * CVE-2026-89531 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89544 * CVE-2026-89548 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89686 * CVE-2026-89707 * CVE-2026-89752 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89870 * CVE-2026-89927 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89968 * CVE-2026-90088 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90203 * CVE-2026-90223 * CVE-2026-90259 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-92525 * CVE-2026-93104 * CVE-2026-93108 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93829 * CVE-2026-97557 * CVE-2026-97940 * CVE-2026-98080 * CVE-2026-98164 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31663 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43428 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-43428 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45834 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45834 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45834 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46312 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46312 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52975 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52975 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53037 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53037 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53037 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53237 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53237 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53237 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53385 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53385 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63897 ( SUSE ): 2.4 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63897 ( SUSE ): 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-63900 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63900 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-63902 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63902 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63903 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63903 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-63904 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63904 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63942 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63942 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63942 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63957 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63957 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63961 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63961 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64014 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64014 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64014 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64097 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64097 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64191 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64191 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64191 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64342 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64342 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64342 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64348 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64348 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64348 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64375 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64375 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64378 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64496 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64496 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64540 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64540 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-64540 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68108 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68108 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-68108 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68184 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-68184 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68350 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68365 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68365 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68479 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68479 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72463 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72463 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74276 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74474 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74474 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74497 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74497 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74498 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74499 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74512 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74585 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74641 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74682 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74691 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74691 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80558 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80561 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80561 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80561 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80798 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80798 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80800 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80829 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80829 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81005 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81005 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89524 ( SUSE ): 5.9 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89524 ( SUSE ): 6.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89524 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89752 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89752 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89870 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89870 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89870 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89927 ( SUSE ): 8.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-89927 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89927 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90223 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90223 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed. ## Description: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133). * CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138). * CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990). * CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234). * CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081). * CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953). * CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642). * CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499). * CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517). * CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522). * CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472). * CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769). * CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480). * CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420). * CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011). * CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868). * CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600). * CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682). * CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: fix false-positive __read_overflow2_field() warning (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74276: spi: xilinx: use FIFO occupancy register to determine buffer size (bsc#1276495). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74386: nvmet-tcp: fix a memory leak when releasing a queue (bsc#1277098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74424: fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1276321). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74497: ALSA: usb-audio: Clamp frame size in implicit-feedback mode (bsc#1275957). * CVE-2026-74498: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (bsc#1275958). * CVE-2026-74499: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (bsc#1275959). * CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74585: thunderbolt: Bound the DROM dual link port number before indexing sw->ports (bsc#1277881). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74682: ALSA: usb-audio: fix OOB write on Type II inbound URBs (bsc#1276934). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74691: net: thunderbolt: Tear down DMA paths before stopping the rings (bsc#1276925). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485). * CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80798: nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1279809). * CVE-2026-80800: nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1279812). * CVE-2026-80829: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (bsc#1279485). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80908: drm/amdgpu: Reject UVD message with dimensions above 4096 (bsc#1279627). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-81005: ipmi: si: Fix NULL pointer dereference after failed registration (bsc#1280230). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: Do not reset transport on data digest errors (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89524: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (bsc#1280581). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89752: mm: memcg: stop reclaim when a limit update is superseded (bsc#1281176). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89870: media: zoran: Avoid freeing a registered video_device twice (bsc#1281352). * CVE-2026-89927: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (bsc#1281429). * CVE-2026-89929: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90223: nfc: llcp: bound SNL TLV parsing to the skb and add length checks (bsc#1281708). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (git-fixes). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * Fix backport of "RDMA/efa: Fix PBL chunk length computation" Refresh:. * gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM (git- fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * RDMA/efa: Fix PBL chunk length computation. * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * scripts/osc_wrapper: Select repository appropriate for architecture. * scripts: Add kernel_repos. * scripts: obsapi: Kick get_kernel_projects from uploader * scripts: obsapi: Kick get_project_repo_archs from uploader * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb3: missing inode locks in punch hole (git-fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * xfs: don't drain buffer lru on freeze and read-only remount (bsc#1280223). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4687 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4687 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4687 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (nosrc) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_333-default-1-8.3.3 * kernel-default-kgraft-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-kgraft-devel-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-4.12.14-122.333.2 * dlm-kmp-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-4.12.14-122.333.2 * cluster-md-kmp-default-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-base-debuginfo-4.12.14-122.333.2 * kernel-syms-4.12.14-122.333.2 * kernel-default-base-4.12.14-122.333.2 * cluster-md-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-devel-4.12.14-122.333.2 * gfs2-kmp-default-debuginfo-4.12.14-122.333.2 * gfs2-kmp-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * kernel-default-devel-debuginfo-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * kernel-macros-4.12.14-122.333.2 * kernel-source-4.12.14-122.333.2 * kernel-devel-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x) * kernel-default-man-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * dlm-kmp-default-4.12.14-122.333.2 * dlm-kmp-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-4.12.14-122.333.2 * cluster-md-kmp-default-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-base-debuginfo-4.12.14-122.333.2 * kernel-syms-4.12.14-122.333.2 * kernel-default-base-4.12.14-122.333.2 * kernel-default-devel-debuginfo-4.12.14-122.333.2 * cluster-md-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-devel-4.12.14-122.333.2 * gfs2-kmp-default-debuginfo-4.12.14-122.333.2 * gfs2-kmp-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (nosrc x86_64) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * kernel-macros-4.12.14-122.333.2 * kernel-source-4.12.14-122.333.2 * kernel-devel-4.12.14-122.333.2 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-31663.html * https://www.suse.com/security/cve/CVE-2026-43428.html * https://www.suse.com/security/cve/CVE-2026-45834.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-46312.html * https://www.suse.com/security/cve/CVE-2026-52975.html * https://www.suse.com/security/cve/CVE-2026-53037.html * https://www.suse.com/security/cve/CVE-2026-53237.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53385.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63897.html * https://www.suse.com/security/cve/CVE-2026-63900.html * https://www.suse.com/security/cve/CVE-2026-63902.html * https://www.suse.com/security/cve/CVE-2026-63903.html * https://www.suse.com/security/cve/CVE-2026-63904.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63942.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63957.html * https://www.suse.com/security/cve/CVE-2026-63961.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64014.html * https://www.suse.com/security/cve/CVE-2026-64097.html * https://www.suse.com/security/cve/CVE-2026-64191.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64342.html * https://www.suse.com/security/cve/CVE-2026-64348.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64375.html * https://www.suse.com/security/cve/CVE-2026-64378.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64496.html * https://www.suse.com/security/cve/CVE-2026-64540.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68108.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68184.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68350.html * https://www.suse.com/security/cve/CVE-2026-68365.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68377.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-68479.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72463.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74276.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74424.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74474.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74497.html * https://www.suse.com/security/cve/CVE-2026-74498.html * https://www.suse.com/security/cve/CVE-2026-74499.html * https://www.suse.com/security/cve/CVE-2026-74512.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74585.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74641.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74682.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74691.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80558.html * https://www.suse.com/security/cve/CVE-2026-80561.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80798.html * https://www.suse.com/security/cve/CVE-2026-80800.html * https://www.suse.com/security/cve/CVE-2026-80829.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80908.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-81005.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89524.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89752.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89870.html * https://www.suse.com/security/cve/CVE-2026-89927.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90223.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1031492 * https://bugzilla.suse.com/show_bug.cgi?id=1045298 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1263133 * https://bugzilla.suse.com/show_bug.cgi?id=1265138 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266412 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1267990 * https://bugzilla.suse.com/show_bug.cgi?id=1268276 * https://bugzilla.suse.com/show_bug.cgi?id=1269081 * https://bugzilla.suse.com/show_bug.cgi?id=1269131 * https://bugzilla.suse.com/show_bug.cgi?id=1269234 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271834 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272211 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272472 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272480 * https://bugzilla.suse.com/show_bug.cgi?id=1272499 * https://bugzilla.suse.com/show_bug.cgi?id=1272517 * https://bugzilla.suse.com/show_bug.cgi?id=1272522 * https://bugzilla.suse.com/show_bug.cgi?id=1272523 * https://bugzilla.suse.com/show_bug.cgi?id=1272642 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273023 * https://bugzilla.suse.com/show_bug.cgi?id=1273302 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273480 * https://bugzilla.suse.com/show_bug.cgi?id=1273600 * https://bugzilla.suse.com/show_bug.cgi?id=1273603 * https://bugzilla.suse.com/show_bug.cgi?id=1273769 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273868 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274011 * https://bugzilla.suse.com/show_bug.cgi?id=1274026 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274682 * https://bugzilla.suse.com/show_bug.cgi?id=1274831 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274869 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1274981 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275954 * https://bugzilla.suse.com/show_bug.cgi?id=1275957 * https://bugzilla.suse.com/show_bug.cgi?id=1275958 * https://bugzilla.suse.com/show_bug.cgi?id=1275959 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276257 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276321 * https://bugzilla.suse.com/show_bug.cgi?id=1276335 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276495 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276585 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276925 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276934 * https://bugzilla.suse.com/show_bug.cgi?id=1277064 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277265 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277485 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277881 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278310 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1279485 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279627 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279809 * https://bugzilla.suse.com/show_bug.cgi?id=1279812 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280223 * https://bugzilla.suse.com/show_bug.cgi?id=1280230 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280581 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281176 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281352 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281429 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281708 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:24 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 20:35:24 -0000 Subject: SUSE-RU-2026:4688-1: moderate: Recommended update for saphana-checks Message-ID: <179209652465.2162.2840734422520288785@b67e7bbcf91d> # Recommended update for saphana-checks Announcement ID: SUSE-RU-2026:4688-1 Release Date: 2026-10-15T14:37:38Z Rating: moderate References: Affected Products: * openSUSE Leap 15.6 * SAP Applications Module 15-SP6 * SAP Applications Module 15-SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for saphana-checks fixes the following issues: * Update to version 2609+1.gb216233: * OS/Hyperscaler: * Remove unsupported SLES 15.1 through 15.3 releases from the SAP HANA OS support matrix * Extend the OS support matrix with SLES 15.7 on Alibaba Cloud * Add validation to ensure that fstrim.timer is disabled * Azure - new certified instances * Update GCP certified instance validation * IBM Cloud - new certified instances * Simplify CPU idle checks 1400/1410 and add unit tests * Update Intel CPU frequency scaling checks and add unit tests * Update clocksource checks for Hyper-V/Azure and fix Intel clocksource matching * Apply driver-specific Azure NIC ring buffer recommendations * SLES Power kernel issue - TID 000022819 SR-IOV Update Causes Network Adapter Unavailability on Linux LPAR * Change the NetApp NFSv3 RPC slot validation result from warning to error * SLES kernel issue - High system CPU utilization during HANA table load * Agents/Tools: * Update the required saptune version to 3.2.4 * Update Microsoft Azure AzCopy to the latest supported version * HANA * Update the supported SAP HANA client version to 2.30.27 * Code Quality and Refactoring * Upgrade bashunit and refresh unit-test conventions * Update shfmt used by CI to version 3.14.1 * Upgrade bashunit to version 0.51 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2026-4688 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4688 * SAP Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2026-4688 ## Package List: * SAP Applications Module 15-SP6 (noarch) * saphana-checks-2609+1.gb216233-150600.13.41.1 * openSUSE Leap 15.6 (noarch) * saphana-checks-2609+1.gb216233-150600.13.41.1 * SAP Applications Module 15-SP7 (noarch) * saphana-checks-2609+1.gb216233-150600.13.41.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:38 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 20:35:38 -0000 Subject: SUSE-SU-2026:4686-1: moderate: Security update for openssh Message-ID: <179209653851.2162.81982151346016810@b67e7bbcf91d> # Security update for openssh Announcement ID: SUSE-SU-2026:4686-1 Release Date: 2026-10-15T12:37:43Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4686 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4686 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh-helpers-7.2p2-81.43.1 * openssh-debuginfo-7.2p2-81.43.1 * openssh-fips-7.2p2-81.43.1 * openssh-7.2p2-81.43.1 * openssh-askpass-gnome-7.2p2-81.43.1 * openssh-askpass-gnome-debuginfo-7.2p2-81.43.1 * openssh-debugsource-7.2p2-81.43.1 * openssh-helpers-debuginfo-7.2p2-81.43.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh-helpers-7.2p2-81.43.1 * openssh-debuginfo-7.2p2-81.43.1 * openssh-fips-7.2p2-81.43.1 * openssh-7.2p2-81.43.1 * openssh-askpass-gnome-7.2p2-81.43.1 * openssh-askpass-gnome-debuginfo-7.2p2-81.43.1 * openssh-debugsource-7.2p2-81.43.1 * openssh-helpers-debuginfo-7.2p2-81.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 15 Oct 2026 20:35:48 -0000 Subject: SUSE-SU-2026:4685-1: important: Security update for mutt Message-ID: <179209654859.2162.16070065221460495181@b67e7bbcf91d> # Security update for mutt Announcement ID: SUSE-SU-2026:4685-1 Release Date: 2026-10-15T12:37:21Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4685 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4685 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * mutt-1.10.1-55.36.1 * mutt-debugsource-1.10.1-55.36.1 * mutt-debuginfo-1.10.1-55.36.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * mutt-1.10.1-55.36.1 * mutt-debugsource-1.10.1-55.36.1 * mutt-debuginfo-1.10.1-55.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 16:30:20 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 16:30:20 -0000 Subject: SUSE-RU-2026:4692-1: important: Recommended update for rmt-server Message-ID: <179216822021.691.6301139182954534329@4239a07c48b6> # Recommended update for rmt-server Announcement ID: SUSE-RU-2026:4692-1 Release Date: 2026-10-16T11:17:42Z Rating: important References: * bsc#1273349 * bsc#1274088 * bsc#1274090 * bsc#1274092 * bsc#1275439 * bsc#1276939 Affected Products: * Public Cloud Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has six fixes can now be installed. ## Description: This update for rmt-server fixes the following issues: * Update to version 3.2: * Avoid NoMethodError for rmt-cli systems list (bsc#1275439) * Add --product switch to rmt-client-setup-res, so customer could register to different supported minor releases not only latest one. * Re-implement RMT::Downloader to eliminate use of fibers (bsc#1276939) * rmt-server-pubcloud: * Do not return 500s for registry engine * Fix: rmt-server-sync failure shows Mysql2::Error: Record has changed since last read in table 'repositories' (bsc#1273349) * Fix: 500 Internal Server Error during regsharing: ActiveRecord::StatementInvalid (bsc#1274088) * Fix: 500 Internal Server Error: ActiveRecord::InvalidForeignKey (bsc#1274090) * Fix: ActiveRecord::Deadlocked on registration sharing push (bsc#1274092) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4692 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4692 ## Package List: * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-3.2.0-150700.3.31.1 * rmt-server-pubcloud-3.2.0-150700.3.31.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rmt-server-debuginfo-3.2.0-150700.3.31.1 * rmt-server-3.2.0-150700.3.31.1 * rmt-server-config-3.2.0-150700.3.31.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273349 * https://bugzilla.suse.com/show_bug.cgi?id=1274088 * https://bugzilla.suse.com/show_bug.cgi?id=1274090 * https://bugzilla.suse.com/show_bug.cgi?id=1274092 * https://bugzilla.suse.com/show_bug.cgi?id=1275439 * https://bugzilla.suse.com/show_bug.cgi?id=1276939 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 16:31:06 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 16:31:06 -0000 Subject: SUSE-SU-2026:4691-1: important: Security update for ImageMagick Message-ID: <179216826600.691.13526318276467922966@4239a07c48b6> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4691-1 Release Date: 2026-10-16T08:42:28Z Rating: important References: * bsc#1268113 * bsc#1268117 * bsc#1279696 * bsc#1279711 * bsc#1279794 * bsc#1279797 * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1281913 * bsc#1284217 * bsc#1284661 * bsc#1284662 * bsc#1284663 * bsc#1284664 * bsc#1284665 * bsc#1284667 * bsc#1284668 * bsc#1284669 * bsc#1284671 * bsc#1284672 * bsc#1284673 * bsc#1284674 * bsc#1284675 * bsc#1284677 * bsc#1284678 * bsc#1284681 * bsc#1284682 * bsc#1284683 Cross-References: * CVE-2026-105083 * CVE-2026-106564 * CVE-2026-106565 * CVE-2026-106566 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106570 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106573 * CVE-2026-106574 * CVE-2026-106575 * CVE-2026-106576 * CVE-2026-106577 * CVE-2026-106578 * CVE-2026-106579 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-86420 * CVE-2026-86421 * CVE-2026-86423 * CVE-2026-86425 * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 * CVE-2026-93590 CVSS scores: * CVE-2026-105083 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-105083 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105083 ( NVD ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-106564 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106564 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106566 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106566 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106574 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106574 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106575 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106575 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106576 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106576 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106578 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106578 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86420 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86420 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86421 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-86421 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86421 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86421 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86421 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86423 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86423 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86423 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86423 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86423 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-86425 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86425 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86425 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86425 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93590 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93590 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93590 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93590 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 28 vulnerabilities and has two security fixes can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). * CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). * CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794). * CVE-2026-86425: Denial of Service due to heap-use-after-free vulnerability (bsc#1279797). * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-93590: failure to perform policy checks during buffer allocation for image pixels in the UHDR encoder can lead to denial of service (bsc#1281913). * CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something else that is valid xml (bsc#1284217). * CVE-2026-106564: a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash (bsc#1284661). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106566: delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data (bsc#1284663). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106570: an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing a DoS (bsc#1284667). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106573: a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long- running operation (bsc#1284671). * CVE-2026-106574: a client connected to the distributed pixel cache server can send crafted pixel data that triggers a heap buffer overwrite and crash the server (bsc#1284672). * CVE-2026-106575: a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors (bsc#1284673). * CVE-2026-106576: a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing a DoS (bsc#1284674). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106578: a crafted image can cause an invalid memory free in the MVG decoder and crash the process (bsc#1284677). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4691 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4691 ## Package List: * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ImageMagick-config-7-upstream-websafe-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-open-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-secure-7.1.1.43-150700.3.84.1 * libMagickWand-7_Q16HDRI10-7.1.1.43-150700.3.84.1 * ImageMagick-debuginfo-7.1.1.43-150700.3.84.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-SUSE-7.1.1.43-150700.3.84.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.1.43-150700.3.84.1 * libMagickCore-7_Q16HDRI10-7.1.1.43-150700.3.84.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-devel-7.1.1.43-150700.3.84.1 * libMagick++-7_Q16HDRI5-7.1.1.43-150700.3.84.1 * libMagick++-devel-7.1.1.43-150700.3.84.1 * ImageMagick-7.1.1.43-150700.3.84.1 * ImageMagick-debugsource-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-limited-7.1.1.43-150700.3.84.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-PerlMagick-7.1.1.43-150700.3.84.1 * perl-PerlMagick-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-debugsource-7.1.1.43-150700.3.84.1 * ImageMagick-debuginfo-7.1.1.43-150700.3.84.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105083.html * https://www.suse.com/security/cve/CVE-2026-106564.html * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106566.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106570.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106573.html * https://www.suse.com/security/cve/CVE-2026-106574.html * https://www.suse.com/security/cve/CVE-2026-106575.html * https://www.suse.com/security/cve/CVE-2026-106576.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106578.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-86420.html * https://www.suse.com/security/cve/CVE-2026-86421.html * https://www.suse.com/security/cve/CVE-2026-86423.html * https://www.suse.com/security/cve/CVE-2026-86425.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://www.suse.com/security/cve/CVE-2026-93590.html * https://bugzilla.suse.com/show_bug.cgi?id=1268113 * https://bugzilla.suse.com/show_bug.cgi?id=1268117 * https://bugzilla.suse.com/show_bug.cgi?id=1279696 * https://bugzilla.suse.com/show_bug.cgi?id=1279711 * https://bugzilla.suse.com/show_bug.cgi?id=1279794 * https://bugzilla.suse.com/show_bug.cgi?id=1279797 * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1281913 * https://bugzilla.suse.com/show_bug.cgi?id=1284217 * https://bugzilla.suse.com/show_bug.cgi?id=1284661 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284663 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284667 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284671 * https://bugzilla.suse.com/show_bug.cgi?id=1284672 * https://bugzilla.suse.com/show_bug.cgi?id=1284673 * https://bugzilla.suse.com/show_bug.cgi?id=1284674 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284677 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 16:31:25 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 16:31:25 -0000 Subject: SUSE-SU-2026:4690-1: important: Security update for libsoup Message-ID: <179216828585.691.13702282700851075482@4239a07c48b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4690-1 Release Date: 2026-10-16T08:42:01Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283831 Cross-References: * CVE-2026-0716 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-103399 * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-1539 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-0716 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-0716 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-0716 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-1539 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N * CVE-2026-1539 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-1539 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-1539 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4690 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4690 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-devel-2.62.2-5.49.1 * typelib-1_0-Soup-2_4-2.62.2-5.49.1 * libsoup-debugsource-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-2.62.2-5.49.1 * libsoup-2_4-1-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libsoup-2_4-1-32bit-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-32bit-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * libsoup-lang-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libsoup-devel-2.62.2-5.49.1 * libsoup-debugsource-2.62.2-5.49.1 * typelib-1_0-Soup-2_4-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-32bit-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-2.62.2-5.49.1 * libsoup-2_4-1-32bit-2.62.2-5.49.1 * libsoup-2_4-1-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * libsoup-lang-2.62.2-5.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0716.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-1539.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:30:12 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:30:12 -0000 Subject: SUSE-SU-2026:4708-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218261260.884.30537007665039730@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4708-1 Release Date: 2026-10-16T13:41:50Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4708 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_72-rt-4-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_19-debugsource-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_72-rt-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:04 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:41:04 -0000 Subject: SUSE-SU-2026:4706-1: important: Security update for the Linux Kernel Message-ID: <179218326409.884.2201210081154738367@6bdb3a6ced90> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4706-1 Release Date: 2026-10-16T13:34:08Z Rating: important References: * bsc#1222538 * bsc#1250951 * bsc#1254408 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267882 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1272971 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273320 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274824 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274900 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275137 * bsc#1275142 * bsc#1275238 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275680 * bsc#1275681 * bsc#1275682 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275801 * bsc#1275802 * bsc#1275804 * bsc#1275812 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275956 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276471 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276852 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1276947 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277153 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277234 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277407 * bsc#1277410 * bsc#1277451 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277535 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277773 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277845 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278709 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279590 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280239 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280309 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280927 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283121 * bsc#1283130 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283489 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16968 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23352 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63987 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68128 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68258 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68395 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72018 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72125 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72147 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72337 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-72491 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74286 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74440 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74513 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74533 * CVE-2026-74534 * CVE-2026-74535 * CVE-2026-74536 * CVE-2026-74538 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74551 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74665 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80721 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80947 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90047 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98030 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63987 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63987 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63987 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68128 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68128 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-68128 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68395 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72337 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74286 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74534 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74535 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74535 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74665 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74665 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80721 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80947 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90047 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90047 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * Legacy Module 15-SP7 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 508 vulnerabilities, contains seven features and has 20 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804). * CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). * CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). * ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: bound firmware ID by TLV length (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git- fixes). * Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git- fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix race condition during device registration (git- fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git- fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). * EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968). * EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: core: fix adapter registration race (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: s390: pci: Fix aisb calculation (bsc#1277451). * KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451). * KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451). * KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451). * KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451). * KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451). * KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451). * KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451). * KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451). * KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git- fixes). * media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852). * net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852). * net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852). * net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * nvme-tcp: fix usage of page_frag_cache (bsc#1267882). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (git-fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * USB: make to_usb_driver() use container_of_const() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mce: Add support for physical address valid bit (jsc#PED-16968). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951). * x86/tsx: Make tsx_ctrl_state static (bsc#1250951). * xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709). * xhci: fix lost bounce buffers on TDs spanning several ring segments (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4706 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4706 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4706 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4706 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4706 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4706 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4706 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-6.4.0-150700.53.84.1 * ocfs2-kmp-default-6.4.0-150700.53.84.1 * gfs2-kmp-default-6.4.0-150700.53.84.1 * dlm-kmp-default-6.4.0-150700.53.84.1 * gfs2-kmp-default-debuginfo-6.4.0-150700.53.84.1 * cluster-md-kmp-default-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * dlm-kmp-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * ocfs2-kmp-default-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150700.53.84.1.150700.17.47.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-devel-debuginfo-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (noarch) * kernel-devel-6.4.0-150700.53.84.1 * kernel-macros-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (nosrc s390x) * kernel-zfcpdump-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150700.53.84.1 * kernel-zfcpdump-debuginfo-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 nosrc) * kernel-64kb-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64) * kernel-64kb-debuginfo-6.4.0-150700.53.84.1 * kernel-64kb-devel-debuginfo-6.4.0-150700.53.84.1 * kernel-64kb-debugsource-6.4.0-150700.53.84.1 * kernel-64kb-devel-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (noarch nosrc) * kernel-docs-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-150700.53.84.1 * kernel-obs-build-6.4.0-150700.53.84.1 * kernel-obs-build-debugsource-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (noarch) * kernel-source-6.4.0-150700.53.84.1 * Legacy Module 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-6.4.0-150700.53.84.1 * reiserfs-kmp-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Live Patching 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-6.4.0-150700.53.84.1 * kernel-default-livepatch-6.4.0-150700.53.84.1 * kernel-livepatch-6_4_0-150700_53_84-default-debuginfo-1-150700.15.3.1 * kernel-livepatch-SLE15-SP7_Update_22-debugsource-1-150700.15.3.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-livepatch-6_4_0-150700_53_84-default-1-150700.15.3.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * Public Cloud Module 15-SP7 (aarch64 nosrc x86_64) * kernel-azure-6.4.0-150700.53.84.1 * Public Cloud Module 15-SP7 (aarch64 x86_64) * kernel-azure-debugsource-6.4.0-150700.53.84.1 * kernel-azure-devel-6.4.0-150700.53.84.1 * kernel-azure-debuginfo-6.4.0-150700.53.84.1 * kernel-azure-devel-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * kernel-default-extra-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-extra-debuginfo-6.4.0-150700.53.84.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63987.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68128.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68395.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72125.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72337.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74286.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74513.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74533.html * https://www.suse.com/security/cve/CVE-2026-74534.html * https://www.suse.com/security/cve/CVE-2026-74535.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74551.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74665.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80721.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80947.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90047.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1250951 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267882 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1272971 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274900 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275238 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275680 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275801 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275804 * https://bugzilla.suse.com/show_bug.cgi?id=1275812 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275956 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276471 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277407 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277451 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277535 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277773 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277845 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278709 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280239 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280927 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16968 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:17 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:41:17 -0000 Subject: SUSE-SU-2026:4702-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218327767.884.14995652635155147392@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4702-1 Release Date: 2026-10-16T15:34:00Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4702 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4713 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_67-rt-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_18-debugsource-4-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_17-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_67-rt-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:30 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:41:30 -0000 Subject: SUSE-SU-2026:4693-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218329010.884.16997218745023751164@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4693-1 Release Date: 2026-10-16T15:33:51Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4693 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4695 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4698 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4694 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4697 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4699 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4696 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4711 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4701 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4712 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4700 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4707 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_22-rt-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-debuginfo-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_15-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_12-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-debuginfo-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_11-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-debuginfo-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_13-debugsource-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_16-debugsource-7-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_9-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_8-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_6-debugsource-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_4-debugsource-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-debuginfo-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_14-debugsource-8-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-14-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:36 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:41:36 -0000 Subject: SUSE-SU-2026:4710-1: moderate: Security update for glib2 Message-ID: <179218329600.884.13156161817612786195@6bdb3a6ced90> # Security update for glib2 Announcement ID: SUSE-SU-2026:4710-1 Release Date: 2026-10-16T13:51:25Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4710 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4710 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4710 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4710 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4710 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4710 ## Package List: * openSUSE Leap 15.4 (noarch) * gio-branding-upstream-2.70.5-150400.3.40.1 * glib2-lang-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libgobject-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-doc-2.70.5-150400.3.40.1 * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * glib2-tests-devel-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-devel-static-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * glib2-devel-2.70.5-150400.3.40.1 * libgthread-2_0-0-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tests-devel-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-devel-debuginfo-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (x86_64) * libgthread-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.40.1 * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-32bit-2.70.5-150400.3.40.1 * libglib-2_0-0-32bit-2.70.5-150400.3.40.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-32bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-32bit-2.70.5-150400.3.40.1 * glib2-devel-32bit-2.70.5-150400.3.40.1 * glib2-devel-32bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-32bit-debuginfo-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * glib2-devel-64bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-64bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-64bit-2.70.5-150400.3.40.1 * libglib-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-64bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-64bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-64bit-2.70.5-150400.3.40.1 * glib2-tools-64bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-64bit-2.70.5-150400.3.40.1 * glib2-devel-64bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:44 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:41:44 -0000 Subject: SUSE-SU-2026:4704-1: important: Security update for python-urllib3 Message-ID: <179218330429.884.4908891370861726082@6bdb3a6ced90> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4704-1 Release Date: 2026-10-16T13:31:23Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4704 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4704 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4704 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4704 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4704 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4704 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4704 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4704 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4704 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4704 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4704 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4704 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4704 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * Public Cloud Module 15-SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * openSUSE Leap 15.4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * Python 3 Module 15-SP7 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:42:05 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 16 Oct 2026 20:42:05 -0000 Subject: SUSE-SU-2026:4703-1: important: Security update for libsoup2 Message-ID: <179218332514.884.6049056056575846036@6bdb3a6ced90> # Security update for libsoup2 Announcement ID: SUSE-SU-2026:4703-1 Release Date: 2026-10-16T13:29:47Z Rating: important References: * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1275988 * bsc#1276759 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 * CVE-2026-77014 * CVE-2026-77680 CVSS scores: * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-77014 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77014 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77680 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77680 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup2 fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988). * CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4703 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4703 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4703 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4703 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150600.4.42.1 * libsoup2-devel-32bit-2.74.3-150600.4.42.1 * libsoup-2_4-1-32bit-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-2_4-1-64bit-debuginfo-2.74.3-150600.4.42.1 * libsoup-2_4-1-64bit-2.74.3-150600.4.42.1 * libsoup2-devel-64bit-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * Basesystem Module 15-SP7 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://www.suse.com/security/cve/CVE-2026-77014.html * https://www.suse.com/security/cve/CVE-2026-77680.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1275988 * https://bugzilla.suse.com/show_bug.cgi?id=1276759 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:18 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:30:18 -0000 Subject: SUSE-SU-2026:4725-1: important: Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4) Message-ID: <179239861876.9206.1604726619365625507@1f36704aac72> # Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4725-1 Release Date: 2026-10-18T18:33:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.200 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4725 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4726 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4727 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4723 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4724 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4726 SUSE-2026-4727 SUSE-2026-4723 SUSE-2026-4724 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_310-default-8-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_50-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-15-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_50-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-15-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:31 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:30:31 -0000 Subject: SUSE-SU-2026:4718-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) Message-ID: <179239863157.9206.11017426379904315882@1f36704aac72> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4718-1 Release Date: 2026-10-18T15:04:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4718 SUSE-SLE-Live- Patching-12-SP5-2026-4719 SUSE-SLE-Live-Patching-12-SP5-2026-4721 SUSE-SLE-Live- Patching-12-SP5-2026-4720 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4722 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4722 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_307-default-8-2.1 * kgraft-patch-4_12_14-122_293-default-14-2.1 * kgraft-patch-4_12_14-122_302-default-10-2.1 * kgraft-patch-4_12_14-122_296-default-11-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-21-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-21-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-21-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-21-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-21-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-21-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:30:42 -0000 Subject: SUSE-SU-2026:4717-1: important: Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Message-ID: <179239864283.9206.15677064479832458026@1f36704aac72> # Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4717-1 Release Date: 2026-10-18T11:04:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4717 SUSE-SLE-Live- Patching-12-SP5-2026-4716 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_290-default-15-2.1 * kgraft-patch-4_12_14-122_283-default-15-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:30:47 -0000 Subject: SUSE-RU-2026:24192-1: important: Recommended update for the initial kernel livepatch Message-ID: <179239864784.9206.12151081425663250052@1f36704aac72> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24192-1 Release Date: 2026-10-12T15:22:34Z Rating: important References: Affected Products: * SUSE Linux Micro 6.1 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-687 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_30-debugsource-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-rt-debuginfo-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-rt-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:53 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:30:53 -0000 Subject: SUSE-RU-2026:24191-1: important: Recommended update for the initial kernel livepatch Message-ID: <179239865370.9206.11391923890822352827@1f36704aac72> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24191-1 Release Date: 2026-10-12T15:12:19Z Rating: important References: Affected Products: * SUSE Linux Micro 6.1 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-685 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_30-debugsource-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-default-debuginfo-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-default-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:41:38 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:41:38 -0000 Subject: SUSE-SU-2026:24181-1: important: Security update for the Linux Kernel Message-ID: <179239929896.9206.14150072214182005666@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24181-1 Release Date: 2026-10-12T16:13:17Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 473 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-684 ## Package List: * SUSE Linux Micro 6.1 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 ppc64le) * kernel-default-base-6.4.0-159998.53.1.159998.21.38 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-159998.53.1 * kernel-default-debuginfo-6.4.0-159998.53.1 * kernel-default-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (noarch) * kernel-source-6.4.0-159998.53.1 * kernel-macros-6.4.0-159998.53.1 * kernel-devel-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (ppc64le x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-default-base-6.4.0-159998.53.1.159998.21.37 * kernel-kvmsmall-debuginfo-6.4.0-159998.53.1 * kernel-kvmsmall-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:41:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:41:49 -0000 Subject: SUSE-SU-2026:24189-1: moderate: Security update for python-oauthlib Message-ID: <179239930913.9206.7406734284193794455@1f36704aac72> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24189-1 Release Date: 2026-10-14T16:09:45Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1917 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-oauthlib-3.2.2-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:42:09 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:42:09 -0000 Subject: SUSE-SU-2026:24188-1: important: Security update for openssl-3 Message-ID: <179239932938.9206.10785767165989912908@1f36704aac72> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24188-1 Release Date: 2026-10-14T15:16:30Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1916 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:42:14 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:42:14 -0000 Subject: SUSE-RU-2026:24187-1: moderate: Recommended update for certification-sles-eal4 Message-ID: <179239933406.9206.7210560573037813947@1f36704aac72> # Recommended update for certification-sles-eal4 Announcement ID: SUSE-RU-2026:24187-1 Release Date: 2026-10-14T09:52:28Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for certification-sles-eal4 fixes the following issues: Changes in certification-sles-eal4: * added certification-sles-eal4-password-check sub-package * disable the apply logic for now * added SL Micro 6.2 image style support ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1912 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * certification-sles-eal4-16.0.3-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:42:18 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:42:18 -0000 Subject: SUSE-RU-2026:24186-1: moderate: Recommended update for rpm Message-ID: <179239933854.9206.8999529223061435074@1f36704aac72> # Recommended update for rpm Announcement ID: SUSE-RU-2026:24186-1 Release Date: 2026-10-13T15:09:37Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for rpm fixes the following issues: Changes in rpm: * Do not dependent on python3-base, it is perfectly OK to use any Python interpreter for python-rpm-packaging. * Remove obsolete Python2-based removal of Python directories. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1909 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * rpm-debugsource-4.20.1-160000.4.1 * python313-rpm-4.20.1-160000.4.1 * rpm-plugin-fapolicyd-4.20.1-160000.4.1 * rpm-plugin-ima-4.20.1-160000.4.1 * python-rpm-debugsource-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debugsource-4.20.1-160000.4.1 * rpm-plugin-syslog-4.20.1-160000.4.1 * rpm-plugin-unshare-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debuginfo-4.20.1-160000.4.1 * rpm-4.20.1-160000.4.1 * librpmbuild10-debuginfo-4.20.1-160000.4.1 * rpm-debuginfo-4.20.1-160000.4.1 * rpm-plugin-prioreset-4.20.1-160000.4.1 * rpm-plugin-selinux-4.20.1-160000.4.1 * librpmbuild10-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-4.20.1-160000.4.1 * python313-rpm-debuginfo-4.20.1-160000.4.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:42:22 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:42:22 -0000 Subject: SUSE-RU-2026:24185-1: important: Recommended update for the initial kernel livepatch Message-ID: <179239934293.9206.8079404336239611716@1f36704aac72> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24185-1 Release Date: 2026-10-12T13:24:35Z Rating: important References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise 16.0 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1905 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_18-debugsource-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-default-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-default-debuginfo-1-160000.1.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_18-debugsource-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-rt-debuginfo-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-rt-1-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:51:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:51:25 -0000 Subject: SUSE-SU-2026:24184-1: important: Security update for the Linux Kernel Message-ID: <179239988591.9206.18058718749881248777@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24184-1 Release Date: 2026-10-12T13:24:33Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1904 ## Package List: * SUSE Linux Micro 6.2 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-rt-devel-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-rt-livepatch-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (noarch) * kernel-source-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 nosrc x86_64) * kernel-rt-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * kernel-rt-debuginfo-6.12.0-160000.39.1 * kernel-rt-devel-6.12.0-160000.39.1 * kernel-rt-debugsource-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64) * kernel-64kb-devel-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.28 * kernel-64kb-debuginfo-6.12.0-160000.39.1 * kernel-64kb-debugsource-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:51:36 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 08:51:36 -0000 Subject: SUSE-RU-2026:24183-1: moderate: Recommended update for selinux-policy Message-ID: <179239989637.9206.5181277033359403690@1f36704aac72> # Recommended update for selinux-policy Announcement ID: SUSE-RU-2026:24183-1 Release Date: 2026-10-12T09:11:17Z Rating: moderate References: * bsc#1257101 * bsc#1278135 * bsc#1279565 Affected Products: * SUSE Linux Micro 6.2 An update that has three fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Changes in selinux-policy: * Update to version 20250627+git412.dbf877ab7: * Fix typo in screen.fc * Allow cscreend to start screen as unconfined domain (bsc#1257101) * Label charon-nm as ipsec_exec_t (bsc#1278135) * Update to version 20250627+git407.e864ced8f: * Allow rsync to read var_t (bsc#1279565) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1900 ## Package List: * SUSE Linux Micro 6.2 (noarch) * selinux-policy-minimum-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-devel-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-targeted-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-20250627+git412.dbf877ab7-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1257101 * https://bugzilla.suse.com/show_bug.cgi?id=1278135 * https://bugzilla.suse.com/show_bug.cgi?id=1279565 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:02:35 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:02:35 -0000 Subject: SUSE-SU-2026:24182-1: important: Security update for podman Message-ID: <179240055524.9206.16013237249937662671@1f36704aac72> # Security update for podman Announcement ID: SUSE-SU-2026:24182-1 Release Date: 2026-10-12T08:46:21Z Rating: important References: * bsc#1222538 * bsc#1248988 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1268579 * bsc#1269000 * bsc#1269471 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-55686 * CVE-2026-57231 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro 6.2 An update that solves 481 vulnerabilities, contains three features and has 15 fixes can now be installed. ## Security update for podman ### Description: This update for podman fixes the following issues: Security issues fixed: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). Non security issue fixed: * catatonit missing in /usr/libexec/podman/ (bsc#1248988). ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-686 * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1902 ## Package List: * SUSE Linux Micro 6.1 (noarch) * kernel-source-rt-6.4.0-159998.53.1 * kernel-devel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 nosrc x86_64) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-debuginfo-6.4.0-159998.53.1 * kernel-rt-devel-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-rt-livepatch-6.4.0-159998.53.1 * kernel-rt-devel-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * podman-remote-debuginfo-5.4.2-160000.6.1 * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * SUSE Linux Micro 6.2 (noarch) * podman-docker-5.4.2-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1248988 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:02:51 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:02:51 -0000 Subject: SUSE-RU-2026:24181-1: important: Recommended update for netcfg Message-ID: <179240057159.9206.1150786181443167537@1f36704aac72> # Recommended update for netcfg Announcement ID: SUSE-RU-2026:24181-1 Release Date: 2026-10-12T08:18:56Z Rating: important References: * bsc#1211886 * bsc#1243708 * bsc#1263098 * bsc#1282745 * bsc#822653 Affected Products: * SUSE Linux Micro 6.2 An update that has five fixes can now be installed. ## Description: This update for netcfg fixes the following issues: Changes in netcfg: * Don't replace /etc/services on updates (bsc#1282745) * Add missing changes from factory: * Add missing %verify(not mode) (bsc#1263098) * services: remove invalid SIEVE entry (bsc#1243708, bsc#822653) * Add krb-prop entry (bsc#1211886) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1899 ## Package List: * SUSE Linux Micro 6.2 (noarch) * netcfg-11.6-160000.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211886 * https://bugzilla.suse.com/show_bug.cgi?id=1243708 * https://bugzilla.suse.com/show_bug.cgi?id=1263098 * https://bugzilla.suse.com/show_bug.cgi?id=1282745 * https://bugzilla.suse.com/show_bug.cgi?id=822653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:02:56 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:02:56 -0000 Subject: SUSE-RU-2026:24180-1: moderate: Recommended update for rpm Message-ID: <179240057628.9206.13987091827309151647@1f36704aac72> # Recommended update for rpm Announcement ID: SUSE-RU-2026:24180-1 Release Date: 2026-10-13T15:28:44Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that can now be installed. ## Description: This update for rpm fixes the following issues: Changes in rpm: * Do not dependent on python3-base, it is perfectly OK to use any Python interpreter for python-rpm-packaging. * Remove obsolete Python2-based removal of Python directories. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1909 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * rpm-debuginfo-4.20.1-160000.4.1 * rpm-build-4.20.1-160000.4.1 * rpm-build-debuginfo-4.20.1-160000.4.1 * rpm-debugsource-4.20.1-160000.4.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:11:57 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:11:57 -0000 Subject: SUSE-SU-2026:24179-1: important: Security update for the Linux Kernel Message-ID: <179240111743.9206.276516351713928550@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24179-1 Release Date: 2026-10-12T14:15:17Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1904 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.12.0-160000.39.1 * kernel-obs-build-6.12.0-160000.39.1 * kernel-obs-build-debugsource-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:22:53 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:22:53 -0000 Subject: SUSE-SU-2026:24178-1: important: Security update for iperf Message-ID: <179240177309.9206.13877732538961710120@1f36704aac72> # Security update for iperf Announcement ID: SUSE-SU-2026:24178-1 Release Date: 2026-10-12T13:03:29Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * bsc#1284404 * bsc#1284405 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-71217 * CVE-2026-71218 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.1 * SUSE Linux Micro Extras 6.2 An update that solves 478 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Security update for iperf ### Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22 ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-kernel-684 * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1903 ## Package List: * SUSE Linux Micro Extras 6.1 (nosrc) * kernel-64kb-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.1 (aarch64) * kernel-64kb-devel-6.4.0-159998.53.1 * kernel-64kb-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-159998.53.1 * kernel-obs-build-debugsource-6.4.0-159998.53.1 * kernel-obs-build-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * iperf-debugsource-3.21-160000.1.1 * libiperf0-3.21-160000.1.1 * iperf-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:23:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:23:01 -0000 Subject: SUSE-SU-2026:4715-1: important: Security update for buildah Message-ID: <179240178183.9206.15292983707874724975@1f36704aac72> # Security update for buildah Announcement ID: SUSE-SU-2026:4715-1 Release Date: 2026-10-17T20:34:17Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for buildah rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4715 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4715 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4715 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4715 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4715 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.76.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150400.3.76.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:23:15 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 09:23:15 -0000 Subject: SUSE-SU-2026:4714-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7) Message-ID: <179240179532.9206.17068172144686266852@1f36704aac72> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4714-1 Release Date: 2026-10-16T16:33:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4714 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_34-rt-debuginfo-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-11-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_10-debugsource-11-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 12:30:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 12:30:17 -0000 Subject: SUSE-SU-2026:4730-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Message-ID: <179241301798.16244.11029101160070099687@78319f1833ff> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4730-1 Release Date: 2026-10-19T07:04:25Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4730 SUSE-SLE-Live- Patching-12-SP5-2026-4728 SUSE-SLE-Live-Patching-12-SP5-2026-4729 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4731 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4731 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_317-default-6-2.1 * kgraft-patch-4_12_14-122_320-default-5-2.1 * kgraft-patch-4_12_14-122_299-default-11-2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_30-debugsource-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-20-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_30-debugsource-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-20-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 12:30:36 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 12:30:36 -0000 Subject: SUSE-SU-2026:4732-1: important: Security update for xen Message-ID: <179241303624.16244.17254428868724623106@78319f1833ff> # Security update for xen Announcement ID: SUSE-SU-2026:4732-1 Release Date: 2026-10-19T07:15:07Z Rating: important References: * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4732 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4732 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * xen-libs-debuginfo-4.12.4_76-3.154.1 * xen-4.12.4_76-3.154.1 * xen-debugsource-4.12.4_76-3.154.1 * xen-doc-html-4.12.4_76-3.154.1 * xen-libs-debuginfo-32bit-4.12.4_76-3.154.1 * xen-libs-4.12.4_76-3.154.1 * xen-libs-32bit-4.12.4_76-3.154.1 * xen-tools-debuginfo-4.12.4_76-3.154.1 * xen-tools-domU-debuginfo-4.12.4_76-3.154.1 * xen-tools-4.12.4_76-3.154.1 * xen-tools-domU-4.12.4_76-3.154.1 * xen-devel-4.12.4_76-3.154.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * xen-libs-debuginfo-4.12.4_76-3.154.1 * xen-4.12.4_76-3.154.1 * xen-debugsource-4.12.4_76-3.154.1 * xen-doc-html-4.12.4_76-3.154.1 * xen-libs-debuginfo-32bit-4.12.4_76-3.154.1 * xen-libs-4.12.4_76-3.154.1 * xen-libs-32bit-4.12.4_76-3.154.1 * xen-tools-debuginfo-4.12.4_76-3.154.1 * xen-tools-domU-debuginfo-4.12.4_76-3.154.1 * xen-tools-4.12.4_76-3.154.1 * xen-tools-domU-4.12.4_76-3.154.1 * xen-devel-4.12.4_76-3.154.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 16:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 16:30:16 -0000 Subject: SUSE-SU-2026:4733-1: important: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Message-ID: <179242741642.4003.17285099911526143760@4708518a8342> # Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4733-1 Release Date: 2026-10-19T10:47:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4733 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4733 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_130-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_33-debugsource-15-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_130-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_33-debugsource-15-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:30:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:30:13 -0000 Subject: SUSE-SU-2026:4734-1: important: Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5) Message-ID: <179244181398.161.4554752825570036860@816288a415ff> # Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4734-1 Release Date: 2026-10-19T12:34:15Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4734 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4734 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_36-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-11-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_36-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-11-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:30:46 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:30:46 -0000 Subject: SUSE-SU-2026:4744-1: important: Security update for python3, python3-base, python3-doc Message-ID: <179244184697.161.12200005007169627333@816288a415ff> # Security update for python3, python3-base, python3-doc Announcement ID: SUSE-SU-2026:4744-1 Release Date: 2026-10-19T15:01:40Z Rating: important References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2025-4435 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3276 * CVE-2026-6879 * CVE-2026-7774 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2025-4435 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4435 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python3: * Update bundled setuptools wheels to setuptools-40.6.2 (bsc#1276903). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4744 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4744 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libpython3_4m1_0-debuginfo-3.4.10-25.199.1 * python3-devel-3.4.10-25.199.1 * python3-tk-debuginfo-3.4.10-25.199.1 * python3-curses-3.4.10-25.199.1 * python3-base-3.4.10-25.199.1 * python3-3.4.10-25.199.1 * python3-base-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-3.4.10-25.199.1 * python3-curses-debuginfo-3.4.10-25.199.1 * python3-debuginfo-3.4.10-25.199.1 * python3-tk-3.4.10-25.199.1 * python3-debugsource-3.4.10-25.199.1 * python3-base-debugsource-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython3_4m1_0-32bit-3.4.10-25.199.1 * python3-base-debuginfo-32bit-3.4.10-25.199.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython3_4m1_0-debuginfo-3.4.10-25.199.1 * python3-devel-3.4.10-25.199.1 * python3-base-debuginfo-32bit-3.4.10-25.199.1 * python3-tk-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.199.1 * python3-devel-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-32bit-3.4.10-25.199.1 * python3-curses-3.4.10-25.199.1 * python3-base-3.4.10-25.199.1 * python3-3.4.10-25.199.1 * python3-base-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-3.4.10-25.199.1 * python3-curses-debuginfo-3.4.10-25.199.1 * python3-debuginfo-3.4.10-25.199.1 * python3-tk-3.4.10-25.199.1 * python3-debugsource-3.4.10-25.199.1 * python3-base-debugsource-3.4.10-25.199.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4435.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:31:13 -0000 Subject: SUSE-SU-2026:4743-1: important: Security update for python36 Message-ID: <179244187366.161.9037551379067980214@816288a415ff> # Security update for python36 Announcement ID: SUSE-SU-2026:4743-1 Release Date: 2026-10-19T15:00:55Z Rating: important References: * bsc#1259735 * bsc#1259989 * bsc#1261970 * bsc#1262429 * bsc#1264962 * bsc#1267974 * bsc#1273091 * bsc#1273148 * bsc#1274683 * bsc#1274743 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2026-13346 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-1703 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-4224 * CVE-2026-6879 * CVE-2026-7210 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 16 vulnerabilities and has one security fix can now be installed. ## Description: This update for python36 fixes the following issues: Security issues fixed: * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1274743). * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). * CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: * Update bundled setuptools wheels to setuptools-44.1.1-py2.py3-none-any.whl (bsc#1277271) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4743 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4743 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python36-devel-3.6.15-125.1 * libpython3_6m1_0-3.6.15-125.1 * python36-base-3.6.15-125.1 * python36-debuginfo-3.6.15-125.1 * libpython3_6m1_0-debuginfo-3.6.15-125.1 * python36-3.6.15-125.1 * python36-base-debuginfo-3.6.15-125.1 * python36-debugsource-3.6.15-125.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython3_6m1_0-32bit-3.6.15-125.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-125.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython3_6m1_0-32bit-3.6.15-125.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-125.1 * python36-devel-3.6.15-125.1 * libpython3_6m1_0-3.6.15-125.1 * python36-base-3.6.15-125.1 * python36-debuginfo-3.6.15-125.1 * libpython3_6m1_0-debuginfo-3.6.15-125.1 * python36-3.6.15-125.1 * python36-base-debuginfo-3.6.15-125.1 * python36-debugsource-3.6.15-125.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273091 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1274743 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:31:17 -0000 Subject: SUSE-OU-2026:4741-1: low: Recommended update for libnbd Message-ID: <179244187769.161.2913092923097761052@816288a415ff> # Recommended update for libnbd Announcement ID: SUSE-OU-2026:4741-1 Release Date: 2026-10-19T13:04:30Z Rating: low References: * jsc#PED-17064 Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains one feature can now be installed. ## Description: This update for libnbd fixes the following issue: * Add python3-libnbd to SLE-Module-Server-Applications_15-SP7 (jsc#PED-17064) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4741 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libnbd-debugsource-1.20.3-150700.3.2.1 * nbdfuse-debuginfo-1.20.3-150700.3.2.1 * libnbd0-debuginfo-1.20.3-150700.3.2.1 * libnbd-debuginfo-1.20.3-150700.3.2.1 * python3-libnbd-1.20.3-150700.3.2.1 * python3-libnbd-debuginfo-1.20.3-150700.3.2.1 * nbdfuse-1.20.3-150700.3.2.1 * libnbd0-1.20.3-150700.3.2.1 * libnbd-1.20.3-150700.3.2.1 ## References: * https://jira.suse.com/browse/PED-17064 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:31:21 -0000 Subject: SUSE-SU-2026:4740-1: important: Security update for kubernetes Message-ID: <179244188155.161.8388732111018125112@816288a415ff> # Security update for kubernetes Announcement ID: SUSE-SU-2026:4740-1 Release Date: 2026-10-19T13:00:27Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4740 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4740 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-1.37.0-150600.13.45.1 * kubernetes1.37-client-common-1.37.0-150600.13.45.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.37-client-fish-completion-1.37.0-150600.13.45.1 * kubernetes1.37-client-bash-completion-1.37.0-150600.13.45.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-1.37.0-150600.13.45.1 * kubernetes1.37-client-common-1.37.0-150600.13.45.1 * Containers Module 15-SP7 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.45.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:41 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:31:41 -0000 Subject: SUSE-SU-2026:4739-1: important: Security update for libsoup2 Message-ID: <179244190113.161.18148402721176672817@816288a415ff> # Security update for libsoup2 Announcement ID: SUSE-SU-2026:4739-1 Release Date: 2026-10-19T12:59:39Z Rating: important References: * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1275988 * bsc#1276759 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 * CVE-2026-77014 * CVE-2026-77680 CVSS scores: * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-77014 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77014 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77680 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77680 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup2 fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988). * CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4739 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4739 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4739 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4739 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4739 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4739 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4739 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4739 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4739 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4739 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4739 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4739 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4739 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4739 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150400.3.43.1 * libsoup2-devel-32bit-2.74.3-150400.3.43.1 * libsoup-2_4-1-32bit-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-2_4-1-64bit-2.74.3-150400.3.43.1 * libsoup2-devel-64bit-2.74.3-150400.3.43.1 * libsoup-2_4-1-64bit-debuginfo-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://www.suse.com/security/cve/CVE-2026-77014.html * https://www.suse.com/security/cve/CVE-2026-77680.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1275988 * https://bugzilla.suse.com/show_bug.cgi?id=1276759 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:4738-1: important: Security update for python Message-ID: <179244190922.161.15762034067175867107@816288a415ff> # Security update for python Announcement ID: SUSE-SU-2026:4738-1 Release Date: 2026-10-19T12:58:14Z Rating: important References: * bsc#1280459 Cross-References: * CVE-2026-82049 CVSS scores: * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issue: * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4738 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.136.1 * python-debuginfo-2.7.18-150000.136.1 * python-xml-2.7.18-150000.136.1 * python-2.7.18-150000.136.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.136.1 * python-gdbm-2.7.18-150000.136.1 * libpython2_7-1_0-2.7.18-150000.136.1 * python-curses-2.7.18-150000.136.1 * python-debugsource-2.7.18-150000.136.1 * python-xml-debuginfo-2.7.18-150000.136.1 * python-curses-debuginfo-2.7.18-150000.136.1 * python-base-debugsource-2.7.18-150000.136.1 * python-gdbm-debuginfo-2.7.18-150000.136.1 * python-base-debuginfo-2.7.18-150000.136.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:32:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:32:11 -0000 Subject: SUSE-SU-2026:4736-1: important: Security update for MozillaThunderbird Message-ID: <179244193163.161.7251265047863182616@816288a415ff> # Security update for MozillaThunderbird Announcement ID: SUSE-SU-2026:4736-1 Release Date: 2026-10-19T12:57:04Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275108 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-110249 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 86 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 (MFSA 2026-110, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. * CVE-2026-110249: Denial-of-service in the Exchange email component. libexpat updated: * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service (bsc#1275108). * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service (bsc#1275108). * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption (bsc#1275108). * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption (bsc#1275108). * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks (bsc#1275108). * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption (bsc#1275108). * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service (bsc#1275108). * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption (bsc#1275108). * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c (bsc#1275736). * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service (bsc#1275605). * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash (bsc#1275736). * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks (bsc#1275736). * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption (bsc#1275736). * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters (bsc#1282347). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4736 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4736 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4736 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-110249.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275108 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:32:22 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 19 Oct 2026 20:32:22 -0000 Subject: SUSE-SU-2026:4735-1: moderate: Security update for alsa Message-ID: <179244194275.161.4279912526256583582@816288a415ff> # Security update for alsa Announcement ID: SUSE-SU-2026:4735-1 Release Date: 2026-10-19T12:56:35Z Rating: moderate References: * bsc#1282563 * bsc#1282564 Cross-References: * CVE-2026-96674 * CVE-2026-96675 CVSS scores: * CVE-2026-96674 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96674 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-96674 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96674 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-96675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96675 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96675 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96675 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for alsa fixes the following issues: * CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in `src/topology/ctl.c` allows for integer overflow that can cause sensitive data leak and application crashes (bsc#1282564). * CVE-2026-96675: failure to validate sparse binding indices before array access when processing ALSA configuration files can lead to an assertion failure and an application abort (bsc#1282563). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4735 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4735 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * libasound2-debuginfo-1.2.8-150500.3.6.1 * libasound2-1.2.8-150500.3.6.1 * alsa-devel-1.2.8-150500.3.6.1 * alsa-1.2.8-150500.3.6.1 * alsa-debugsource-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (x86_64) * libatopology2-32bit-1.2.8-150500.3.6.1 * alsa-topology-devel-32bit-1.2.8-150500.3.6.1 * alsa-devel-32bit-1.2.8-150500.3.6.1 * libasound2-32bit-1.2.8-150500.3.6.1 * libatopology2-32bit-debuginfo-1.2.8-150500.3.6.1 * libasound2-32bit-debuginfo-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (aarch64_ilp32) * alsa-devel-64bit-1.2.8-150500.3.6.1 * alsa-topology-devel-64bit-1.2.8-150500.3.6.1 * libatopology2-64bit-debuginfo-1.2.8-150500.3.6.1 * libasound2-64bit-1.2.8-150500.3.6.1 * libasound2-64bit-debuginfo-1.2.8-150500.3.6.1 * libatopology2-64bit-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (noarch) * alsa-docs-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le x86_64) * libatopology2-debuginfo-1.2.8-150500.3.6.1 * libatopology2-1.2.8-150500.3.6.1 * alsa-topology-devel-1.2.8-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libasound2-debuginfo-1.2.8-150500.3.6.1 * alsa-debugsource-1.2.8-150500.3.6.1 * libasound2-1.2.8-150500.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96674.html * https://www.suse.com/security/cve/CVE-2026-96675.html * https://bugzilla.suse.com/show_bug.cgi?id=1282563 * https://bugzilla.suse.com/show_bug.cgi?id=1282564 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 08:30:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 08:30:19 -0000 Subject: SUSE-SU-2026:4746-1: important: Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) Message-ID: <179248501945.8583.17953895312862813279@6232765b24e4> # Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4746-1 Release Date: 2026-10-19T20:05:34Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4745 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4746 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4745 SUSE-2026-4746 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_31-debugsource-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-18-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-14-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_31-debugsource-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-18-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:26 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 12:30:26 -0000 Subject: SUSE-SU-2026:24194-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179249942602.1171.11654303877984478074@e2c34509880b> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24194-1 Release Date: 2026-10-15T16:47:57Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1920 ## Package List: * SUSE Linux Micro 6.2 (aarch64 x86_64) * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * SUSE Linux Micro 6.2 (aarch64) * nvidia-open-driver-G07-signed-cuda-kmp-64kb-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 12:30:35 -0000 Subject: SUSE-SU-2026:24193-1: moderate: Security update for p11-kit Message-ID: <179249943542.1171.10782090283178316159@e2c34509880b> # Security update for p11-kit Announcement ID: SUSE-SU-2026:24193-1 Release Date: 2026-10-15T12:13:14Z Rating: moderate References: * bsc#1269664 * bsc#1280702 Cross-References: * CVE-2026-13757 * CVE-2026-18938 CVSS scores: * CVE-2026-13757 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-13757 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for p11-kit fixes the following issues: * CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). * CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1919 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libp11-kit0-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13757.html * https://www.suse.com/security/cve/CVE-2026-18938.html * https://bugzilla.suse.com/show_bug.cgi?id=1269664 * https://bugzilla.suse.com/show_bug.cgi?id=1280702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 12:30:47 -0000 Subject: SUSE-SU-2026:4748-1: important: Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) Message-ID: <179249944742.1171.9762637262442634287@e2c34509880b> # Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4748-1 Release Date: 2026-10-20T00:34:09Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4748 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4748 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_133-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-15-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_133-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-15-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:52 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 12:30:52 -0000 Subject: SUSE-SU-2026:4747-1: important: Security update for podman Message-ID: <179249945245.1171.6589717996764107198@e2c34509880b> # Security update for podman Announcement ID: SUSE-SU-2026:4747-1 Release Date: 2026-10-19T21:36:31Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4747 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4747 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4747 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4747 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4747 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4747 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4747 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4747 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4747 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podmansh-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * podman-docker-4.9.5-150400.4.83.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:30:15 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4749-1: important: Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5) Message-ID: <179251381582.1832.16749869612963212911@816288a415ff> # Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4749-1 Release Date: 2026-10-20T11:34:21Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4749 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4755 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4755 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_275-default-17-2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_37-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-11-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_37-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-11-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:00 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:31:00 -0000 Subject: SUSE-SU-2026:4754-1: important: Security update for python3 Message-ID: <179251386070.1832.9595488903470258243@816288a415ff> # Security update for python3 Announcement ID: SUSE-SU-2026:4754-1 Release Date: 2026-10-20T10:52:20Z Rating: important References: * bsc#1257599 * bsc#1259735 * bsc#1259989 * bsc#1261970 * bsc#1262467 * bsc#1263083 * bsc#1263443 * bsc#1264962 * bsc#1265268 * bsc#1266669 * bsc#1267581 * bsc#1267821 * bsc#1267974 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1271192 * bsc#1273091 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-15308 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-1703 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-4224 * CVE-2026-4360 * CVE-2026-6019 * CVE-2026-6357 * CVE-2026-6879 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-82049 * CVE-2026-8328 * CVE-2026-8643 * CVE-2026-9669 CVSS scores: * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 26 vulnerabilities and has two security fixes can now be installed. ## Description: This update for python3 fixes the following issues: Security issues fixed: * CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). * CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). * CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). * CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442 bsc#1263443). * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). * CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server- supplied PASV host address (bsc#1265268). * CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). * CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). * CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). * CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: * Fix an error that returned non-zero exit status 1 (bsc#1277271). * Fix regression in `http.cookies` (bsc#1263083). * Update bundled pip wheels to pip-20.0.2-py2.py3-none-any.whl. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4754 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4754 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4754 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4754 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4754 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4754 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4754 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4754 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4754 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4754 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4754 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4754 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4754 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4754 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4754 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-testsuite-3.6.15-150300.10.129.1 * python3-doc-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-testsuite-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-doc-devhelp-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.129.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-3.6.15-150300.10.129.1 * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262467 * https://bugzilla.suse.com/show_bug.cgi?id=1263083 * https://bugzilla.suse.com/show_bug.cgi?id=1263443 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1273091 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:22 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:31:22 -0000 Subject: SUSE-SU-2026:4753-1: important: Security update for ImageMagick Message-ID: <179251388272.1832.14382158714826537388@816288a415ff> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4753-1 Release Date: 2026-10-20T10:49:50Z Rating: important References: * bsc#1281912 * bsc#1284662 * bsc#1284664 * bsc#1284665 * bsc#1284668 * bsc#1284669 * bsc#1284675 * bsc#1284678 * bsc#1284680 * bsc#1284681 * bsc#1284682 * bsc#1284683 * bsc#1285071 Cross-References: * CVE-2026-106565 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106577 * CVE-2026-106579 * CVE-2026-106580 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-109259 * CVE-2026-109260 * CVE-2026-109261 * CVE-2026-109262 * CVE-2026-109263 * CVE-2026-109266 * CVE-2026-109269 * CVE-2026-109273 * CVE-2026-109275 * CVE-2026-109276 * CVE-2026-46521 * CVE-2026-61869 * CVE-2026-93586 CVSS scores: * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106580 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-106580 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109259 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109259 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109259 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109260 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109260 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109260 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109261 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109262 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109263 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109263 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109266 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109266 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-109269 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109269 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109273 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109273 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109275 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109275 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-109276 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109276 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-46521 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46521 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-61869 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-61869 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-61869 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-61869 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 24 vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash (bsc#1284680). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). * CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071). * CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071). * CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071). * CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071). * CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071). * CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071). * CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071). * CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071). * CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071). * CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4753 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4753 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * ImageMagick-debuginfo-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * libMagickCore-6_Q16-1-6.8.8.1-71.280.1 * ImageMagick-devel-6.8.8.1-71.280.1 * libMagick++-devel-6.8.8.1-71.280.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.280.1 * ImageMagick-debugsource-6.8.8.1-71.280.1 * ImageMagick-config-6-upstream-6.8.8.1-71.280.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * ImageMagick-debuginfo-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * libMagickCore-6_Q16-1-6.8.8.1-71.280.1 * ImageMagick-devel-6.8.8.1-71.280.1 * libMagick++-devel-6.8.8.1-71.280.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.280.1 * ImageMagick-debugsource-6.8.8.1-71.280.1 * ImageMagick-config-6-upstream-6.8.8.1-71.280.1 ## References: * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-106580.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-109259.html * https://www.suse.com/security/cve/CVE-2026-109260.html * https://www.suse.com/security/cve/CVE-2026-109261.html * https://www.suse.com/security/cve/CVE-2026-109262.html * https://www.suse.com/security/cve/CVE-2026-109263.html * https://www.suse.com/security/cve/CVE-2026-109266.html * https://www.suse.com/security/cve/CVE-2026-109269.html * https://www.suse.com/security/cve/CVE-2026-109273.html * https://www.suse.com/security/cve/CVE-2026-109275.html * https://www.suse.com/security/cve/CVE-2026-109276.html * https://www.suse.com/security/cve/CVE-2026-46521.html * https://www.suse.com/security/cve/CVE-2026-61869.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284680 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 * https://bugzilla.suse.com/show_bug.cgi?id=1285071 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:28 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:31:28 -0000 Subject: SUSE-RU-2026:4751-1: moderate: Recommended update for ca-certificates-mozilla Message-ID: <179251388829.1832.7789407074456943910@816288a415ff> # Recommended update for ca-certificates-mozilla Announcement ID: SUSE-RU-2026:4751-1 Release Date: 2026-10-20T09:22:37Z Rating: moderate References: * bsc#1279961 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: * Updated to 2.90 state (bsc#1279961): * Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority * Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4751 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4751 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4751 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4751 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4751 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4751 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4751 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4751 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4751 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4751 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4751 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4751 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4751 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4751 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4751 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4751 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4751 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * Basesystem Module 15-SP7 (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * Development Tools Module 15-SP7 (noarch) * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * ca-certificates-mozilla-2.90-150200.47.1 * ca-certificates-mozilla-prebuilt-2.90-150200.47.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:32 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:31:32 -0000 Subject: SUSE-SU-2026:4750-1: important: Security update for rekor Message-ID: <179251389228.1832.8752784042568421865@816288a415ff> # Security update for rekor Announcement ID: SUSE-SU-2026:4750-1 Release Date: 2026-10-20T09:09:12Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rekor rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4750 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4750 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4750 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4750 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4750 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4750 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4750 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4750 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4750 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4750 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4750 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4750 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.40.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:44 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 16:31:44 -0000 Subject: SUSE-SU-2026:3547-2: moderate: Security update for suseconnect-ng Message-ID: <179251390452.1832.15733858313969207387@816288a415ff> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:3547-2 Release Date: 2026-10-20T08:17:54Z Rating: moderate References: * bsc#1159776 * bsc#1267478 * bsc#1268596 * bsc#1268900 * bsc#1270392 Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has five security fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issue: * Update version to 1.23.0: * Use product identifier for product migrations. (bsc#1268596) * Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC-843, bsc#1268900). * Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed. (bsc#1159776) * InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478). * Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages. (jsc#TEL-298) * Allow deregsiter when subscribed regcode has expired (bsc#1270392, jsc#865) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3547 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3547 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3547 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3547 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1159776 * https://bugzilla.suse.com/show_bug.cgi?id=1267478 * https://bugzilla.suse.com/show_bug.cgi?id=1268596 * https://bugzilla.suse.com/show_bug.cgi?id=1268900 * https://bugzilla.suse.com/show_bug.cgi?id=1270392 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:12 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:30:12 -0000 Subject: SUSE-RU-2026:24253-1: important: Recommended update for resource-agents Message-ID: <179252821275.2203.15755225560046076626@816288a415ff> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:24253-1 Release Date: 2026-10-14T16:23:32Z Rating: important References: * bsc#1273064 * bsc#1281122 Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has two fixes can now be installed. ## Description: This update for resource-agents fixes the following issues: Changes in resource-agents: * Update to version 4.18.0+git105.9ea1183: * Fix: L3: aws-vpc-move-ip fails to start (bsc#1281122) * aws-vpc-move-ip: fix fragile handling of response from AssumeRole * ZFS: re-read a transitional pool state before failing the monitor * exportfs: skip unlock_filesystem when nfsd is not running * High: Filesystem: Devices with duplicate labels are treated as errors. * podman-etcd: address review feedback on departure handshake * powervs-move-ip: introduce support for guaranteed routes * Mid: Filesystem: For block devices, allow monitor_10 even when specified by UID or LABEL. * podman-etcd: deterministic departure lock and force-new-cluster recovery * Update to version 4.18.0+git94.6c50a9b: * Fix: [SLES for SAP 15 SP6] PID 1 CPU saturation on multi-SID Pacemaker nodes caused by parallel access to systemd (bsc#1273064): * SAPInstance - fix: list-unit-files creates high load on systemd * ZFS: wait for the pool state to settle before start returns * High: storage-mon: High: storage-mon: Delete a timer that has not stopped. * portblock: fix incorrect parameters for NftDelete() when using reset_local_on_unblock_stop * podman-etcd: treat crm_attribute 'not found' exits as empty, not error * OCPBUGS-104851: podman-etcd: add restart_no_leave CRM attribute guard to skip member removal * OCPBUGS-100303: podman-etcd: add test hooks for FNC race reproduction * OCPBUGS-100303: podman-etcd: resolve force_new_cluster race during simultaneous dual-start * mediationzone: new resource agent * powervs-subnet: fix plaintext token file support * ibmmq: new resource agent for IBM MQ queue managers * podman-etcd: scope sync to etcd filesystem only * spec: Remove EOL Fedora compatibility blocks from spec file * Route: * restore unique="1" for destination and warn on "default" * update destination parameter to non-unique * powervs-move-ip: introduce support for trusted profiles, refine handling of API return codes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1918 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * resource-agents-debugsource-4.18.0+git105.9ea1183-160000.1.1 * resource-agents-4.18.0+git105.9ea1183-160000.1.1 * resource-agents-debuginfo-4.18.0+git105.9ea1183-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273064 * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:30:16 -0000 Subject: SUSE-RU-2026:24252-1: moderate: Recommended update for saphana-checks Message-ID: <179252821660.2203.9571555369504189642@816288a415ff> # Recommended update for saphana-checks Announcement ID: SUSE-RU-2026:24252-1 Release Date: 2026-10-14T08:35:13Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for saphana-checks fixes the following issues: Changes in saphana-checks: * Update to version 2609+1.gb216233: * OS/Hyperscaler: * Remove unsupported SLES 15.1 through 15.3 releases from the SAP HANA OS support matrix * Extend the OS support matrix with SLES 15.7 on Alibaba Cloud * Add validation to ensure that fstrim.timer is disabled * Azure - new certified instances * Update GCP certified instance validation * IBM Cloud - new certified instances * Simplify CPU idle checks 1400/1410 and add unit tests * Update Intel CPU frequency scaling checks and add unit tests * Update clocksource checks for Hyper-V/Azure and fix Intel clocksource matching * Apply driver-specific Azure NIC ring buffer recommendations * SLES Power kernel issue - TID 000022819 SR-IOV Update Causes Network Adapter Unavailability on Linux LPAR * Change the NetApp NFSv3 RPC slot validation result from warning to error * SLES kernel issue - High system CPU utilization during HANA table load * Agents/Tools: * Update the required saptune version to 3.2.4 * Update Microsoft Azure AzCopy to the latest supported version * HANA * Update the supported SAP HANA client version to 2.30.27 * Code Quality and Refactoring * Upgrade bashunit and refresh unit-test conventions * Update shfmt used by CI to version 3.14.1 * Upgrade bashunit to version 0.51 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1911 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * saphana-checks-2609+1.gb216233-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:40 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:30:40 -0000 Subject: SUSE-SU-2026:24251-1: important: Security update for pacemaker Message-ID: <179252824088.2203.10369104657665847187@816288a415ff> # Security update for pacemaker Announcement ID: SUSE-SU-2026:24251-1 Release Date: 2026-10-09T11:53:26Z Rating: important References: * bsc#1180966 * bsc#1249217 * bsc#1255371 * bsc#1259345 * bsc#1265183 * bsc#1265201 * bsc#1268381 * bsc#1270354 * bsc#1271652 * bsc#1272452 * bsc#1279543 Cross-References: * CVE-2026-10649 CVSS scores: * CVE-2026-10649 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has 10 fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: Security issue fixed: * CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: * cts: make cts-scheduler -o/--out-dir default to a temporary directory (bsc#1272452) * spec: Add symlinks for test support files in the pacemaker-cts sub-package (bsc#1272452) * cts: Do not install test support files into /usr at runtime (bsc#1272452) * libcrmcommon: Make pcmk__auto_fencing_watchdog_timeout() static * libcrmcommon: Functionize parsing "fencing-watchdog-timeout" * liblrmd: Check watchdog-based self-fencing device for remote nodes only if "fencing-watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * controller: Check for watchdog-based self-fencing device only if "fencing- watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * fencer: Avoid use-after-free in debug log (bsc#1279543, gh#ClusterLabs/pacemaker#4172) * fenced: Prevent segfault by not merging with in-flight fencing actions (bsc#1271652, gh#ClusterLabs/pacemaker##4152) * ChangeLog: update for 3.0.3 release * Build: update version information for 3.0.3 * libraries: update shared object versions for 3.0.3 * NLS: update translations before 3.0.3-rc1 * cibadmin: allow altering status section without triggering refresh (gh#ClusterLabs/pacemaker#4147) * tools: Use g_spawn_sync in cibsecret. * tools: Handle UTF-8 parameters in crm_resource. * tools: Handle UTF-8 parameters in cibsecret. * agents: Move pid file management into ClusterMon.in. * libcib: Remove an unnecessary coverity suppression. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix an integer overflow in pcmk__remote_send_xml. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Limit the max size of a remote message. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix integer overflow in remote message code. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix checks in localized_remote_header. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * liblrmd: Don't include internal header in lrmd.h * Low: libcrmcommon, tools: Fix NULL dereference in crm_resource.c * pacemakerd: Properly find and track all existing sub-daemons (bsc#1265201, gh#ClusterLabs/pacemaker#4115) * tools: Use the VERSION variable instead of invoking `crm_attribute --version` (bsc#1265183, gh#ClusterLabs/pacemaker#4114) * libcib: Handle cib_xpath_address for an XPath query for an attribute (gh#ClusterLabs/pacemaker#4108) * libcib: Prevent based or cibadmin from crashing when handling an XPath query for an attribute (bsc#1249217, gh#ClusterLabs/pacemaker#4108) * libcrmcommon: Deprecate PCMK_dh_max_bits. * libcib: Full-CIB replace op no longer segfaults with cib_xpath * libpe_status: Avoid leaking a pcmk_resource_t's xml/orig_xml * Revert "API: libraries: Update version numbers in so names" * ChangeLog: update for 3.0.2-rc1 release * tools: Avoid memory leak in crm_resource --clear * libpacemaker, tools: Avoid mem leak in crm_simulate/pcmk_simulate() * libcib: Avoid memory leak when processing CIB upgrade * libpe_status: Use first operations child when expanding template * libpe_status: Improve no resources message in unpack_template() * daemons: Only log a message if we're falling back. * update version information for 3.0.2 * libraries: Update version numbers in so names * libraries: update shared object versions for 3.0.2 * NLS: update translations before 3.0.2-rc1 * libcrmcommon: Deprecate anonymous authentication. * libcrmcommon: Deprecate remote-clear-port. * libcib: Add support for PSK authentication for remote CIB ops. * daemons: Add support for PSK authentication for remote CIB ops. * libpacemaker: Fix a memory leak in inject_action. * tools: Free the list at the end of cli_resource_print_operations. * tools: Fix memory leaks when printing crm_verify warnings/errors. * libpe: If pe__clone_default exits early, free the lists. * libpacemaker: Fix a segfault in order_resource_actions_after. * libcrmcommon: Properly return errno from pcmk__bare_output_new. * libpe: Free elements of rsc->priv->ticket_constraints... * libpacemaker: If process_rsc_history exits early, free the list. * daemons,libcib: Fix memory leaks in IPC code. * libservices: Deal with fgets errors in services__get_lsb_metadata. * libpacemaker: Check that instance is not NULL. * libcrmcommon: Avoid overflow when negating INT_MIN * libcrmcommon: Avoid overflow in crm_time_add_months() * libcib: Explicitly handle receiving a NACK from based. * libcib: Explicitly handle receiving a NACK from fenced. * daemons: Don't NACK an invalid remote message. * libcrmcommon: Don't log on error in pcmk__ipc_send_iov. * daemons: Don't return a NACK if execd gets an unknown message. * liblrmd: Explicitly handle receiving a NACK from execd. * liblrmd: Fix log messages in remote_proxy_cb. * daemons: Delay creating an xmlNode in handle_register_request. * libcrmcommon: Ignore empty time spec * tools: Don't wait on certain "pending" monitor actions. (gh#ClusterLabs/pacemaker#4073) * libcrmcommon: Create a log file if it doesn't exist. * fencer: Disable watchdog-based self-fencing if "fencing-watchdog-timeout" is unset (gh#ClusterLabs/pacemaker#4067) * fencer: Make the deprecated "stonith-watchdog-timeout" option work again (gh#ClusterLabs/pacemaker#4068) * libcrmcommon: Move deprecatd PCMK_OPT_STONITH_TIMEOUT back to options.h * pacemakerd: Correctly detect ping requests from sbd (gh#ClusterLabs/pacemaker#4066) * libcrmcommon: Improve message for qb_log_file_open() fail * libcrmcommon: Improve pcmk__add_logfile() message for fopen() fail * libcrmcommon: More specific error for set_logfile_permissions() * libcrmcommon: Improve validation of PCMK_logfile_mode * liblrmd: Don't assert if queue_time is < 0. * based: Don't log specially for PCMK__XA_CIB_UPDATE * controller: Don't treat patchset-apply errors as OK * libcrmcommon: xml_apply_patchset doesn't return diff_resync err * libcib: Don't convert -pcmk_err_diff_resync to pcmk_ok * libcrmcommon: Handle NULL PCMK_XA_FORMAT and PCMK_XA_DIGEST * libcib, tools: Empty CIB contains admin_epoch before epoch * daemons: Fix user/group checking in based. * libcrmcommon: Fix a glib logging build error. * libcrmcommon: Don't delete unchanged attributes when applying patch * libcrmcommon: Fix potential use-after-free and double-free (gh#ClusterLabs/pacemaker#4044) * executor: Fix the typos in the logs. * libcrmcommon: Set config warnings on mismatched ACL perm specs * libcrmcommon: xml_acl_filtered_copy() returns false for NULL source (gh#ClusterLabs/pacemaker#4039) * libcrmcommon: Make parse_acl_entry() non-recursive * libcrmcommon: Set config warnings and errors for acl_permission * libcib: Log correct error message in replace_cib() * libcib: Fix setting origin attributes in CIB updates (gh#ClusterLabs/pacemaker#4028) * tools: Drop crm_attribute --inhibit-policy-engine/-i option * libcrmcommon: Fix memory leak in pcmk__read_series_sequence() (gh#ClusterLabs/pacemaker#4032) * liblrmd: Check that pcmk__init_tls doesn't set native->tls to NULL. * tools: Drop crm_attribute --attr-value/--delete-attr options * tools: Drop crm_attribute --attr-id option * based: Drop unhelpful trace messages * based: Improve a log message for IPC call options * libcib: {add,del}_notify_callback support only cib_diff_notify * based: Return correct code from write_cib_async() * daemons: Use crm_ipc_client_response in lrmd_remote_client_msg. * daemons: Set ipc_flags in lrmd_remote_client_msg to 0. * daemons: Clean up XML memory in IPC dispatch functions. * daemons: Fix a segfault displaying fencer metadata. * based: Drop redundant messages from based_diff_notify() * build: Handle CMocka deprecations * various: Always NULL-check return value of pcmk__find_client() * libcrmcommon: Improve messages in child_kill_helper() * tools: Free memory in crm_resource.c:handle_metadata() * pacemakerd: Use g_str_has_prefix() in handle_ping_request() * libpacemaker: Correctly check node types in pcmk__list_nodes() * pacemakerd: Match correctly in PCMK_{valgrind,callgrind}_enabled * libcrmcommon: Match correctly in PCMK_debug, stderr, blackbox * spec: Requires libxml2-tools since DLM controld RA requires xmllint (bsc#1259345) * daemons: Fix a typo if no existing attrd is found. * daemons: Call pcmk_cluster_disconnect at the end of fenced. * libcrmcommon: Fix underflow in crm_time_add_days() * libcrmcommon: Avoid integer overflow in seconds_to_hms() * spec: do not treat fillup templates as configuration files * build: install the default logrotate config into /usr/etc/logrotate.d * build: create directories in /var via tmpfiles.d * build: create hacluster user and haclient group via sysusers.d * agents: Deprecate allow_stonith_disabled param for controld RA * agents: New allow_fencing_disabled param for controld RA * agents: Use case-insensitive property matching in controld RA * schemas: Deprecate stonith-timeout-ms in crm_mon output * schemas: Deprecate stonith-enabled in crm_mon output * various: New fencing-timeout-ms in crm_mon/pcmk_status output * schemas: New fencing-timeout-ms attribute in crm_mon schema * various: New fencing-enabled in crm_mon/pcmk_status output * schemas: New fencing-enabled attribute in crm_mon schema * tools: cibadmin --xpath --delete-all deletes all matches again * various: Use const for a few string pointer variables * cts: Respect cts-lab --nic option if specified for IPv4 (gh#ClusterLabs/pacemaker#3986) * cts: cts-lab --nic option defaults to eth0 only for an IPv6 link local address (gh#ClusterLabs/pacemaker#3986) * controller: Ask attribute manager to purge fenced nodes' attributes * controller: Don't purge transient attributes on node loss (gh#ClusterLabs/pacemaker#3991) * controller: Allow purging node attrs without cache removal * controller: don't need to erase node attributes for remote nodes * pacemaker-attrd: Drop "requesting shutdown" code * pacemaker-attrd: Wipe CIB along with memory (gh#ClusterLabs/pacemaker#3991) * libcrmservice: Correctly check the return value of stat. * fencer: Improve validation of pcmk_host_map * fencer: Drop support for escaped characters in pcmk_host_map * fencer: Drop unhelpful message from build_port_aliases() * fencer: Fix ISO 8601 interval parsing in pcmk_delay_base * daemons: When checking for duplicate messages, we might be prepending. * daemons: Don't add repeated I_PE_CALC messages to the fsa queue. * scheduler: promoted state with promoted state with attribute * fencer: Log an error for empty pcmk_delay_base mapping key * fencer: Fix a format string * libcrmservice: List only the requested directory contents * build, libcrmservice: initdir must be a single directory * libcrmservice: Fix memory leaks when listing directory contents * cts: Add cts-lab --nic option used for generated IP address resources (gh#ClusterLabs/pacemaker#3982) * libcrmcommon: Loop on EAGAIN in mainloop_gio_callback. * daemons: Get rid of some logged warnings in execd. * libcrmcommon: Bump feature set to 3.20.5 * libcrmcommon: Deprecate stop-removed-resources cluster property * libcrmcommon: Deprecate cancel-removed-actions cluster property * libpe_status: Warn if concurrent-fencing is false * libcrmcommon: Deprecate enable-startup-probes cluster property * libcrmcommon: Rename stop-removed-actions to cancel-removed-actions * libcrmcommon: Deprecate cluster-ipc-limit cluster option * cts-cli: Escape special characters in the path for a pattern (gh#ClusterLabs/pacemaker#3971) * tools: Handle large timeouts correctly in crm_resource --wait * controller: NULL-check lrm_state before dereferencing it * tools: cibsecret should work with CIB_file set. * controller: Avoid "stonith" in log messages * tools: Use "fencing" in stonith_admin/crm_resource * libpe_status: Use "fencing" instead of "STONITH" in some logs * libcrmcommon: New "fencing-reaction" cluster property * libcrmcommon: New "fencing-watchdog-timeout" cluster property * libcrmcommon: New "fencing-timeout" cluster property * libcrmcommon: New "fencing-max-attempts" cluster property * libcrmcommon: New "fencing-action" cluster property * libcrmcommon: New "fencing-enabled" cluster property * libcrmcommon: Update documentation for cluster-ipc-limit. * libcrmcommon: Be more lenient in evicting IPC clients. * tools: Deprecate iso8601 command line tool * libcrmcommon: Show deprecated option aliases in outputs * libcrmcommon: Parse iso8601 strings according to spec. * fencer: Prevent unsigned int overflow in get_action_timeout() * libcrmcommon: Fix integer overflow of alert timeouts * libcrmcommon: Ensure stonith watchdog timeout is in long range * controller, fencer: Ignore negative/unparsable pcmk_monitor_timeout * cts: Drop cts script * tools: Drop crm_report -T/--cts and --cts-log options * schemas: Deprecate "orphaned" attribute * schemas: resource XML element has new "removed" attribute * schemas: Deprecate "orphan" attribute in crm_mon and crm_simulate * schemas: resource_history XML element has new "removed" attribute * libcrmcommon: Fix a segfault in internal_ipc_get_reply. (bsc#1255371, gh#ClusterLabs/pacemaker#3949) * libcrmcommon: New "stop-removed-resources" cluster property * libcrmcommon: New "stop-removed-actions" cluster property * sysconfig: Remove --leak-check=full from default VALGRIND_OPTS. * tools: Hide crm_mon --as-xml option * crm_mon: Deprecate --pid-file/-p option * tools: Fix CIB validation in crm_mon.c * libcib, libcrmcommon: Improve a couple of log messages * libcrmcommon: pcmk__quote_cmdline() returns valid shell string * libcrmcommon: Bump feature set to 3.20.4 * schemas: Add a schema for cibadmin * tools: Use formatted output in cibadmin * tools: Formatted output for cibadmin --show-access --query * tools: Formatted output for cibadmin --node-path * tools: Basic cibadmin XML formatted output * tools: Formatted output for cibadmin --empty * tools: Formatted output for cibadmin --md5-sum{,-versioned} * tools: Deprecate cibadmin -e/--node-path option * libcrmcommon: bump feature set to 3.20.3 * schemas: Add a schema for cibsecret. * libcrmcommon: Return a value for md5sum of empty input. * tools: Remove the shell version of cibsecret. * tools: Improve some cibadmin error messages * tools: cibadmin renders ACLs only when output is cib element * tools: cibadmin now errors if unable to compute md5 sum * libcib, tools: Resolve cibadmin TODO re: ACL rendering and input * controller: Avoid crash due to GSource double-free * tools: Deprecate cibadmin -N/--node option * tools: Drop "Digest: " from cibadmin --md5-sum stderr * tools: cibadmin ignores --node-path for non-XPath-query command * tools: Change exit codes for failure to create cib_t object * libcib: Fix cib__signon_retry() return code * tools: Deprecate cibadmin --show-access as non-privileged user * tools: Don't require --force for non-privileged cibadmin ACLs * tools: Default cibadmin command is now --query * tools: Deprecate current input source precedence in cibadmin * tools: Drop cibadmin --extended-version/-! option * libcrmcommon: Bump feature set to 3.20.2 * schemas: Add a schema for crm_diff * tools: Use formatted output in crm_diff.c * libcrmcommon: Standardize remote environment variable parsing * libcrmcommon: Allow empty string values in pcmk__scan_nvpair() * libcrmcommon: Keep trailing newlines in pcmk__scan_nvpair() * fencer: Fix fence delay range off-by-one * daemons: Return CRM_EX_PROTOCOL when ACKing an unknown request. * daemons: Correct result error string on unknown IPC messages. * daemons: Add a return to do_pe_invoke_callback. * tools: Deprecate crm_diff --stdin * tools: Improve error handling in crm_diff.c * tools: Be stricter about crm_diff --cib/--no-version * libcrmcommon: Don't require version info when applying CIB patches * agents: Error check calling attrd_updater in HealthSMART. * agents: Error check calling attrd_updater in HealthIOWait. * agents: Error out if CPU I/O wait time isn't available. * agents: Error check calling attrd_updater in HealthCPU. * agents: Error out if CPU idleness isn't available. * daemons: Don't log the unresponsive message for a daemon we killed * controller: Avoid blocking wait in controller for CIB re-request * cts: Remove --valgrind-tests * cts: Leave valgrind results around if they're not empty. * NLS: update translations before 3.0.1-rc1 * libpacemaker: Prevent CIB growth during crm_simulate --profile * daemons: Fix a toctou bug when fetching additional schemas. * Address coverity issues. * Address certain clang static analysis errors. * libs: Fix cppcheck warnings. * libcrmcommon: bump feature set to 3.20.1 * scheduler: Require a cluster option for old remote fencing behavior. * scheduler: Don't always fence online remote nodes. * daemons: Convert schedulerd to support multipart IPC messages. * daemons: Convert attrd to support multipart IPC messages. * daemons: Convert pacemakerd to support multipart IPC messages. * daemons: Convert execd to support multipart IPC messages. * daemons: Convert fenced to support multipart IPC messages. * daemons: Convert controld to support multipart IPC messages. * daemons: Convert based to support multipart IPC messages. * libcrmcommon: Retry on EAGAIN in crm_ipcs_flush_events. * libcrmcommon: All parts of a multipart event should have the same ID * libcrmcommon: Don't immediately overwrite request ID. * libcrmcommon: Check the client buffer in crm_ipc_buffer. * libcrmcommon: Handle sending multi-part IPC server events. * libcrmcommon: crm_ipc_read can receive large IPC messages. * libcrmcommon: Elements should never match if IDs differ * libcrmcommon: Consistently free iov on error. * libcrmcommon: Always free temp node in mark_child_deleted() * libcrmcommon: Fix XML matching when marking changes * fencer: Don't remove device if child is deleted * controller: Populate nodes from peer cache if can't from cluster * libcib: Don't match element based on XPath matching an attribute * tools: Use correct error code for command lookup failure * tools: Dry-run crm_resource --fail if CIB_file is set * libcrmcommon: Sort schema transformations on non-glibc systems * libcrmcommon: Ensure schema transform numbers are in valid range * libcrmcommon: Match literal dots in schema transform filter * spec: Provides user(hacluster) and group(haclient) * libcrmservice: Fix overrides for systemd resources * libcrmservice: Fail systemd rsc start if create override fails * Build: Run cts-cli verbosely. * controller: improve resource action execution logs * controller: improve start-up/exit messages * controller: drop dot file logs * controller: simplify join finalization messages * pacemaker-based: improve a few messages * pacemaker-based: improve exit messages * pacemaker-based: improve messages when reading CIB from disk * libpacemaker: Reset scheduler object in pcmk_simulate() * libpe_status: Make cluster_status() idempotent * tools: Fix overflow in crm_simulate --repeat * libpacemaker: Handle scandir() error in pcmk__profile_dir() * libpacemaker: Fix mem leak in pcmk__profile_dir() * tools: Avoid crash in crm_simulate --profile * Makefile: drop asciidoc references * crm_diff: Replace variable name * Drop deprecated '\--sync-call' option from cibadmin * Drop deprecated '-l/--local' option from cibadmin in multiple places * raise minimum GnuTLS dependency to 3.4.6 * sysconfig: document when logs may show sensitive info * pacemaker-attrd: reduce log spam at shutdown * executor: avoid misleading log when cancelling a recurring monitor * scheduler: improve restart-needed log * scheduler: don't show node capacity for bundle nodes * scheduler: clarify no-quorum effects * libcrmcommon: improve flag set/clear messages * libcrmcommon: improve message for unsupported XPath match * libstonithd: improve action re-attempt message * libcib: Don't send CRM_OP_REGISTER from cib_remote client * tools: mention potential issues with crm_resource --restart * tools: indicate crm_resource --interval can take units * tools: clarify that crm_mon updates are automatic when interactive * agents: Replace the egrep command with the EGREP definition in ping RA * libcrmcluster: fix format typos * doc: drop Inkscape dependency * tools: validate stonith_admin --timeout value * libpacemaker: set fail-count to INFINITY for fatal failures * libpacemaker: add PCMK__XA_FAILED_START_OFFSET and PCMK__XA_FAILED_STOP_OFFSET * tools: Deprecate cibadmin --sync-call * OCF: controld.in: Remove gfs_controld command as it's already obsoleted * xml: Warn about post-transform behavior changes for ACLs with xpath * sysconfig: Document using certificates for remote nodes. * sysconfig: Explain permissions needed on TLS-related files. * libcrmcluster: restore CPG header size compatibility * libcrmcluster: improve messages in pcmk__cpg_message_data() * liblrmd: Enable TLS support for Pacemaker Remote clients. * daemons: Enable TLS support for Pacemaker Remote nodes. * libcrmcommon: Set *tls = NULL in a few more locations. * libcib: Enable TLS certs for remote CIB operations. * libs: Log if a TLS certificate is close to expiration. * libcrmcommon: If the server supports certs, require them... * daemons: Set up X509 auth in based if enabled. * sysconfig: Add env settings needed for X509 authentication. * libcrmcluster: don't assert for CPG decompression error * libcrmcluster: avoid redundant log for invalid CPG messages * libcrmcluster: initialize from in pcmk__cpg_message_data() * scheduler: avoid memory leak in bundles * xml: Preserve ACL reference behavior for replaced constraints * xml: Ensure ACL permissions are valid after XSL transformations * xml: Warn if schema transformation drops remove-after-stop property * xml: Warn if schema transformation drops moon phase * xml: Info if schema transformation drops empty groups or clones * xml: Warn if schema transformation drops colocation/order lifetimes * xml: Warn if schema transformation drops can_fail or... * xml: Warn if schema transformation drops restart-type meta-attr * xml: Warn if schema transformation drops rkt bundles * xml: Warn if schema transformation drops nagios/upstart resources * log: Allow CIB upgrade messages to start with W, I, D * various: clean up library memory at child exit * pacemaker-remoted: improve exit codes for schema failures * controller: avoid memory leak when updating join phase * scheduler: avoid memory leak when freeing node copies * libcrmcommon: drop unhelpful trace message ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1882 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-devel-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debugsource-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-3.0.3+20260728.7052efa194-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python3-pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cts-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-schemas-3.0.3+20260728.7052efa194-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-10649.html * https://bugzilla.suse.com/show_bug.cgi?id=1180966 * https://bugzilla.suse.com/show_bug.cgi?id=1249217 * https://bugzilla.suse.com/show_bug.cgi?id=1255371 * https://bugzilla.suse.com/show_bug.cgi?id=1259345 * https://bugzilla.suse.com/show_bug.cgi?id=1265183 * https://bugzilla.suse.com/show_bug.cgi?id=1265201 * https://bugzilla.suse.com/show_bug.cgi?id=1268381 * https://bugzilla.suse.com/show_bug.cgi?id=1270354 * https://bugzilla.suse.com/show_bug.cgi?id=1271652 * https://bugzilla.suse.com/show_bug.cgi?id=1272452 * https://bugzilla.suse.com/show_bug.cgi?id=1279543 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:30:55 -0000 Subject: SUSE-SU-2026:24250-1: important: Security update for hawk2 Message-ID: <179252825588.2203.8255952980275943446@816288a415ff> # Security update for hawk2 Announcement ID: SUSE-SU-2026:24250-1 Release Date: 2026-10-09T09:55:50Z Rating: important References: * bsc#1268996 * bsc#1273348 * bsc#1274860 * bsc#1275019 * bsc#1275179 * bsc#1275183 * bsc#1275188 * bsc#1275200 * bsc#1275213 Cross-References: * CVE-2026-42246 * CVE-2026-66066 * CVE-2026-71847 * CVE-2026-73490 * CVE-2026-73491 * CVE-2026-73492 * CVE-2026-73648 CVSS scores: * CVE-2026-42246 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42246 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-66066 ( SUSE ): 9.5 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L * CVE-2026-66066 ( SUSE ): 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-66066 ( NVD ): 9.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-71847 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-71847 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71847 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73490 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73490 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73490 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73491 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73492 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73492 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73492 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities and has two fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). * CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348). * CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams (bsc#1275213). * CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179). * CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183). * CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188). * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200). Changes for hawk2: * Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019): * Test: give sle15 more time when choosing between sle15 and sle16 * Dev: bump jQuery version to 4.0.0 * Dev: bump jQuery version to 3.5.0 * Dev: bump jQuery version to 2.2.4 * Test: update the e2e test for the change allowing custom parameters * Dev: enable custom Parameters and Meta Attributes (bsc#1274860) * CI/CD: update hawk examiner entry point * Test: enable test_add_clone against hawk-apiserver verion 0.2.1 * Test: fix SyntaxWarning: invalid escape sequence '|' * Test: make the tests compatible against hawk-apiserver ver0.2.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1881 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * hawk2-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debugsource-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debuginfo-2.7.2+git.1788518533.7d4dadd6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42246.html * https://www.suse.com/security/cve/CVE-2026-66066.html * https://www.suse.com/security/cve/CVE-2026-71847.html * https://www.suse.com/security/cve/CVE-2026-73490.html * https://www.suse.com/security/cve/CVE-2026-73491.html * https://www.suse.com/security/cve/CVE-2026-73492.html * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1268996 * https://bugzilla.suse.com/show_bug.cgi?id=1273348 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 * https://bugzilla.suse.com/show_bug.cgi?id=1275019 * https://bugzilla.suse.com/show_bug.cgi?id=1275179 * https://bugzilla.suse.com/show_bug.cgi?id=1275183 * https://bugzilla.suse.com/show_bug.cgi?id=1275188 * https://bugzilla.suse.com/show_bug.cgi?id=1275200 * https://bugzilla.suse.com/show_bug.cgi?id=1275213 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:01 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:01 -0000 Subject: SUSE-RU-2026:24249-1: low: Recommended update for libzpc-legacy Message-ID: <179252826132.2203.11778276645712077363@816288a415ff> # Recommended update for libzpc-legacy Announcement ID: SUSE-RU-2026:24249-1 Release Date: 2026-10-09T13:26:13Z Rating: low References: * bsc#1279335 Affected Products: * SUSE Linux Enterprise Server 16.0 An update that has one fix can now be installed. ## Description: This update for libzpc-legacy fixes the following issues: Changes in libzpc-legacy: * Applied a patch to generate man pages (bsc#1279335) * Applied a patch to fix pkgconfig (bsc#1279335) * The man pages are shipped in the `libzpc-legacy-devel` sub-package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1894 ## Package List: * SUSE Linux Enterprise Server 16.0 (s390x) * libzpc1-debuginfo-1.5.0-160000.2.1 * libzpc-legacy-devel-1.5.0-160000.2.1 * libzpc1-1.5.0-160000.2.1 * libzpc-legacy-debugsource-1.5.0-160000.2.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:06 -0000 Subject: SUSE-RU-2026:24248-1: important: Recommended update for the initial kernel livepatch Message-ID: <179252826609.2203.7951238589219274879@816288a415ff> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24248-1 Release Date: 2026-10-12T13:24:35Z Rating: important References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise 16.0 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1905 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1905 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_39-default-debuginfo-1-160000.1.1 * kernel-livepatch-SLE16_Update_18-debugsource-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-default-1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_39-default-debuginfo-1-160000.1.1 * kernel-livepatch-SLE16_Update_18-debugsource-1-160000.1.1 * kernel-livepatch-6_12_0-160000_39-default-1-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:13 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:13 -0000 Subject: SUSE-SU-2026:24247-1: important: Security update for helm Message-ID: <179252827380.2203.17414591706788367828@816288a415ff> # Security update for helm Announcement ID: SUSE-SU-2026:24247-1 Release Date: 2026-10-08T06:16:18Z Rating: important References: * bsc#1281112 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-63209 * CVE-2026-81870 * CVE-2026-85732 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1870 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1870 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.2.1 * helm-fish-completion-4.3.0-160000.2.1 * helm-bash-completion-4.3.0-160000.2.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.2.1 * helm-fish-completion-4.3.0-160000.2.1 * helm-bash-completion-4.3.0-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:20 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:20 -0000 Subject: SUSE-SU-2026:24246-1: moderate: Security update for python-oauthlib Message-ID: <179252828025.2203.16527520612022990991@816288a415ff> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24246-1 Release Date: 2026-10-14T16:09:43Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1917 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1917 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-oauthlib-3.2.2-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-oauthlib-3.2.2-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:37 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:37 -0000 Subject: SUSE-SU-2026:24245-1: important: Security update for openssl-3 Message-ID: <179252829765.2203.6274704891887667792@816288a415ff> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24245-1 Release Date: 2026-10-14T15:02:40Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1916 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1916 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libopenssl3-x86-64-v3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-3.5.0-160000.11.1 * libopenssl3-x86-64-v3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-debuginfo-3.5.0-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * openssl-3-doc-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (noarch) * openssl-3-doc-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libopenssl3-x86-64-v3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-3.5.0-160000.11.1 * libopenssl3-x86-64-v3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-debuginfo-3.5.0-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:43 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:43 -0000 Subject: SUSE-SU-2026:24244-1: important: Security update for perl-XS-Parse-Keyword Message-ID: <179252830310.2203.15552163810018232709@816288a415ff> # Security update for perl-XS-Parse-Keyword Announcement ID: SUSE-SU-2026:24244-1 Release Date: 2026-10-14T14:20:25Z Rating: important References: * bsc#1283247 Cross-References: * CVE-2026-85644 CVSS scores: * CVE-2026-85644 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-85644 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-85644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for perl-XS-Parse-Keyword fixes the following issue: * CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1915 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1915 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * perl-XS-Parse-Keyword-debuginfo-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-debugsource-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-0.480.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * perl-XS-Parse-Keyword-debuginfo-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-debugsource-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-0.480.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85644.html * https://bugzilla.suse.com/show_bug.cgi?id=1283247 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:49 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:24243-1: important: Security update for python-virtualenv Message-ID: <179252830964.2203.15531138807516896338@816288a415ff> # Security update for python-virtualenv Announcement ID: SUSE-SU-2026:24243-1 Release Date: 2026-10-14T13:23:18Z Rating: important References: * bsc#1283890 * bsc#1283904 Cross-References: * CVE-2026-102930 * CVE-2026-102938 CVSS scores: * CVE-2026-102930 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102930 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-102930 ( NVD ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102938 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-102938 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-102938 ( NVD ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-virtualenv fixes the following issues: * CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). * CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1914 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1914 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-virtualenv-20.29.3-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-virtualenv-20.29.3-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102930.html * https://www.suse.com/security/cve/CVE-2026-102938.html * https://bugzilla.suse.com/show_bug.cgi?id=1283890 * https://bugzilla.suse.com/show_bug.cgi?id=1283904 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:54 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:54 -0000 Subject: SUSE-SU-2026:24242-1: important: Security update for mutt Message-ID: <179252831483.2203.9807329686963186510@816288a415ff> # Security update for mutt Announcement ID: SUSE-SU-2026:24242-1 Release Date: 2026-10-14T12:06:08Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1913 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1913 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * mutt-debugsource-2.2.16-160000.3.1 * mutt-2.2.16-160000.3.1 * mutt-debuginfo-2.2.16-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * mutt-lang-2.2.16-160000.3.1 * mutt-doc-2.2.16-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.16-160000.3.1 * mutt-2.2.16-160000.3.1 * mutt-debuginfo-2.2.16-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * mutt-lang-2.2.16-160000.3.1 * mutt-doc-2.2.16-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:58 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:31:58 -0000 Subject: SUSE-RU-2026:24241-1: moderate: Recommended update for certification-sles-eal4 Message-ID: <179252831867.2203.12223952602070254989@816288a415ff> # Recommended update for certification-sles-eal4 Announcement ID: SUSE-RU-2026:24241-1 Release Date: 2026-10-14T09:52:00Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for certification-sles-eal4 fixes the following issues: Changes in certification-sles-eal4: * added certification-sles-eal4-password-check sub-package * disable the apply logic for now * added SL Micro 6.2 image style support ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1912 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1912 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * certification-sles-eal4-16.0.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * certification-sles-eal4-16.0.3-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:02 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:32:02 -0000 Subject: SUSE-RU-2026:24240-1: moderate: Recommended update for rpm Message-ID: <179252832254.2203.17430700746898459188@816288a415ff> # Recommended update for rpm Announcement ID: SUSE-RU-2026:24240-1 Release Date: 2026-10-13T15:18:05Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for rpm fixes the following issues: Changes in rpm: * Do not dependent on python3-base, it is perfectly OK to use any Python interpreter for python-rpm-packaging. * Remove obsolete Python2-based removal of Python directories. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1909 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1909 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * librpmbuild10-4.20.1-160000.4.1 * rpm-debuginfo-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debugsource-4.20.1-160000.4.1 * rpm-plugin-prioreset-4.20.1-160000.4.1 * rpm-devel-4.20.1-160000.4.1 * rpm-plugin-unshare-4.20.1-160000.4.1 * librpmbuild10-debuginfo-4.20.1-160000.4.1 * rpm-build-4.20.1-160000.4.1 * python-rpm-debugsource-4.20.1-160000.4.1 * rpm-debugsource-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debuginfo-4.20.1-160000.4.1 * rpm-build-debuginfo-4.20.1-160000.4.1 * rpm-plugin-ima-4.20.1-160000.4.1 * rpm-plugin-selinux-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-4.20.1-160000.4.1 * rpm-plugin-syslog-4.20.1-160000.4.1 * python313-rpm-debuginfo-4.20.1-160000.4.1 * python313-rpm-4.20.1-160000.4.1 * rpm-4.20.1-160000.4.1 * rpm-plugin-fapolicyd-4.20.1-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * librpmbuild10-4.20.1-160000.4.1 * rpm-debuginfo-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debugsource-4.20.1-160000.4.1 * rpm-plugin-prioreset-4.20.1-160000.4.1 * rpm-devel-4.20.1-160000.4.1 * rpm-plugin-unshare-4.20.1-160000.4.1 * librpmbuild10-debuginfo-4.20.1-160000.4.1 * rpm-build-4.20.1-160000.4.1 * python-rpm-debugsource-4.20.1-160000.4.1 * rpm-debugsource-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-debuginfo-4.20.1-160000.4.1 * rpm-build-debuginfo-4.20.1-160000.4.1 * rpm-plugin-ima-4.20.1-160000.4.1 * rpm-plugin-selinux-4.20.1-160000.4.1 * rpm-plugin-imaevmsign-4.20.1-160000.4.1 * rpm-plugin-syslog-4.20.1-160000.4.1 * python313-rpm-debuginfo-4.20.1-160000.4.1 * python313-rpm-4.20.1-160000.4.1 * rpm-4.20.1-160000.4.1 * rpm-plugin-fapolicyd-4.20.1-160000.4.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:25 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:32:25 -0000 Subject: SUSE-SU-2026:24239-1: important: Security update for go1.26 Message-ID: <179252834541.2203.17337607595180266365@816288a415ff> # Security update for go1.26 Announcement ID: SUSE-SU-2026:24239-1 Release Date: 2026-10-13T15:18:05Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284771 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78667 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 13 vulnerabilities and has one fix can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.26.9 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, vet, and the crypto/mlkem, net/http, and os packages. * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1908 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1908 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.26-race-1.26.9-160000.1.1 * go1.26-1.26.9-160000.1.1 * go1.26-doc-1.26.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.26-race-1.26.9-160000.1.1 * go1.26-1.26.9-160000.1.1 * go1.26-doc-1.26.9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:29 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:32:29 -0000 Subject: SUSE-RU-2026:24238-1: moderate: Recommended update for protoc-gen-go, protoc-gen-go-grpc, google-extension-manager Message-ID: <179252834941.2203.6980153390968427595@816288a415ff> # Recommended update for protoc-gen-go, protoc-gen-go-grpc, google-extension- manager Announcement ID: SUSE-RU-2026:24238-1 Release Date: 2026-10-13T14:16:25Z Rating: moderate References: * jsc#PED-15389 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature can now be installed. ## Description: This update for protoc-gen-go, protoc-gen-go-grpc, google-extension-manager fixes the following issues: * protoc-gen-go is shipped as new package. * protoc-gen-go-grpc is shipped as new package. * google-extension-manager is shipped as new package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1907 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1907 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * google-extension-manager-debuginfo-20260903.01-160000.1.1 * google-extension-manager-20260903.01-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * google-extension-manager-debuginfo-20260903.01-160000.1.1 * google-extension-manager-20260903.01-160000.1.1 ## References: * https://jira.suse.com/browse/PED-15389 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:53 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:32:53 -0000 Subject: SUSE-SU-2026:24237-1: important: Security update for go1.27 Message-ID: <179252837325.2203.4508977535030414284@816288a415ff> # Security update for go1.27 Announcement ID: SUSE-SU-2026:24237-1 Release Date: 2026-10-13T12:02:27Z Rating: important References: * bsc#1272545 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 15 vulnerabilities and has one fix can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.27.2 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, the cover tool, the go fix command, vet, and the compress/flate, crypto/mlkem, encoding/json, encoding/json/v2, net/http, and os packages. * go#81084 encoding/json: Unmarshal leaves +/-Inf in the destination on float overflow in Go 1.27 * go#81145 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81226 runtime: netpoll: eventfd ready for something unexpected * go#81229 encoding/json: json.UnsupportedValueError returns an Invalid Value instead of a Float value * go#81233 compress/flate: Writer with a preset dictionary emits the dictionary into the output stream * go#81252 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81296 cmd/compile: internal compiler error: MoveLoop too small * go#81306 cmd/compile: go1.27.0 unified export data loses method order, breaking objectpath, crashing staticcheck * go#81324 plugin: loading multiple plugins corrupts stdlib types in Go 1.27 * go#81353 runtime: Go 1.27.0: SIGSEGV crash with generic function + pointer type parameter + embedded interface * go#81362 encoding/json: Marshal now honors MarshalText for string-kind map keys * go#81374 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81389 cmd/fix, x/tools/go/analysis/passes/modernize: errorsastype rewrites errors.As target interface that does not implement error * go#81402 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81411 net/http: concurrent response body Read and Close can deadlock with automatic draining in Go 1.27 * go#81437 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81469 runtime: ios/arm64 binaries executed outside an app bundle change working directory on startup * go#81515 net/http: readLoop reads Response.ContentLength after Body.Close returns * go#81516 net/http: Response.Body.Close returns the earlier Read error after a non-EOF Read failure * go#81522 net/http: Response.Trailer race due to response body draining * go#81580 testing: go test -v doubles ESC (0x1b) in t.Log output since Go 1.27, corrupting ANSI colors in some terminals * go#81666 cmd/compile: Embedded interfaces using tail calls cause race detector stack growth * go#81667 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81706 cmd/compile: ICE on 386 when inlining nested bit rotations (Int64Lo not lowered) * go#81816 net/http: Request.TLS is not properly populated for HTTP/2 requests * go#81818 cmd/internal/obj/ppc64: async preemption bug in BR (CTR) * go#81829 runtime: windows/amd64 stack corruption when LockOSThread wraps registry calls (new in Go 1.27) * go#81832 cmd/cover: NumStmt duplicated across split blocks, inflating statement coverage * go#81861 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81890 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1906 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1906 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.27-1.27.2-160000.1.1 * go1.27-doc-1.27.2-160000.1.1 * go1.27-race-1.27.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.27-1.27.2-160000.1.1 * go1.27-doc-1.27.2-160000.1.1 * go1.27-race-1.27.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:33:04 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:33:04 -0000 Subject: SUSE-SU-2026:24236-1: important: Security update for agama Message-ID: <179252838481.2203.2042508578541152270@816288a415ff> # Security update for agama Announcement ID: SUSE-SU-2026:24236-1 Release Date: 2026-10-12T16:20:27Z Rating: important References: * bsc#1249014 * bsc#1271079 * bsc#1271235 * bsc#1271644 * bsc#1271854 * bsc#1274203 * jsc#PED-16702 Cross-References: * CVE-2025-58160 * CVE-2026-25541 CVSS scores: * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities, contains one feature and has four fixes can now be installed. ## Description: This update for agama fixes the following issues: Changes in agama: * Added support for the "inst.listen_on" boot parameter * The "inst.remote=0" option disables remote access (needed for CC compliant installation jsc#PED-16702) * It is possible to specify IP address (both IPv4 and IPv6) or network interface, accepts comma separated list * agama-web-server --address2 option removed, --address can now be repeated (jsc#AGM-153) Update runtime dependencies to: * tracing-subscriber 0.3.20, CVE-2025-58160 (bsc#1249014) * bytes 1.12.1, CVE-2026-25541 (bsc#1274203) * serde_with 3.21.0, GHSA-7gcf-g7xr-8hxj (bsc#1271854) * Clear the IP configuration (dns-search, addresses, gateway, ...) for disabled IP protocols, including values kept from the existing connection, to avoid errors in NetworkManager (bsc#1271644). * Handle VLAN flags properly, using the kernel default value of VLAN_FLAG_REORDER_HDR when not specified (bsc#1271079). * Rename the network device match settings attribute to "match" (bsc#1271235). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1888 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1888 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * agama-debuginfo-17+699.92879916c-160000.13.1 * agama-cli-debuginfo-17+699.92879916c-160000.13.1 * agama-scripts-17+699.92879916c-160000.13.1 * agama-debugsource-17+699.92879916c-160000.13.1 * agama-cli-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * agama-cli-bash-completion-17+699.92879916c-160000.13.1 * agama-cli-zsh-completion-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * agama-debuginfo-17+699.92879916c-160000.13.1 * agama-cli-debuginfo-17+699.92879916c-160000.13.1 * agama-scripts-17+699.92879916c-160000.13.1 * agama-debugsource-17+699.92879916c-160000.13.1 * agama-cli-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server 16.0 (noarch) * agama-cli-bash-completion-17+699.92879916c-160000.13.1 * agama-cli-zsh-completion-17+699.92879916c-160000.13.1 ## References: * https://www.suse.com/security/cve/CVE-2025-58160.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://bugzilla.suse.com/show_bug.cgi?id=1249014 * https://bugzilla.suse.com/show_bug.cgi?id=1271079 * https://bugzilla.suse.com/show_bug.cgi?id=1271235 * https://bugzilla.suse.com/show_bug.cgi?id=1271644 * https://bugzilla.suse.com/show_bug.cgi?id=1271854 * https://bugzilla.suse.com/show_bug.cgi?id=1274203 * https://jira.suse.com/browse/PED-16702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:41:48 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:41:48 -0000 Subject: SUSE-SU-2026:24235-1: important: Security update for the Linux Kernel Message-ID: <179252890805.2203.11065398833889499171@816288a415ff> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24235-1 Release Date: 2026-10-12T15:44:43Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1904 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1904 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.39.1 * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * dlm-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-obs-qa-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-syms-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * cluster-md-kmp-default-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * dlm-kmp-default-6.12.0-160000.39.1 * kernel-kvmsmall-devel-6.12.0-160000.39.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc x86_64) * kernel-azure-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * kernel-azure-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-default-vdso-6.12.0-160000.39.1 * kernel-azure-extra-debuginfo-6.12.0-160000.39.1 * kernel-default-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-debugsource-6.12.0-160000.39.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-extra-6.12.0-160000.39.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-6.12.0-160000.39.1 * kernel-azure-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.39.1 * kernel-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.39.1 * kernel-docs-html-6.12.0-160000.39.1 * kernel-source-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * kernel-64kb-extra-6.12.0-160000.39.1 * kernel-64kb-devel-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.28 * kernel-64kb-debuginfo-6.12.0-160000.39.1 * kernel-64kb-debugsource-6.12.0-160000.39.1 * kernel-64kb-extra-debuginfo-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc x86_64) * kernel-azure-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * kernel-azure-debuginfo-6.12.0-160000.39.1 * kernel-azure-extra-debuginfo-6.12.0-160000.39.1 * kernel-azure-debugsource-6.12.0-160000.39.1 * kernel-azure-extra-6.12.0-160000.39.1 * kernel-azure-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * kernel-obs-qa-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-syms-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.39.1 * kernel-docs-html-6.12.0-160000.39.1 * kernel-source-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-6.12.0-160000.39.1 * kernel-kvmsmall-debugsource-6.12.0-160000.39.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * kernel-azure-devel-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-default-vdso-6.12.0-160000.39.1 * kernel-default-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 * SUSE Linux Enterprise Server 16.0 (nosrc s390x) * kernel-zfcpdump-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (s390x) * kernel-zfcpdump-debugsource-6.12.0-160000.39.1 * kernel-zfcpdump-debuginfo-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:01 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:01 -0000 Subject: SUSE-SU-2026:24234-1: important: Security update for iperf Message-ID: <179252892175.2203.15159560145062176819@816288a415ff> # Security update for iperf Announcement ID: SUSE-SU-2026:24234-1 Release Date: 2026-10-12T12:12:10Z Rating: important References: * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1284404 * bsc#1284405 Cross-References: * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-71217 * CVE-2026-71218 CVSS scores: * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1903 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1903 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libiperf0-3.21-160000.1.1 * iperf-devel-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debugsource-3.21-160000.1.1 * iperf-3.21-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libiperf0-3.21-160000.1.1 * iperf-devel-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debugsource-3.21-160000.1.1 * iperf-3.21-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:11 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:11 -0000 Subject: SUSE-SU-2026:24233-1: important: Security update for podman Message-ID: <179252893130.2203.14520336933489219148@816288a415ff> # Security update for podman Announcement ID: SUSE-SU-2026:24233-1 Release Date: 2026-10-12T08:44:51Z Rating: important References: * bsc#1248988 * bsc#1268579 * bsc#1269471 Cross-References: * CVE-2026-55686 * CVE-2026-57231 CVSS scores: * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for podman fixes the following issues: Security issues fixed: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). Non security issue fixed: * catatonit missing in /usr/libexec/podman/ (bsc#1248988). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1902 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1902 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * podman-remote-debuginfo-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * podman-docker-5.4.2-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * podman-remote-debuginfo-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * SUSE Linux Enterprise Server 16.0 (noarch) * podman-docker-5.4.2-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://bugzilla.suse.com/show_bug.cgi?id=1248988 * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:18 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:18 -0000 Subject: SUSE-SU-2026:24232-1: moderate: Security update for stunnel Message-ID: <179252893824.2203.6725914263519223961@816288a415ff> # Security update for stunnel Announcement ID: SUSE-SU-2026:24232-1 Release Date: 2026-10-12T08:44:51Z Rating: moderate References: * bsc#1274206 * bsc#1274207 Cross-References: * CVE-2026-70367 * CVE-2026-70368 CVSS scores: * CVE-2026-70367 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-70367 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70367 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70368 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-70368 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-70368 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for stunnel fixes the following issues: * CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). * CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads (bsc#1274206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1901 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1901 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * stunnel-5.74-160000.3.1 * stunnel-debugsource-5.74-160000.3.1 * stunnel-debuginfo-5.74-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * stunnel-doc-5.74-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * stunnel-5.74-160000.3.1 * stunnel-debugsource-5.74-160000.3.1 * stunnel-debuginfo-5.74-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * stunnel-doc-5.74-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-70367.html * https://www.suse.com/security/cve/CVE-2026-70368.html * https://bugzilla.suse.com/show_bug.cgi?id=1274206 * https://bugzilla.suse.com/show_bug.cgi?id=1274207 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:26 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:26 -0000 Subject: SUSE-RU-2026:24231-1: moderate: Recommended update for selinux-policy Message-ID: <179252894606.2203.16511557028247118812@816288a415ff> # Recommended update for selinux-policy Announcement ID: SUSE-RU-2026:24231-1 Release Date: 2026-10-12T08:44:51Z Rating: moderate References: * bsc#1257101 * bsc#1278135 * bsc#1279565 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has three fixes can now be installed. ## Description: This update for selinux-policy fixes the following issues: Changes in selinux-policy: * Update to version 20250627+git412.dbf877ab7: * Fix typo in screen.fc * Allow cscreend to start screen as unconfined domain (bsc#1257101) * Label charon-nm as ipsec_exec_t (bsc#1278135) * Update to version 20250627+git407.e864ced8f: * Allow rsync to read var_t (bsc#1279565) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1900 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1900 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * selinux-policy-targeted-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-doc-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-devel-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-minimum-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-sandbox-20250627+git412.dbf877ab7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * selinux-policy-targeted-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-doc-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-devel-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-minimum-20250627+git412.dbf877ab7-160000.1.1 * selinux-policy-sandbox-20250627+git412.dbf877ab7-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1257101 * https://bugzilla.suse.com/show_bug.cgi?id=1278135 * https://bugzilla.suse.com/show_bug.cgi?id=1279565 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:44 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:44 -0000 Subject: SUSE-SU-2026:24230-1: important: Security update for xwayland Message-ID: <179252896464.2203.6837267371512363808@816288a415ff> # Security update for xwayland Announcement ID: SUSE-SU-2026:24230-1 Release Date: 2026-10-12T08:18:23Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281240 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93522 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93522 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93522 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1898 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1898 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * xwayland-devel-24.1.6-160000.7.1 * xwayland-debuginfo-24.1.6-160000.7.1 * xwayland-debugsource-24.1.6-160000.7.1 * xwayland-24.1.6-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * xwayland-devel-24.1.6-160000.7.1 * xwayland-debuginfo-24.1.6-160000.7.1 * xwayland-debugsource-24.1.6-160000.7.1 * xwayland-24.1.6-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93522.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281240 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:42:55 -0000 Subject: SUSE-RU-2026:24229-1: important: Recommended update for netcfg Message-ID: <179252897521.2203.11122316957849063724@816288a415ff> # Recommended update for netcfg Announcement ID: SUSE-RU-2026:24229-1 Release Date: 2026-10-12T08:06:37Z Rating: important References: * bsc#1211886 * bsc#1243708 * bsc#1263098 * bsc#1282745 * bsc#822653 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has five fixes can now be installed. ## Description: This update for netcfg fixes the following issues: Changes in netcfg: * Don't replace /etc/services on updates (bsc#1282745) * Add missing changes from factory: * Add missing %verify(not mode) (bsc#1263098) * services: remove invalid SIEVE entry (bsc#1243708, bsc#822653) * Add krb-prop entry (bsc#1211886) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1899 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1899 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * netcfg-11.6-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * netcfg-11.6-160000.4.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1211886 * https://bugzilla.suse.com/show_bug.cgi?id=1243708 * https://bugzilla.suse.com/show_bug.cgi?id=1263098 * https://bugzilla.suse.com/show_bug.cgi?id=1282745 * https://bugzilla.suse.com/show_bug.cgi?id=822653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:01 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:43:01 -0000 Subject: SUSE-SU-2026:24228-1: moderate: Security update for libpng16 Message-ID: <179252898119.2203.1394775438861068026@816288a415ff> # Security update for libpng16 Announcement ID: SUSE-SU-2026:24228-1 Release Date: 2026-10-10T11:20:30Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed CVE-2026-46675 (medium severity): Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (Reported independently by Ze Sheng and .) * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. (Contributed by Yuki Sekiguchi.) * Prevented a double free of `png_struct` members after an allocation failure. (Contributed by Anthony Hurtado.) * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1897 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1897 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libpng16-devel-1.6.59-160000.1.1 * libpng16-compat-devel-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 * libpng16-tools-1.6.59-160000.1.1 * libpng16-tools-debuginfo-1.6.59-160000.1.1 * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libpng16-16-x86-64-v3-1.6.59-160000.1.1 * libpng16-16-x86-64-v3-debuginfo-1.6.59-160000.1.1 * libpng16-devel-x86-64-v3-1.6.59-160000.1.1 * libpng16-compat-devel-x86-64-v3-1.6.59-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libpng16-devel-1.6.59-160000.1.1 * libpng16-compat-devel-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 * libpng16-tools-1.6.59-160000.1.1 * libpng16-tools-debuginfo-1.6.59-160000.1.1 * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libpng16-16-x86-64-v3-1.6.59-160000.1.1 * libpng16-16-x86-64-v3-debuginfo-1.6.59-160000.1.1 * libpng16-devel-x86-64-v3-1.6.59-160000.1.1 * libpng16-compat-devel-x86-64-v3-1.6.59-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:43:07 -0000 Subject: SUSE-SU-2026:24227-1: important: Security update for gcc13 Message-ID: <179252898799.2203.9733886564278261531@816288a415ff> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24227-1 Release Date: 2026-10-09T19:05:07Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1896 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1896 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:23 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:43:23 -0000 Subject: SUSE-SU-2026:24226-1: important: Security update for unbound Message-ID: <179252900319.2203.9895234667067785948@816288a415ff> # Security update for unbound Announcement ID: SUSE-SU-2026:24226-1 Release Date: 2026-10-09T15:11:12Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1895 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1895 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * unbound-anchor-1.26.1-160000.1.1 * libunbound8-debuginfo-1.26.1-160000.1.1 * python3-unbound-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 * python3-unbound-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-devel-1.26.1-160000.1.1 * unbound-1.26.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * unbound-anchor-1.26.1-160000.1.1 * libunbound8-debuginfo-1.26.1-160000.1.1 * python3-unbound-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 * python3-unbound-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-devel-1.26.1-160000.1.1 * unbound-1.26.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:47 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:43:47 -0000 Subject: SUSE-SU-2026:24225-1: critical: Security update for webkit2gtk3 Message-ID: <179252902755.2203.5355741956072165518@816288a415ff> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:24225-1 Release Date: 2026-10-09T13:47:46Z Rating: critical References: * bsc#1275791 * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1281116 * bsc#1284619 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-28984 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43660 * CVE-2026-43670 * CVE-2026-43804 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64713 * CVE-2026-64715 * CVE-2026-64719 * CVE-2026-64728 * CVE-2026-64730 * CVE-2026-64753 * CVE-2026-64757 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64783 * CVE-2026-64784 * CVE-2026-64787 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-28984 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28984 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-28984 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43660 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-43660 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-43660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43804 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-43804 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64713 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64713 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-64713 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64719 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64719 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64719 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-64728 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64728 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64728 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64730 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64730 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64730 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64757 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64757 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64783 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64783 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64783 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64787 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64787 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64787 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 243 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): \- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. \- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. \- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. \- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. \- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. \- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. \- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. \- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. \- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. \- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. \- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. \- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. \- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. \- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. \- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. \- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. \- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. \- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. \- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. \- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. \- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. \- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. \- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. \- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. \- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. \- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. \- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross- origin data via a crafted HTML page. \- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. \- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. \- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. \- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. \- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. \- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. \- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. \- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. \- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. \- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. \- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. \- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. \- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. \- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. \- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. \- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. \- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. \- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791): \- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management. \- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks. \- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking. \- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation. \- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI. \- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-64783: A use- after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management. \- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1889 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1889 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * webkit2gtk3-minibrowser-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-160000.1.1 * typelib-1_0-WebKit-6_0-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-4_1-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-debuginfo-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-debuginfo-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-160000.1.1 * webkit-jsc-4.1-debuginfo-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-debuginfo-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-2.54.1-160000.1.1 * typelib-1_0-WebKit2-4_1-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-6_0-2.54.1-160000.1.1 * webkit2gtk3-minibrowser-2.54.1-160000.1.1 * webkit-jsc-4.1-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-2.54.1-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * WebKitGTK-6.0-lang-2.54.1-160000.1.1 * WebKitGTK-4.1-lang-2.54.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-minibrowser-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-160000.1.1 * typelib-1_0-WebKit-6_0-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-4_1-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-debuginfo-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-debuginfo-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-160000.1.1 * webkit-jsc-4.1-debuginfo-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-debuginfo-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-2.54.1-160000.1.1 * typelib-1_0-WebKit2-4_1-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-6_0-2.54.1-160000.1.1 * webkit2gtk3-minibrowser-2.54.1-160000.1.1 * webkit-jsc-4.1-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-2.54.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * WebKitGTK-6.0-lang-2.54.1-160000.1.1 * WebKitGTK-4.1-lang-2.54.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-28984.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43660.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-43804.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64713.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64719.html * https://www.suse.com/security/cve/CVE-2026-64728.html * https://www.suse.com/security/cve/CVE-2026-64730.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64757.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64783.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-64787.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1275791 * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:59 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:43:59 -0000 Subject: SUSE-SU-2026:24224-1: important: Security update for squid Message-ID: <179252903999.2203.8625701396263765432@816288a415ff> # Security update for squid Announcement ID: SUSE-SU-2026:24224-1 Release Date: 2026-10-09T13:28:23Z Rating: important References: * bsc#1237027 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities and has one fix can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). Changes for squid: Update to 6.14: * Do not leak HttpReply when checking http_reply_access (bsc#1237027) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1893 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1893 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * squid-debuginfo-6.14-160000.1.1 * squid-debugsource-6.14-160000.1.1 * squid-6.14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-6.14-160000.1.1 * squid-debugsource-6.14-160000.1.1 * squid-6.14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1237027 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:06 -0000 Subject: SUSE-SU-2026:24223-1: important: Security update for virtiofsd Message-ID: <179252904623.2203.5252753407969198060@816288a415ff> # Security update for virtiofsd Announcement ID: SUSE-SU-2026:24223-1 Release Date: 2026-10-09T12:48:27Z Rating: important References: * bsc#1257912 * bsc#1283239 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for virtiofsd fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * Add command line options for UID/GID translation (bsc#1283239) * PassthroughFs: Add IdMap structures (bsc#1283239) * Add host/guest UID/GID translation code (bsc#1283239) * Custom UID/GID mapping for Attr (bsc#1283239) * Add UID/GID mapping functions to PassthroughFs (bsc#1283239) * Use explicit UID/GID types (bsc#1283239) * Introduce explicit UID/GID types (bsc#1283239) * Use SetattrIn without conversion (bsc#1283239) * Use fuse::Attr in FileSystem interfaces (bsc#1283239) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1892 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1892 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * virtiofsd-debugsource-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-1.12.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * virtiofsd-debugsource-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-1.12.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257912 * https://bugzilla.suse.com/show_bug.cgi?id=1283239 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:11 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:11 -0000 Subject: SUSE-SU-2026:24222-1: important: Security update for google-osconfig-agent Message-ID: <179252905165.2203.910816592687707546@816288a415ff> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24222-1 Release Date: 2026-10-09T12:48:26Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * from version 20260928.00 * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * from version 20260923.03 * Fix os/snap extractor usage (#1053) * Update to version 20260918.01 * bump grpc package to new version (#1057) * from version 20260918.00 * bump some dependencies across few modules (#1056) * Remove stale Go module version overrides in _service file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1891 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1891 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * google-osconfig-agent-debuginfo-20260928.01-160000.1.1 * google-osconfig-agent-20260928.01-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * google-osconfig-agent-debuginfo-20260928.01-160000.1.1 * google-osconfig-agent-20260928.01-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:16 -0000 Subject: SUSE-SU-2026:24221-1: important: Security update for fetchmail Message-ID: <179252905689.2203.8190724265512388669@816288a415ff> # Security update for fetchmail Announcement ID: SUSE-SU-2026:24221-1 Release Date: 2026-10-09T12:45:38Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1890 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1890 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * fetchmail-debuginfo-6.5.2-160000.4.1 * fetchmail-6.5.2-160000.4.1 * fetchmail-debugsource-6.5.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * fetchmail-debuginfo-6.5.2-160000.4.1 * fetchmail-6.5.2-160000.4.1 * fetchmail-debugsource-6.5.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:31 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:31 -0000 Subject: SUSE-SU-2026:24220-1: important: Security update for openvpn Message-ID: <179252907198.2203.10020662030035904150@816288a415ff> # Security update for openvpn Announcement ID: SUSE-SU-2026:24220-1 Release Date: 2026-10-09T12:16:22Z Rating: important References: * bsc#1267944 * bsc#1267945 * bsc#1273126 * bsc#1273127 * bsc#1273128 * bsc#1273129 * bsc#1273130 * bsc#1275310 * bsc#1279613 Cross-References: * CVE-2026-11771 * CVE-2026-12932 * CVE-2026-12996 * CVE-2026-13117 * CVE-2026-13379 * CVE-2026-35058 * CVE-2026-40215 * CVE-2026-63650 * CVE-2026-84732 CVSS scores: * CVE-2026-11771 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-11771 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-11771 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11771 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-12932 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-12932 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-12932 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-12932 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-12996 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-12996 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-12996 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-12996 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-13117 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-13117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-13117 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13117 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-13379 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:N/SA:H * CVE-2026-13379 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:H * CVE-2026-13379 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13379 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-35058 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-35058 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35058 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35058 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40215 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40215 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40215 ( NVD ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40215 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63650 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63650 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-63650 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84732 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84732 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for openvpn fixes the following issues: * CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). * CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). * CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free (bsc#1273128). * CVE-2026-13117: Heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129). * CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130). * CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945). * CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944). * CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). * CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1885 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1885 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * openvpn-auth-pam-plugin-2.6.10-160000.5.1 * openvpn-devel-2.6.10-160000.5.1 * openvpn-debuginfo-2.6.10-160000.5.1 * openvpn-2.6.10-160000.5.1 * openvpn-down-root-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-auth-pam-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-down-root-plugin-2.6.10-160000.5.1 * openvpn-debugsource-2.6.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * openvpn-auth-pam-plugin-2.6.10-160000.5.1 * openvpn-devel-2.6.10-160000.5.1 * openvpn-debuginfo-2.6.10-160000.5.1 * openvpn-2.6.10-160000.5.1 * openvpn-down-root-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-auth-pam-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-down-root-plugin-2.6.10-160000.5.1 * openvpn-debugsource-2.6.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11771.html * https://www.suse.com/security/cve/CVE-2026-12932.html * https://www.suse.com/security/cve/CVE-2026-12996.html * https://www.suse.com/security/cve/CVE-2026-13117.html * https://www.suse.com/security/cve/CVE-2026-13379.html * https://www.suse.com/security/cve/CVE-2026-35058.html * https://www.suse.com/security/cve/CVE-2026-40215.html * https://www.suse.com/security/cve/CVE-2026-63650.html * https://www.suse.com/security/cve/CVE-2026-84732.html * https://bugzilla.suse.com/show_bug.cgi?id=1267944 * https://bugzilla.suse.com/show_bug.cgi?id=1267945 * https://bugzilla.suse.com/show_bug.cgi?id=1273126 * https://bugzilla.suse.com/show_bug.cgi?id=1273127 * https://bugzilla.suse.com/show_bug.cgi?id=1273128 * https://bugzilla.suse.com/show_bug.cgi?id=1273129 * https://bugzilla.suse.com/show_bug.cgi?id=1273130 * https://bugzilla.suse.com/show_bug.cgi?id=1275310 * https://bugzilla.suse.com/show_bug.cgi?id=1279613 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:47 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:47 -0000 Subject: SUSE-SU-2026:24219-1: important: Security update for python-PyJWT Message-ID: <179252908780.2203.14679467964262519204@816288a415ff> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24219-1 Release Date: 2026-10-09T12:12:48Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1887 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1887 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-PyJWT-2.12.1-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-PyJWT-2.12.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:53 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:44:53 -0000 Subject: SUSE-SU-2026:24218-1: moderate: Security update for python-jwcrypto Message-ID: <179252909327.2203.7904321467228427722@816288a415ff> # Security update for python-jwcrypto Announcement ID: SUSE-SU-2026:24218-1 Release Date: 2026-10-09T12:12:47Z Rating: moderate References: * bsc#1280816 Cross-References: * CVE-2026-92091 CVSS scores: * CVE-2026-92091 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-92091 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92091 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-jwcrypto fixes the following issue: * CVE-2026-92091: `JWK.import_key()` validates the `key_ops` JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive resource consumption (bsc#1280816). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1886 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1886 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-jwcrypto-1.5.6-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-jwcrypto-1.5.6-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92091.html * https://bugzilla.suse.com/show_bug.cgi?id=1280816 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:01 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:01 -0000 Subject: SUSE-SU-2026:24217-1: important: Security update for python-urllib3 Message-ID: <179252910143.2203.7021512608867426835@816288a415ff> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:24217-1 Release Date: 2026-10-09T11:46:57Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1884 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1884 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-urllib3-2.5.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-urllib3-2.5.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:06 -0000 Subject: SUSE-SU-2026:24216-1: moderate: Security update for python-hpack Message-ID: <179252910680.2203.3694533788245620482@816288a415ff> # Security update for python-hpack Announcement ID: SUSE-SU-2026:24216-1 Release Date: 2026-10-09T11:45:01Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1883 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1883 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-hpack-4.1.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-hpack-4.1.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:19 -0000 Subject: SUSE-SU-2026:24215-1: important: Security update for busybox Message-ID: <179252911971.2203.11587089593121694796@816288a415ff> # Security update for busybox Announcement ID: SUSE-SU-2026:24215-1 Release Date: 2026-10-09T06:39:54Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1880 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1880 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * busybox-static-1.37.0-160000.8.1 * busybox-debugsource-1.37.0-160000.8.1 * busybox-1.37.0-160000.8.1 * busybox-debuginfo-1.37.0-160000.8.1 * busybox-static-debuginfo-1.37.0-160000.8.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.8.1 * busybox-warewulf3-1.37.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * busybox-static-1.37.0-160000.8.1 * busybox-debugsource-1.37.0-160000.8.1 * busybox-1.37.0-160000.8.1 * busybox-debuginfo-1.37.0-160000.8.1 * busybox-static-debuginfo-1.37.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.8.1 * busybox-warewulf3-1.37.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:25 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:25 -0000 Subject: SUSE-SU-2026:24214-1: important: Security update for ghostscript Message-ID: <179252912503.2203.7085997086597957447@816288a415ff> # Security update for ghostscript Announcement ID: SUSE-SU-2026:24214-1 Release Date: 2026-10-09T06:34:50Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). Changes for ghostscript: * Version upgrade to 10.08.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1876 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1876 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * ghostscript-x11-10.08.0-160000.1.1 * ghostscript-10.08.0-160000.1.1 * ghostscript-debugsource-10.08.0-160000.1.1 * ghostscript-x11-debuginfo-10.08.0-160000.1.1 * ghostscript-devel-10.08.0-160000.1.1 * ghostscript-debuginfo-10.08.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * ghostscript-x11-10.08.0-160000.1.1 * ghostscript-10.08.0-160000.1.1 * ghostscript-debugsource-10.08.0-160000.1.1 * ghostscript-x11-debuginfo-10.08.0-160000.1.1 * ghostscript-devel-10.08.0-160000.1.1 * ghostscript-debuginfo-10.08.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:35 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:35 -0000 Subject: SUSE-SU-2026:24213-1: important: Security update for cosign Message-ID: <179252913540.2203.8048064255752338412@816288a415ff> # Security update for cosign Announcement ID: SUSE-SU-2026:24213-1 Release Date: 2026-10-09T06:33:57Z Rating: important References: * bsc#1272117 * bsc#1275025 * bsc#1278614 * bsc#1279215 * bsc#1282542 Cross-References: * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-78662 * CVE-2026-84304 CVSS scores: * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for cosign fixes the following issues: * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278614). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279215). * Verification bypass via public key in legacy bundle (bsc#1282542). Changes for cosign: * update to 3.1.3 (bsc#1282542, GHSA-fx35-mq7g-6g98): * This release resolves GHSA-fx35-mq7g-6g98, a verification bypass using an unexpected public key in a legacy bundle. * Auto-detect default digest algorithm for public keys * fix(pkcs11key): return an error instead of panicking when no key pair matches * Supporting OCI Signing with X.509 Certificate Chain * test(inspect): replace mock TSA client usage with local timestamp response generator in * fix: prevent shell completions for various options not taking filenames * fix(blob): compare file checksums case-insensitively in * Verification bypass via public key in legacy bundle (GHSA- fx35-mq7g-6g98) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1877 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1877 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cosign-debuginfo-3.1.3-160000.1.1 * cosign-3.1.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-160000.1.1 * cosign-3.1.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://bugzilla.suse.com/show_bug.cgi?id=1272117 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1278614 * https://bugzilla.suse.com/show_bug.cgi?id=1279215 * https://bugzilla.suse.com/show_bug.cgi?id=1282542 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:39 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:39 -0000 Subject: SUSE-RU-2026:24212-1: moderate: Recommended update for jeos-firstboot Message-ID: <179252913933.2203.17888927701703213786@816288a415ff> # Recommended update for jeos-firstboot Announcement ID: SUSE-RU-2026:24212-1 Release Date: 2026-10-09T06:31:53Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for jeos-firstboot fixes the following issues: Changes in jeos-firstboot: * Update to version 1.5.14: * Refine the JEOS_USER_GROUPS option and use it for the builtin default * Read jeos-firstboot.conf in jeos-config as well * Add configuration variables on groups to add users to * Move welcome_screen_with_console_switch stub to end of file * Fix welcome_screen_with_console_switch undefined in jeos-config * Update to version 1.5.9: * Use snapper create on transactional systems again ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1879 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1879 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * jeos-firstboot-1.5.14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * jeos-firstboot-1.5.14-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:44 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:44 -0000 Subject: SUSE-SU-2026:24211-1: important: Security update for pgvector Message-ID: <179252914439.2203.17850353425338959712@816288a415ff> # Security update for pgvector Announcement ID: SUSE-SU-2026:24211-1 Release Date: 2026-10-09T06:31:53Z Rating: important References: * bsc#1284129 Cross-References: * CVE-2026-103484 CVSS scores: * CVE-2026-103484 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-103484 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103484 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for pgvector fixes the following issue: * CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: * Updated to version 0.8.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1878 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1878 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * postgresql18-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql17-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-0.8.7-160000.1.1 * postgresql18-pgvector-0.8.7-160000.1.1 * postgresql14-pgvector-0.8.7-160000.1.1 * postgresql16-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql16-pgvector-debugsource-0.8.7-160000.1.1 * postgresql16-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-0.8.7-160000.1.1 * postgresql13-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-debugsource-0.8.7-160000.1.1 * postgresql13-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql13-pgvector-debugsource-0.8.7-160000.1.1 * postgresql18-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debugsource-0.8.7-160000.1.1 * pgvector-devel-0.8.7-160000.1.1 * postgresql15-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debuginfo-0.8.7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * postgresql18-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql17-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-0.8.7-160000.1.1 * postgresql18-pgvector-0.8.7-160000.1.1 * postgresql14-pgvector-0.8.7-160000.1.1 * postgresql16-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql16-pgvector-debugsource-0.8.7-160000.1.1 * postgresql16-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-0.8.7-160000.1.1 * postgresql13-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-debugsource-0.8.7-160000.1.1 * postgresql13-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql13-pgvector-debugsource-0.8.7-160000.1.1 * postgresql18-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debugsource-0.8.7-160000.1.1 * pgvector-devel-0.8.7-160000.1.1 * postgresql15-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debuginfo-0.8.7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103484.html * https://bugzilla.suse.com/show_bug.cgi?id=1284129 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:48 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:48 -0000 Subject: SUSE-RU-2026:24210-1: moderate: Recommended update for timezone Message-ID: <179252914837.2203.11123152933345272046@816288a415ff> # Recommended update for timezone Announcement ID: SUSE-RU-2026:24210-1 Release Date: 2026-10-08T15:17:41Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for timezone fixes the following issues: Changes in timezone: * Update to 2026e: * Manitoba moves to permanent -05 on 2026-10-31 * Update to 2026d: * Canada?s Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1875 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1875 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * timezone-debugsource-2026e-160000.1.1 * timezone-debuginfo-2026e-160000.1.1 * timezone-2026e-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * tzselect-2026e-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * timezone-debugsource-2026e-160000.1.1 * timezone-debuginfo-2026e-160000.1.1 * timezone-2026e-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * tzselect-2026e-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:52 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:52 -0000 Subject: SUSE-RU-2026:24209-1: moderate: Recommended update for kit Message-ID: <179252915215.2203.1489326588807582967@816288a415ff> # Recommended update for kit Announcement ID: SUSE-RU-2026:24209-1 Release Date: 2026-10-08T13:31:05Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for kit fixes the following issues: kit is shipped as new package. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1874 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1874 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kit-debuginfo-0.107.0-160000.1.1 * kit-0.107.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kit-bash-completion-0.107.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kit-debuginfo-0.107.0-160000.1.1 * kit-0.107.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kit-bash-completion-0.107.0-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:58 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:45:58 -0000 Subject: SUSE-SU-2026:24208-1: important: Security update for python-anyio Message-ID: <179252915837.2203.17697532717415312982@816288a415ff> # Security update for python-anyio Announcement ID: SUSE-SU-2026:24208-1 Release Date: 2026-10-08T10:43:41Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1873 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1873 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-anyio-4.8.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-anyio-4.8.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:07 -0000 Subject: SUSE-SU-2026:24207-1: important: Security update for python-tornado6 Message-ID: <179252916702.2203.5052741999973863266@816288a415ff> # Security update for python-tornado6 Announcement ID: SUSE-SU-2026:24207-1 Release Date: 2026-10-08T10:42:17Z Rating: important References: * bsc#1261922 * bsc#1277725 * bsc#1281439 * bsc#1281440 Cross-References: * CVE-2026-82397 * CVE-2026-91990 * CVE-2026-91991 CVSS scores: * CVE-2026-82397 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82397 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91991 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2026-91991 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91991 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for python-tornado6 fixes the following issues: * CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). * CVE-2026-91990: splitting of multipart data before validation of the `max_parts` limit allows for resource exhaustion and a denial of service (bsc#1281439). * CVE-2026-91991: incomplete fix for cookie attribute injection allows for cookie validation bypass via semicolon- delimited data in capitalized parameters (bsc#1281440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1872 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1872 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * python313-tornado6-debuginfo-6.5-160000.7.1 * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * python313-tornado6-debuginfo-6.5-160000.7.1 * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82397.html * https://www.suse.com/security/cve/CVE-2026-91990.html * https://www.suse.com/security/cve/CVE-2026-91991.html * https://bugzilla.suse.com/show_bug.cgi?id=1261922 * https://bugzilla.suse.com/show_bug.cgi?id=1277725 * https://bugzilla.suse.com/show_bug.cgi?id=1281439 * https://bugzilla.suse.com/show_bug.cgi?id=1281440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:19 -0000 Subject: SUSE-RU-2026:24206-1: important: Recommended update for rmt-server Message-ID: <179252917970.2203.5599797678157783523@816288a415ff> # Recommended update for rmt-server Announcement ID: SUSE-RU-2026:24206-1 Release Date: 2026-10-08T07:47:32Z Rating: important References: * bsc#1273349 * bsc#1274088 * bsc#1274090 * bsc#1274092 * bsc#1275439 * bsc#1276939 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has six fixes can now be installed. ## Description: This update for rmt-server fixes the following issues: Changes in rmt-server: * Version 3.2 * Avoid NoMethodError for rmt-cli systems list (bsc#1275439) * add --product switch to rmt-client-setup-res, so customer could register to different supported minor releases not only latest one. * re-implement RMT::Downloader to eliminate use of fibers (bsc#1276939) * rmt-server-pubcloud: * do not return 500s for registry engine * fix record changed (bsc#1273349) * fix statement invalid bug (bsc#1274088) * fix race condition bug (bsc#1274090) * fix ActiveRecord::Deadlocked on registration sharing push (bsc#1274092) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1871 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1871 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rmt-server-config-3.2.0-160000.1.1 * rmt-server-pubcloud-3.2.0-160000.1.1 * rmt-server-debuginfo-3.2.0-160000.1.1 * rmt-server-3.2.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rmt-server-config-3.2.0-160000.1.1 * rmt-server-pubcloud-3.2.0-160000.1.1 * rmt-server-debuginfo-3.2.0-160000.1.1 * rmt-server-3.2.0-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273349 * https://bugzilla.suse.com/show_bug.cgi?id=1274088 * https://bugzilla.suse.com/show_bug.cgi?id=1274090 * https://bugzilla.suse.com/show_bug.cgi?id=1274092 * https://bugzilla.suse.com/show_bug.cgi?id=1275439 * https://bugzilla.suse.com/show_bug.cgi?id=1276939 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:33 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:33 -0000 Subject: SUSE-SU-2026:24205-1: moderate: Security update for libheif Message-ID: <179252919324.2203.12443988924533654406@816288a415ff> # Security update for libheif Announcement ID: SUSE-SU-2026:24205-1 Release Date: 2026-10-08T06:18:28Z Rating: moderate References: * bsc#1281829 * bsc#1281948 * bsc#1281949 * bsc#1281950 * bsc#1281951 * bsc#1281952 * bsc#1281953 * bsc#1281954 Cross-References: * CVE-2020-6851 * CVE-2026-84449 CVSS scores: * CVE-2020-6851 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2020-6851 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84449 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84449 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84449 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has six fixes can now be installed. ## Description: This update for libheif fixes the following issues: * CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). * AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). * Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952). * Heap out-of-bounds read in libheif alpha compositing via mismatched per- channel bit depths (bsc#1281951). * Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949). * Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954). * JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950). * Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948). Changes for libheif: * update to 1.23.5: * (GHSA-v8qw-hwjv-44hw) Memory exhaustion through a mismatch between the container and the bitstream image size. A crafted image can declare a small size in its ispe property while the bitstream declares a much larger coded frame. The container-level checks used the ispe size, so the oversized bitstream reached the decoder, which allocated a frame buffer for the in- band size before libheif rejected the mismatch. The advisory demonstrated this for AV1 with the libaom backend (a 351-byte AVIF declaring 64x64 but coding up to 27648x27648, allocating hundreds of MB to more than 10 GB), but the same class affects every codec whose real frame size lives in the bitstream. The coded size is now checked against max_image_size_pixels in the codec- independent decode path, before any bytes reach a decoder plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL units (including those carried in the item data, not only the ones in the configuration record), the JPEG SOF marker and the JPEG 2000 SIZ reference grid are scanned for the largest coded size. (high) * (GHSA-qwpf-5wf7-r996) Heap use-after-free and double free when encoding an image that carries a TAI timestamp, including transcoding a file with an itai property. ImageDescription shallow-copied its raw heif_tai_timestamp_packet pointer, and a temporary in ImageItem::encode_to_bitstream_and_boxes() freed the packet while the item and the source image still held it. The timestamp is now stored by value. (medium) * (GHSA-9c75-9g8r-4728) Memory amplification through a JPEG 2000 pclr box declaring zero palette columns. The entry-count bound was skipped for zero columns, so an 11-byte box allocated 65,535 empty palette entries, and nested j2kH containers could repeat this within the child and nesting limits: a 3 KB file reached about 330 MB RSS, none of it charged to max_total_memory. Zero columns are rejected (ISO/IEC 15444-1 requires 1 to 255), the byte bound is unconditional, and the palette storage is charged to the memory limits. (medium) * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read in alpha compositing for uncompressed (unci) images whose colour planes have different bit depths. Op_flatten_alpha_plane read every plane through the sample type of the first colour plane, so an 8-bit blue plane next to 16-bit red and green planes was read with a halved stride past its end, and the bytes ended up in the composited output. ColorState now tracks one bit depth per plane, and the operator declines mixed sample widths at planning time. (medium) * (GHSA-q492-cfcm-895h) The OpenJPEG decoder plugin's pre-decode size check bounded the JPEG 2000 window span (x1-x0)*(y1-y0) but not the absolute reference-grid coordinates, so a codestream with a 17-pixel window on a grid near the 32-bit boundary reached opj_decode(). Against OpenJPEG 2.3.1 this produced a heap-buffer-overflow write inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4 rejects the input. The reference-grid area is now bounded as well. (low) * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the uncompressed encoder when an application attached a separate alpha plane to an image with an interleaved chroma format. The interleaved encoders took their component list from the chroma format (three entries) but decided whether to write alpha from the presence of an alpha plane, and indexed the list at [3]. heif_image_add_plane() now rejects a separate alpha plane on interleaved images, and the encoders derive both decisions from the chroma format. Only reachable through the public API; decoding never produces such an image. (low) * (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were not applied when parsing a mini box (the MIAF minimized image format) or the av1C/hvcC blob embedded in it; the built-in defaults were used instead. An application that tightened the limits got no enforcement of its max_memory_block_size or max_total_memory on such files. The allocations are bounded by the bytes present in the box, so this could not amplify memory use. (low) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1865 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1865 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libheif-debugsource-1.23.5-160000.1.1 * libheif-aom-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-1.23.5-160000.1.1 * libheif1-1.23.5-160000.1.1 * libheif-aom-1.23.5-160000.1.1 * libheif-ffmpeg-debuginfo-1.23.5-160000.1.1 * libheif-ffmpeg-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-1.23.5-160000.1.1 * libheif-dav1d-debuginfo-1.23.5-160000.1.1 * libheif1-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-debuginfo-1.23.5-160000.1.1 * libheif-dav1d-1.23.5-160000.1.1 * libheif-jpeg-1.23.5-160000.1.1 * libheif-rav1e-debuginfo-1.23.5-160000.1.1 * libheif-jpeg-debuginfo-1.23.5-160000.1.1 * libheif-rav1e-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libheif-svtenc-1.23.5-160000.1.1 * libheif-svtenc-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libheif-debugsource-1.23.5-160000.1.1 * libheif-aom-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-1.23.5-160000.1.1 * libheif1-1.23.5-160000.1.1 * libheif-aom-1.23.5-160000.1.1 * libheif-ffmpeg-debuginfo-1.23.5-160000.1.1 * libheif-ffmpeg-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-1.23.5-160000.1.1 * libheif-dav1d-debuginfo-1.23.5-160000.1.1 * libheif1-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-debuginfo-1.23.5-160000.1.1 * libheif-dav1d-1.23.5-160000.1.1 * libheif-jpeg-1.23.5-160000.1.1 * libheif-rav1e-debuginfo-1.23.5-160000.1.1 * libheif-jpeg-debuginfo-1.23.5-160000.1.1 * libheif-rav1e-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * libheif-svtenc-1.23.5-160000.1.1 * libheif-svtenc-debuginfo-1.23.5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2020-6851.html * https://www.suse.com/security/cve/CVE-2026-84449.html * https://bugzilla.suse.com/show_bug.cgi?id=1281829 * https://bugzilla.suse.com/show_bug.cgi?id=1281948 * https://bugzilla.suse.com/show_bug.cgi?id=1281949 * https://bugzilla.suse.com/show_bug.cgi?id=1281950 * https://bugzilla.suse.com/show_bug.cgi?id=1281951 * https://bugzilla.suse.com/show_bug.cgi?id=1281952 * https://bugzilla.suse.com/show_bug.cgi?id=1281953 * https://bugzilla.suse.com/show_bug.cgi?id=1281954 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:38 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:38 -0000 Subject: SUSE-SU-2026:24204-1: moderate: Security update for libXpm Message-ID: <179252919849.2203.6417342195568632390@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:24204-1 Release Date: 2026-10-08T06:15:26Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1869 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1869 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXpm-tools-debuginfo-3.5.17-160000.4.1 * libXpm4-3.5.17-160000.4.1 * libXpm4-debuginfo-3.5.17-160000.4.1 * libXpm-debugsource-3.5.17-160000.4.1 * libXpm-devel-3.5.17-160000.4.1 * libXpm-tools-3.5.17-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXpm-tools-debuginfo-3.5.17-160000.4.1 * libXpm4-3.5.17-160000.4.1 * libXpm4-debuginfo-3.5.17-160000.4.1 * libXpm-debugsource-3.5.17-160000.4.1 * libXpm-devel-3.5.17-160000.4.1 * libXpm-tools-3.5.17-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:50 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:50 -0000 Subject: SUSE-SU-2026:24203-1: moderate: Security update for libXi Message-ID: <179252921054.2203.14591233370651193654@816288a415ff> # Security update for libXi Announcement ID: SUSE-SU-2026:24203-1 Release Date: 2026-10-08T06:15:26Z Rating: moderate References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 Cross-References: * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: out-of-bounds read in XI2 class parser (bsc#1281608). * CVE-2026-93544: out-of-bounds read in XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: out-of-bounds read in ListInputDevices() (bsc#1281612). * CVE-2026-94281: out-of-bounds read in XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: out-of-bounds read in XI2 enter/leave/focus cookie conversio (bsc#1281651). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1867 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1867 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 * libXi-devel-1.8.2-160000.4.1 * libXi-debugsource-1.8.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 * libXi-devel-1.8.2-160000.4.1 * libXi-debugsource-1.8.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:46:55 -0000 Subject: SUSE-SU-2026:24202-1: important: Security update for librsvg Message-ID: <179252921593.2203.1931557259539500823@816288a415ff> # Security update for librsvg Announcement ID: SUSE-SU-2026:24202-1 Release Date: 2026-10-08T06:15:26Z Rating: important References: * bsc#1282612 Cross-References: * CVE-2026-96889 CVSS scores: * CVE-2026-96889 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96889 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96889 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: * CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: * Update to version 2.60.3: * Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. * The minimum supported Rust version (MSRV) is 1.89.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1864 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1864 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rsvg-convert-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * typelib-1_0-Rsvg-2_0-2.60.3-160000.1.1 * librsvg-devel-2.60.3-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * rsvg-thumbnailer-2.60.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rsvg-convert-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * typelib-1_0-Rsvg-2_0-2.60.3-160000.1.1 * librsvg-devel-2.60.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * rsvg-thumbnailer-2.60.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96889.html * https://bugzilla.suse.com/show_bug.cgi?id=1282612 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:03 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:47:03 -0000 Subject: SUSE-SU-2026:24201-1: moderate: Security update for libX11 Message-ID: <179252922388.2203.13314377820554397292@816288a415ff> # Security update for libX11 Announcement ID: SUSE-SU-2026:24201-1 Release Date: 2026-10-08T06:14:16Z Rating: moderate References: * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1868 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1868 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-devel-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * libX11-data-1.8.10-160000.5.1 * libX11-devel-doc-1.8.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-devel-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * libX11-data-1.8.10-160000.5.1 * libX11-devel-doc-1.8.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:17 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:47:17 -0000 Subject: SUSE-SU-2026:24200-1: moderate: Security update for ntfs-3g_ntfsprogs Message-ID: <179252923744.2203.17336799601376038693@816288a415ff> # Security update for ntfs-3g_ntfsprogs Announcement ID: SUSE-SU-2026:24200-1 Release Date: 2026-10-08T06:13:17Z Rating: moderate References: * bsc#1281756 * bsc#1281757 * bsc#1281758 * bsc#1281759 * bsc#1281760 * bsc#1281761 * bsc#1281762 * bsc#1281763 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has eight fixes can now be installed. ## Description: This update for ntfs-3g_ntfsprogs fixes the following issues: * Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). * Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). * Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). * Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). * Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). * Heap buffer overflow in ntfs_same_sid() (bsc#1281757). * Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). * Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1866 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1866 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libntfs-3g89-2022.10.3-160000.5.1 * ntfsprogs-2022.10.3-160000.5.1 * ntfsprogs-extra-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-debuginfo-2022.10.3-160000.5.1 * ntfsprogs-debuginfo-2022.10.3-160000.5.1 * libntfs-3g89-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-2022.10.3-160000.5.1 * libntfs-3g-devel-2022.10.3-160000.5.1 * ntfsprogs-extra-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debuginfo-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debugsource-2022.10.3-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libntfs-3g89-2022.10.3-160000.5.1 * ntfsprogs-2022.10.3-160000.5.1 * ntfsprogs-extra-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-debuginfo-2022.10.3-160000.5.1 * ntfsprogs-debuginfo-2022.10.3-160000.5.1 * libntfs-3g89-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-2022.10.3-160000.5.1 * libntfs-3g-devel-2022.10.3-160000.5.1 * ntfsprogs-extra-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debuginfo-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debugsource-2022.10.3-160000.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281756 * https://bugzilla.suse.com/show_bug.cgi?id=1281757 * https://bugzilla.suse.com/show_bug.cgi?id=1281758 * https://bugzilla.suse.com/show_bug.cgi?id=1281759 * https://bugzilla.suse.com/show_bug.cgi?id=1281760 * https://bugzilla.suse.com/show_bug.cgi?id=1281761 * https://bugzilla.suse.com/show_bug.cgi?id=1281762 * https://bugzilla.suse.com/show_bug.cgi?id=1281763 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:34 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:47:34 -0000 Subject: SUSE-SU-2026:24199-1: important: Security update for strongswan Message-ID: <179252925491.2203.14704473267216158788@816288a415ff> # Security update for strongswan Announcement ID: SUSE-SU-2026:24199-1 Release Date: 2026-10-08T06:13:17Z Rating: important References: * bsc#1276533 * bsc#1276534 * bsc#1276536 * bsc#1276539 * bsc#1276540 * bsc#1276541 * bsc#1276543 * bsc#1276544 * bsc#1276545 * bsc#1276548 * bsc#1276549 Cross-References: * CVE-2026-78123 * CVE-2026-78124 * CVE-2026-78126 * CVE-2026-78127 * CVE-2026-78129 * CVE-2026-78130 * CVE-2026-78131 * CVE-2026-78132 * CVE-2026-78133 * CVE-2026-78134 * CVE-2026-78135 CVSS scores: * CVE-2026-78123 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78123 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78123 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78124 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78124 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78124 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-78126 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78126 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78127 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78127 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78127 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78129 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78129 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-78129 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78130 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78130 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78130 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78131 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78131 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78131 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78132 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78132 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78132 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78133 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78133 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78133 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78134 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-78134 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-78134 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-78135 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-78135 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-78135 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-78135 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). * CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). * CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization- Failure (bsc#1276536). * CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539). * CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540). * CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541). * CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543). * CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544). * CVE-2026-78133: Use-After-Free During Multi-KE Rekey Collision (bsc#1276545). * CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548). * CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1863 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1863 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * strongswan-mysql-debuginfo-6.0.6-160000.3.1 * strongswan-ipsec-6.0.6-160000.3.1 * strongswan-debuginfo-6.0.6-160000.3.1 * strongswan-nm-6.0.6-160000.3.1 * strongswan-ipsec-debuginfo-6.0.6-160000.3.1 * strongswan-debugsource-6.0.6-160000.3.1 * strongswan-mysql-6.0.6-160000.3.1 * strongswan-nm-debuginfo-6.0.6-160000.3.1 * strongswan-sqlite-debuginfo-6.0.6-160000.3.1 * strongswan-fips-6.0.6-160000.3.1 * strongswan-sqlite-6.0.6-160000.3.1 * strongswan-6.0.6-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * strongswan-doc-6.0.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * strongswan-mysql-debuginfo-6.0.6-160000.3.1 * strongswan-ipsec-6.0.6-160000.3.1 * strongswan-debuginfo-6.0.6-160000.3.1 * strongswan-nm-6.0.6-160000.3.1 * strongswan-ipsec-debuginfo-6.0.6-160000.3.1 * strongswan-debugsource-6.0.6-160000.3.1 * strongswan-mysql-6.0.6-160000.3.1 * strongswan-nm-debuginfo-6.0.6-160000.3.1 * strongswan-sqlite-debuginfo-6.0.6-160000.3.1 * strongswan-fips-6.0.6-160000.3.1 * strongswan-sqlite-6.0.6-160000.3.1 * strongswan-6.0.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * strongswan-doc-6.0.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78123.html * https://www.suse.com/security/cve/CVE-2026-78124.html * https://www.suse.com/security/cve/CVE-2026-78126.html * https://www.suse.com/security/cve/CVE-2026-78127.html * https://www.suse.com/security/cve/CVE-2026-78129.html * https://www.suse.com/security/cve/CVE-2026-78130.html * https://www.suse.com/security/cve/CVE-2026-78131.html * https://www.suse.com/security/cve/CVE-2026-78132.html * https://www.suse.com/security/cve/CVE-2026-78133.html * https://www.suse.com/security/cve/CVE-2026-78134.html * https://www.suse.com/security/cve/CVE-2026-78135.html * https://bugzilla.suse.com/show_bug.cgi?id=1276533 * https://bugzilla.suse.com/show_bug.cgi?id=1276534 * https://bugzilla.suse.com/show_bug.cgi?id=1276536 * https://bugzilla.suse.com/show_bug.cgi?id=1276539 * https://bugzilla.suse.com/show_bug.cgi?id=1276540 * https://bugzilla.suse.com/show_bug.cgi?id=1276541 * https://bugzilla.suse.com/show_bug.cgi?id=1276543 * https://bugzilla.suse.com/show_bug.cgi?id=1276544 * https://bugzilla.suse.com/show_bug.cgi?id=1276545 * https://bugzilla.suse.com/show_bug.cgi?id=1276548 * https://bugzilla.suse.com/show_bug.cgi?id=1276549 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:47:42 -0000 Subject: SUSE-RU-2026:24198-1: important: Recommended update for resource-agents Message-ID: <179252926206.2203.6893694567068051352@816288a415ff> # Recommended update for resource-agents Announcement ID: SUSE-RU-2026:24198-1 Release Date: 2026-10-14T16:27:49Z Rating: important References: * bsc#1273064 * bsc#1281122 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that has two fixes can now be installed. ## Description: This update for resource-agents fixes the following issues: Changes in resource-agents: * Update to version 4.18.0+git105.9ea1183: * Fix: L3: aws-vpc-move-ip fails to start (bsc#1281122) * aws-vpc-move-ip: fix fragile handling of response from AssumeRole * ZFS: re-read a transitional pool state before failing the monitor * exportfs: skip unlock_filesystem when nfsd is not running * High: Filesystem: Devices with duplicate labels are treated as errors. * podman-etcd: address review feedback on departure handshake * powervs-move-ip: introduce support for guaranteed routes * Mid: Filesystem: For block devices, allow monitor_10 even when specified by UID or LABEL. * podman-etcd: deterministic departure lock and force-new-cluster recovery * Update to version 4.18.0+git94.6c50a9b: * Fix: [SLES for SAP 15 SP6] PID 1 CPU saturation on multi-SID Pacemaker nodes caused by parallel access to systemd (bsc#1273064): * SAPInstance - fix: list-unit-files creates high load on systemd * ZFS: wait for the pool state to settle before start returns * High: storage-mon: High: storage-mon: Delete a timer that has not stopped. * portblock: fix incorrect parameters for NftDelete() when using reset_local_on_unblock_stop * podman-etcd: treat crm_attribute 'not found' exits as empty, not error * OCPBUGS-104851: podman-etcd: add restart_no_leave CRM attribute guard to skip member removal * OCPBUGS-100303: podman-etcd: add test hooks for FNC race reproduction * OCPBUGS-100303: podman-etcd: resolve force_new_cluster race during simultaneous dual-start * mediationzone: new resource agent * powervs-subnet: fix plaintext token file support * ibmmq: new resource agent for IBM MQ queue managers * podman-etcd: scope sync to etcd filesystem only * spec: Remove EOL Fedora compatibility blocks from spec file * Route: * restore unique="1" for destination and warn on "default" * update destination parameter to non-unique * powervs-move-ip: introduce support for trusted profiles, refine handling of API return codes ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1918 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * resource-agents-debugsource-4.18.0+git105.9ea1183-160000.1.1 * resource-agents-4.18.0+git105.9ea1183-160000.1.1 * resource-agents-debuginfo-4.18.0+git105.9ea1183-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1273064 * https://bugzilla.suse.com/show_bug.cgi?id=1281122 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:56:19 -0000 Subject: SUSE-SU-2026:24197-1: important: Security update for the Linux Kernel Message-ID: <179252977985.2203.7031422691464492523@816288a415ff> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24197-1 Release Date: 2026-10-12T14:15:17Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1904 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * dlm-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * cluster-md-kmp-default-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.39.1 * dlm-kmp-default-6.12.0-160000.39.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.39.1 * gfs2-kmp-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (nosrc) * kernel-default-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:40 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:56:40 -0000 Subject: SUSE-SU-2026:24196-1: important: Security update for pacemaker Message-ID: <179252980061.2203.15141669562207146586@816288a415ff> # Security update for pacemaker Announcement ID: SUSE-SU-2026:24196-1 Release Date: 2026-10-09T12:10:03Z Rating: important References: * bsc#1180966 * bsc#1249217 * bsc#1255371 * bsc#1259345 * bsc#1265183 * bsc#1265201 * bsc#1268381 * bsc#1270354 * bsc#1271652 * bsc#1272452 * bsc#1279543 Cross-References: * CVE-2026-10649 CVSS scores: * CVE-2026-10649 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves one vulnerability and has 10 fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: Security issue fixed: * CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: * cts: make cts-scheduler -o/--out-dir default to a temporary directory (bsc#1272452) * spec: Add symlinks for test support files in the pacemaker-cts sub-package (bsc#1272452) * cts: Do not install test support files into /usr at runtime (bsc#1272452) * libcrmcommon: Make pcmk__auto_fencing_watchdog_timeout() static * libcrmcommon: Functionize parsing "fencing-watchdog-timeout" * liblrmd: Check watchdog-based self-fencing device for remote nodes only if "fencing-watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * controller: Check for watchdog-based self-fencing device only if "fencing- watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * fencer: Avoid use-after-free in debug log (bsc#1279543, gh#ClusterLabs/pacemaker#4172) * fenced: Prevent segfault by not merging with in-flight fencing actions (bsc#1271652, gh#ClusterLabs/pacemaker##4152) * ChangeLog: update for 3.0.3 release * Build: update version information for 3.0.3 * libraries: update shared object versions for 3.0.3 * NLS: update translations before 3.0.3-rc1 * cibadmin: allow altering status section without triggering refresh (gh#ClusterLabs/pacemaker#4147) * tools: Use g_spawn_sync in cibsecret. * tools: Handle UTF-8 parameters in crm_resource. * tools: Handle UTF-8 parameters in cibsecret. * agents: Move pid file management into ClusterMon.in. * libcib: Remove an unnecessary coverity suppression. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix an integer overflow in pcmk__remote_send_xml. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Limit the max size of a remote message. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix integer overflow in remote message code. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix checks in localized_remote_header. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * liblrmd: Don't include internal header in lrmd.h * Low: libcrmcommon, tools: Fix NULL dereference in crm_resource.c * pacemakerd: Properly find and track all existing sub-daemons (bsc#1265201, gh#ClusterLabs/pacemaker#4115) * tools: Use the VERSION variable instead of invoking `crm_attribute --version` (bsc#1265183, gh#ClusterLabs/pacemaker#4114) * libcib: Handle cib_xpath_address for an XPath query for an attribute (gh#ClusterLabs/pacemaker#4108) * libcib: Prevent based or cibadmin from crashing when handling an XPath query for an attribute (bsc#1249217, gh#ClusterLabs/pacemaker#4108) * libcrmcommon: Deprecate PCMK_dh_max_bits. * libcib: Full-CIB replace op no longer segfaults with cib_xpath * libpe_status: Avoid leaking a pcmk_resource_t's xml/orig_xml * Revert "API: libraries: Update version numbers in so names" * ChangeLog: update for 3.0.2-rc1 release * tools: Avoid memory leak in crm_resource --clear * libpacemaker, tools: Avoid mem leak in crm_simulate/pcmk_simulate() * libcib: Avoid memory leak when processing CIB upgrade * libpe_status: Use first operations child when expanding template * libpe_status: Improve no resources message in unpack_template() * daemons: Only log a message if we're falling back. * update version information for 3.0.2 * libraries: Update version numbers in so names * libraries: update shared object versions for 3.0.2 * NLS: update translations before 3.0.2-rc1 * libcrmcommon: Deprecate anonymous authentication. * libcrmcommon: Deprecate remote-clear-port. * libcib: Add support for PSK authentication for remote CIB ops. * daemons: Add support for PSK authentication for remote CIB ops. * libpacemaker: Fix a memory leak in inject_action. * tools: Free the list at the end of cli_resource_print_operations. * tools: Fix memory leaks when printing crm_verify warnings/errors. * libpe: If pe__clone_default exits early, free the lists. * libpacemaker: Fix a segfault in order_resource_actions_after. * libcrmcommon: Properly return errno from pcmk__bare_output_new. * libpe: Free elements of rsc->priv->ticket_constraints... * libpacemaker: If process_rsc_history exits early, free the list. * daemons,libcib: Fix memory leaks in IPC code. * libservices: Deal with fgets errors in services__get_lsb_metadata. * libpacemaker: Check that instance is not NULL. * libcrmcommon: Avoid overflow when negating INT_MIN * libcrmcommon: Avoid overflow in crm_time_add_months() * libcib: Explicitly handle receiving a NACK from based. * libcib: Explicitly handle receiving a NACK from fenced. * daemons: Don't NACK an invalid remote message. * libcrmcommon: Don't log on error in pcmk__ipc_send_iov. * daemons: Don't return a NACK if execd gets an unknown message. * liblrmd: Explicitly handle receiving a NACK from execd. * liblrmd: Fix log messages in remote_proxy_cb. * daemons: Delay creating an xmlNode in handle_register_request. * libcrmcommon: Ignore empty time spec * tools: Don't wait on certain "pending" monitor actions. (gh#ClusterLabs/pacemaker#4073) * libcrmcommon: Create a log file if it doesn't exist. * fencer: Disable watchdog-based self-fencing if "fencing-watchdog-timeout" is unset (gh#ClusterLabs/pacemaker#4067) * fencer: Make the deprecated "stonith-watchdog-timeout" option work again (gh#ClusterLabs/pacemaker#4068) * libcrmcommon: Move deprecatd PCMK_OPT_STONITH_TIMEOUT back to options.h * pacemakerd: Correctly detect ping requests from sbd (gh#ClusterLabs/pacemaker#4066) * libcrmcommon: Improve message for qb_log_file_open() fail * libcrmcommon: Improve pcmk__add_logfile() message for fopen() fail * libcrmcommon: More specific error for set_logfile_permissions() * libcrmcommon: Improve validation of PCMK_logfile_mode * liblrmd: Don't assert if queue_time is < 0. * based: Don't log specially for PCMK__XA_CIB_UPDATE * controller: Don't treat patchset-apply errors as OK * libcrmcommon: xml_apply_patchset doesn't return diff_resync err * libcib: Don't convert -pcmk_err_diff_resync to pcmk_ok * libcrmcommon: Handle NULL PCMK_XA_FORMAT and PCMK_XA_DIGEST * libcib, tools: Empty CIB contains admin_epoch before epoch * daemons: Fix user/group checking in based. * libcrmcommon: Fix a glib logging build error. * libcrmcommon: Don't delete unchanged attributes when applying patch * libcrmcommon: Fix potential use-after-free and double-free (gh#ClusterLabs/pacemaker#4044) * executor: Fix the typos in the logs. * libcrmcommon: Set config warnings on mismatched ACL perm specs * libcrmcommon: xml_acl_filtered_copy() returns false for NULL source (gh#ClusterLabs/pacemaker#4039) * libcrmcommon: Make parse_acl_entry() non-recursive * libcrmcommon: Set config warnings and errors for acl_permission * libcib: Log correct error message in replace_cib() * libcib: Fix setting origin attributes in CIB updates (gh#ClusterLabs/pacemaker#4028) * tools: Drop crm_attribute --inhibit-policy-engine/-i option * libcrmcommon: Fix memory leak in pcmk__read_series_sequence() (gh#ClusterLabs/pacemaker#4032) * liblrmd: Check that pcmk__init_tls doesn't set native->tls to NULL. * tools: Drop crm_attribute --attr-value/--delete-attr options * tools: Drop crm_attribute --attr-id option * based: Drop unhelpful trace messages * based: Improve a log message for IPC call options * libcib: {add,del}_notify_callback support only cib_diff_notify * based: Return correct code from write_cib_async() * daemons: Use crm_ipc_client_response in lrmd_remote_client_msg. * daemons: Set ipc_flags in lrmd_remote_client_msg to 0. * daemons: Clean up XML memory in IPC dispatch functions. * daemons: Fix a segfault displaying fencer metadata. * based: Drop redundant messages from based_diff_notify() * build: Handle CMocka deprecations * various: Always NULL-check return value of pcmk__find_client() * libcrmcommon: Improve messages in child_kill_helper() * tools: Free memory in crm_resource.c:handle_metadata() * pacemakerd: Use g_str_has_prefix() in handle_ping_request() * libpacemaker: Correctly check node types in pcmk__list_nodes() * pacemakerd: Match correctly in PCMK_{valgrind,callgrind}_enabled * libcrmcommon: Match correctly in PCMK_debug, stderr, blackbox * spec: Requires libxml2-tools since DLM controld RA requires xmllint (bsc#1259345) * daemons: Fix a typo if no existing attrd is found. * daemons: Call pcmk_cluster_disconnect at the end of fenced. * libcrmcommon: Fix underflow in crm_time_add_days() * libcrmcommon: Avoid integer overflow in seconds_to_hms() * spec: do not treat fillup templates as configuration files * build: install the default logrotate config into /usr/etc/logrotate.d * build: create directories in /var via tmpfiles.d * build: create hacluster user and haclient group via sysusers.d * agents: Deprecate allow_stonith_disabled param for controld RA * agents: New allow_fencing_disabled param for controld RA * agents: Use case-insensitive property matching in controld RA * schemas: Deprecate stonith-timeout-ms in crm_mon output * schemas: Deprecate stonith-enabled in crm_mon output * various: New fencing-timeout-ms in crm_mon/pcmk_status output * schemas: New fencing-timeout-ms attribute in crm_mon schema * various: New fencing-enabled in crm_mon/pcmk_status output * schemas: New fencing-enabled attribute in crm_mon schema * tools: cibadmin --xpath --delete-all deletes all matches again * various: Use const for a few string pointer variables * cts: Respect cts-lab --nic option if specified for IPv4 (gh#ClusterLabs/pacemaker#3986) * cts: cts-lab --nic option defaults to eth0 only for an IPv6 link local address (gh#ClusterLabs/pacemaker#3986) * controller: Ask attribute manager to purge fenced nodes' attributes * controller: Don't purge transient attributes on node loss (gh#ClusterLabs/pacemaker#3991) * controller: Allow purging node attrs without cache removal * controller: don't need to erase node attributes for remote nodes * pacemaker-attrd: Drop "requesting shutdown" code * pacemaker-attrd: Wipe CIB along with memory (gh#ClusterLabs/pacemaker#3991) * libcrmservice: Correctly check the return value of stat. * fencer: Improve validation of pcmk_host_map * fencer: Drop support for escaped characters in pcmk_host_map * fencer: Drop unhelpful message from build_port_aliases() * fencer: Fix ISO 8601 interval parsing in pcmk_delay_base * daemons: When checking for duplicate messages, we might be prepending. * daemons: Don't add repeated I_PE_CALC messages to the fsa queue. * scheduler: promoted state with promoted state with attribute * fencer: Log an error for empty pcmk_delay_base mapping key * fencer: Fix a format string * libcrmservice: List only the requested directory contents * build, libcrmservice: initdir must be a single directory * libcrmservice: Fix memory leaks when listing directory contents * cts: Add cts-lab --nic option used for generated IP address resources (gh#ClusterLabs/pacemaker#3982) * libcrmcommon: Loop on EAGAIN in mainloop_gio_callback. * daemons: Get rid of some logged warnings in execd. * libcrmcommon: Bump feature set to 3.20.5 * libcrmcommon: Deprecate stop-removed-resources cluster property * libcrmcommon: Deprecate cancel-removed-actions cluster property * libpe_status: Warn if concurrent-fencing is false * libcrmcommon: Deprecate enable-startup-probes cluster property * libcrmcommon: Rename stop-removed-actions to cancel-removed-actions * libcrmcommon: Deprecate cluster-ipc-limit cluster option * cts-cli: Escape special characters in the path for a pattern (gh#ClusterLabs/pacemaker#3971) * tools: Handle large timeouts correctly in crm_resource --wait * controller: NULL-check lrm_state before dereferencing it * tools: cibsecret should work with CIB_file set. * controller: Avoid "stonith" in log messages * tools: Use "fencing" in stonith_admin/crm_resource * libpe_status: Use "fencing" instead of "STONITH" in some logs * libcrmcommon: New "fencing-reaction" cluster property * libcrmcommon: New "fencing-watchdog-timeout" cluster property * libcrmcommon: New "fencing-timeout" cluster property * libcrmcommon: New "fencing-max-attempts" cluster property * libcrmcommon: New "fencing-action" cluster property * libcrmcommon: New "fencing-enabled" cluster property * libcrmcommon: Update documentation for cluster-ipc-limit. * libcrmcommon: Be more lenient in evicting IPC clients. * tools: Deprecate iso8601 command line tool * libcrmcommon: Show deprecated option aliases in outputs * libcrmcommon: Parse iso8601 strings according to spec. * fencer: Prevent unsigned int overflow in get_action_timeout() * libcrmcommon: Fix integer overflow of alert timeouts * libcrmcommon: Ensure stonith watchdog timeout is in long range * controller, fencer: Ignore negative/unparsable pcmk_monitor_timeout * cts: Drop cts script * tools: Drop crm_report -T/--cts and --cts-log options * schemas: Deprecate "orphaned" attribute * schemas: resource XML element has new "removed" attribute * schemas: Deprecate "orphan" attribute in crm_mon and crm_simulate * schemas: resource_history XML element has new "removed" attribute * libcrmcommon: Fix a segfault in internal_ipc_get_reply. (bsc#1255371, gh#ClusterLabs/pacemaker#3949) * libcrmcommon: New "stop-removed-resources" cluster property * libcrmcommon: New "stop-removed-actions" cluster property * sysconfig: Remove --leak-check=full from default VALGRIND_OPTS. * tools: Hide crm_mon --as-xml option * crm_mon: Deprecate --pid-file/-p option * tools: Fix CIB validation in crm_mon.c * libcib, libcrmcommon: Improve a couple of log messages * libcrmcommon: pcmk__quote_cmdline() returns valid shell string * libcrmcommon: Bump feature set to 3.20.4 * schemas: Add a schema for cibadmin * tools: Use formatted output in cibadmin * tools: Formatted output for cibadmin --show-access --query * tools: Formatted output for cibadmin --node-path * tools: Basic cibadmin XML formatted output * tools: Formatted output for cibadmin --empty * tools: Formatted output for cibadmin --md5-sum{,-versioned} * tools: Deprecate cibadmin -e/--node-path option * libcrmcommon: bump feature set to 3.20.3 * schemas: Add a schema for cibsecret. * libcrmcommon: Return a value for md5sum of empty input. * tools: Remove the shell version of cibsecret. * tools: Improve some cibadmin error messages * tools: cibadmin renders ACLs only when output is cib element * tools: cibadmin now errors if unable to compute md5 sum * libcib, tools: Resolve cibadmin TODO re: ACL rendering and input * controller: Avoid crash due to GSource double-free * tools: Deprecate cibadmin -N/--node option * tools: Drop "Digest: " from cibadmin --md5-sum stderr * tools: cibadmin ignores --node-path for non-XPath-query command * tools: Change exit codes for failure to create cib_t object * libcib: Fix cib__signon_retry() return code * tools: Deprecate cibadmin --show-access as non-privileged user * tools: Don't require --force for non-privileged cibadmin ACLs * tools: Default cibadmin command is now --query * tools: Deprecate current input source precedence in cibadmin * tools: Drop cibadmin --extended-version/-! option * libcrmcommon: Bump feature set to 3.20.2 * schemas: Add a schema for crm_diff * tools: Use formatted output in crm_diff.c * libcrmcommon: Standardize remote environment variable parsing * libcrmcommon: Allow empty string values in pcmk__scan_nvpair() * libcrmcommon: Keep trailing newlines in pcmk__scan_nvpair() * fencer: Fix fence delay range off-by-one * daemons: Return CRM_EX_PROTOCOL when ACKing an unknown request. * daemons: Correct result error string on unknown IPC messages. * daemons: Add a return to do_pe_invoke_callback. * tools: Deprecate crm_diff --stdin * tools: Improve error handling in crm_diff.c * tools: Be stricter about crm_diff --cib/--no-version * libcrmcommon: Don't require version info when applying CIB patches * agents: Error check calling attrd_updater in HealthSMART. * agents: Error check calling attrd_updater in HealthIOWait. * agents: Error out if CPU I/O wait time isn't available. * agents: Error check calling attrd_updater in HealthCPU. * agents: Error out if CPU idleness isn't available. * daemons: Don't log the unresponsive message for a daemon we killed * controller: Avoid blocking wait in controller for CIB re-request * cts: Remove --valgrind-tests * cts: Leave valgrind results around if they're not empty. * NLS: update translations before 3.0.1-rc1 * libpacemaker: Prevent CIB growth during crm_simulate --profile * daemons: Fix a toctou bug when fetching additional schemas. * Address coverity issues. * Address certain clang static analysis errors. * libs: Fix cppcheck warnings. * libcrmcommon: bump feature set to 3.20.1 * scheduler: Require a cluster option for old remote fencing behavior. * scheduler: Don't always fence online remote nodes. * daemons: Convert schedulerd to support multipart IPC messages. * daemons: Convert attrd to support multipart IPC messages. * daemons: Convert pacemakerd to support multipart IPC messages. * daemons: Convert execd to support multipart IPC messages. * daemons: Convert fenced to support multipart IPC messages. * daemons: Convert controld to support multipart IPC messages. * daemons: Convert based to support multipart IPC messages. * libcrmcommon: Retry on EAGAIN in crm_ipcs_flush_events. * libcrmcommon: All parts of a multipart event should have the same ID * libcrmcommon: Don't immediately overwrite request ID. * libcrmcommon: Check the client buffer in crm_ipc_buffer. * libcrmcommon: Handle sending multi-part IPC server events. * libcrmcommon: crm_ipc_read can receive large IPC messages. * libcrmcommon: Elements should never match if IDs differ * libcrmcommon: Consistently free iov on error. * libcrmcommon: Always free temp node in mark_child_deleted() * libcrmcommon: Fix XML matching when marking changes * fencer: Don't remove device if child is deleted * controller: Populate nodes from peer cache if can't from cluster * libcib: Don't match element based on XPath matching an attribute * tools: Use correct error code for command lookup failure * tools: Dry-run crm_resource --fail if CIB_file is set * libcrmcommon: Sort schema transformations on non-glibc systems * libcrmcommon: Ensure schema transform numbers are in valid range * libcrmcommon: Match literal dots in schema transform filter * spec: Provides user(hacluster) and group(haclient) * libcrmservice: Fix overrides for systemd resources * libcrmservice: Fail systemd rsc start if create override fails * Build: Run cts-cli verbosely. * controller: improve resource action execution logs * controller: improve start-up/exit messages * controller: drop dot file logs * controller: simplify join finalization messages * pacemaker-based: improve a few messages * pacemaker-based: improve exit messages * pacemaker-based: improve messages when reading CIB from disk * libpacemaker: Reset scheduler object in pcmk_simulate() * libpe_status: Make cluster_status() idempotent * tools: Fix overflow in crm_simulate --repeat * libpacemaker: Handle scandir() error in pcmk__profile_dir() * libpacemaker: Fix mem leak in pcmk__profile_dir() * tools: Avoid crash in crm_simulate --profile * Makefile: drop asciidoc references * crm_diff: Replace variable name * Drop deprecated '\--sync-call' option from cibadmin * Drop deprecated '-l/--local' option from cibadmin in multiple places * raise minimum GnuTLS dependency to 3.4.6 * sysconfig: document when logs may show sensitive info * pacemaker-attrd: reduce log spam at shutdown * executor: avoid misleading log when cancelling a recurring monitor * scheduler: improve restart-needed log * scheduler: don't show node capacity for bundle nodes * scheduler: clarify no-quorum effects * libcrmcommon: improve flag set/clear messages * libcrmcommon: improve message for unsupported XPath match * libstonithd: improve action re-attempt message * libcib: Don't send CRM_OP_REGISTER from cib_remote client * tools: mention potential issues with crm_resource --restart * tools: indicate crm_resource --interval can take units * tools: clarify that crm_mon updates are automatic when interactive * agents: Replace the egrep command with the EGREP definition in ping RA * libcrmcluster: fix format typos * doc: drop Inkscape dependency * tools: validate stonith_admin --timeout value * libpacemaker: set fail-count to INFINITY for fatal failures * libpacemaker: add PCMK__XA_FAILED_START_OFFSET and PCMK__XA_FAILED_STOP_OFFSET * tools: Deprecate cibadmin --sync-call * OCF: controld.in: Remove gfs_controld command as it's already obsoleted * xml: Warn about post-transform behavior changes for ACLs with xpath * sysconfig: Document using certificates for remote nodes. * sysconfig: Explain permissions needed on TLS-related files. * libcrmcluster: restore CPG header size compatibility * libcrmcluster: improve messages in pcmk__cpg_message_data() * liblrmd: Enable TLS support for Pacemaker Remote clients. * daemons: Enable TLS support for Pacemaker Remote nodes. * libcrmcommon: Set *tls = NULL in a few more locations. * libcib: Enable TLS certs for remote CIB operations. * libs: Log if a TLS certificate is close to expiration. * libcrmcommon: If the server supports certs, require them... * daemons: Set up X509 auth in based if enabled. * sysconfig: Add env settings needed for X509 authentication. * libcrmcluster: don't assert for CPG decompression error * libcrmcluster: avoid redundant log for invalid CPG messages * libcrmcluster: initialize from in pcmk__cpg_message_data() * scheduler: avoid memory leak in bundles * xml: Preserve ACL reference behavior for replaced constraints * xml: Ensure ACL permissions are valid after XSL transformations * xml: Warn if schema transformation drops remove-after-stop property * xml: Warn if schema transformation drops moon phase * xml: Info if schema transformation drops empty groups or clones * xml: Warn if schema transformation drops colocation/order lifetimes * xml: Warn if schema transformation drops can_fail or... * xml: Warn if schema transformation drops restart-type meta-attr * xml: Warn if schema transformation drops rkt bundles * xml: Warn if schema transformation drops nagios/upstart resources * log: Allow CIB upgrade messages to start with W, I, D * various: clean up library memory at child exit * pacemaker-remoted: improve exit codes for schema failures * controller: avoid memory leak when updating join phase * scheduler: avoid memory leak when freeing node copies * libcrmcommon: drop unhelpful trace message ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1882 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-devel-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debugsource-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-3.0.3+20260728.7052efa194-160000.1.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (noarch) * python3-pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cts-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-schemas-3.0.3+20260728.7052efa194-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-10649.html * https://bugzilla.suse.com/show_bug.cgi?id=1180966 * https://bugzilla.suse.com/show_bug.cgi?id=1249217 * https://bugzilla.suse.com/show_bug.cgi?id=1255371 * https://bugzilla.suse.com/show_bug.cgi?id=1259345 * https://bugzilla.suse.com/show_bug.cgi?id=1265183 * https://bugzilla.suse.com/show_bug.cgi?id=1265201 * https://bugzilla.suse.com/show_bug.cgi?id=1268381 * https://bugzilla.suse.com/show_bug.cgi?id=1270354 * https://bugzilla.suse.com/show_bug.cgi?id=1271652 * https://bugzilla.suse.com/show_bug.cgi?id=1272452 * https://bugzilla.suse.com/show_bug.cgi?id=1279543 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:56:55 -0000 Subject: SUSE-SU-2026:24195-1: important: Security update for hawk2 Message-ID: <179252981589.2203.16000162394995767480@816288a415ff> # Security update for hawk2 Announcement ID: SUSE-SU-2026:24195-1 Release Date: 2026-10-09T10:11:39Z Rating: important References: * bsc#1268996 * bsc#1273348 * bsc#1274860 * bsc#1275019 * bsc#1275179 * bsc#1275183 * bsc#1275188 * bsc#1275200 * bsc#1275213 Cross-References: * CVE-2026-42246 * CVE-2026-66066 * CVE-2026-71847 * CVE-2026-73490 * CVE-2026-73491 * CVE-2026-73492 * CVE-2026-73648 CVSS scores: * CVE-2026-42246 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42246 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-66066 ( SUSE ): 9.5 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L * CVE-2026-66066 ( SUSE ): 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-66066 ( NVD ): 9.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-71847 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-71847 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71847 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73490 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73490 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73490 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73491 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73492 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73492 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73492 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves seven vulnerabilities and has two fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). * CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348). * CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams (bsc#1275213). * CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179). * CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183). * CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188). * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200). Changes for hawk2: * Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019): * Test: give sle15 more time when choosing between sle15 and sle16 * Dev: bump jQuery version to 4.0.0 * Dev: bump jQuery version to 3.5.0 * Dev: bump jQuery version to 2.2.4 * Test: update the e2e test for the change allowing custom parameters * Dev: enable custom Parameters and Meta Attributes (bsc#1274860) * CI/CD: update hawk examiner entry point * Test: enable test_add_clone against hawk-apiserver verion 0.2.1 * Test: fix SyntaxWarning: invalid escape sequence '|' * Test: make the tests compatible against hawk-apiserver ver0.2.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1881 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * hawk2-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debugsource-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debuginfo-2.7.2+git.1788518533.7d4dadd6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42246.html * https://www.suse.com/security/cve/CVE-2026-66066.html * https://www.suse.com/security/cve/CVE-2026-71847.html * https://www.suse.com/security/cve/CVE-2026-73490.html * https://www.suse.com/security/cve/CVE-2026-73491.html * https://www.suse.com/security/cve/CVE-2026-73492.html * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1268996 * https://bugzilla.suse.com/show_bug.cgi?id=1273348 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 * https://bugzilla.suse.com/show_bug.cgi?id=1275019 * https://bugzilla.suse.com/show_bug.cgi?id=1275179 * https://bugzilla.suse.com/show_bug.cgi?id=1275183 * https://bugzilla.suse.com/show_bug.cgi?id=1275188 * https://bugzilla.suse.com/show_bug.cgi?id=1275200 * https://bugzilla.suse.com/show_bug.cgi?id=1275213 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:06 -0000 Subject: SUSE-SU-2026:4768-1: important: Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Message-ID: <179252982651.2203.11228358788952817907@816288a415ff> # Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4768-1 Release Date: 2026-10-20T15:34:43Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4768 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4768 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_163-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-9-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_163-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-9-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:14 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:14 -0000 Subject: SUSE-RU-2026:4767-1: moderate: Recommended update for gcc16 Message-ID: <179252983433.2203.16127548860760557198@816288a415ff> # Recommended update for gcc16 Announcement ID: SUSE-RU-2026:4767-1 Release Date: 2026-10-20T14:11:49Z Rating: moderate References: * bsc#1272616 * bsc#1277919 * jsc#PED-16807 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP7 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that contains one feature and has two fixes can now be installed. ## Description: This update for gcc16 fixes the following issues: This update ships the GNU Compiler Collection GCC 16.2. (jsc#PED-16807) The compiler runtime libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 15 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP7 in the "Development Tools" module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc16 compilers use: * install "gcc16" or "gcc16-c++" or one of the other "gcc16-COMPILER" frontend packages. * override your Makefile to use CC=gcc16, CXX=g++16 and similar overrides for the other languages. For a full changelog with all new GCC16 features, check out https://gcc.gnu.org/gcc-16/changes.html More changes: * Fix build reproducability when PCH is used * Fix auto-detection of Zen6 [bsc#1277919] * Remove support for s390, make sure to configure s390x with \--disable- multilib to avoid configury error without explicit disable of multilibs. Support for s390 is officially deprecated. * Build a full cross-x86_64 compiler [bsc#1272616], but not on %ix86 * Streamline AMD GCN enablement and configuration by basing it on LLVM version availability. Support llvm19 and up. * Fix bootstrap cross compiler packaging and simplify handling by properly requesting suffixed binaries from configury. * Only package version suffixed binaries in %gcc_libc_bootstrap packages, drop LTO related tools from them. This makes them co-installable between different GCC versions. * Going forward no longer register alternatives via update-alternatives for %gcc_libc_bootstrap packages, even on older distros. * Avoid conflicts between %gcc_libc_bootstrap packages of different versions if update-alternatives are still in use (SLE 15 and older) * Wipe all icecream backend build support from the spec file. * Avoids intermittent ABI breakage for libgccjit * Package libquadmath independently of fortran * Disable rust build for Factory by default again as it still requires cargo for building. Add %bcond_with gcc_rust to allow override. * Filter out -Wtime_t conversion from D build flags. * Package libcaf_shmem.a * Update libgphobos and libgdruntime for SONAME bump * Remove loongarch64 from quadmath_arch. On LoongArch long double is IEEE quad, so libquadmath is not needed and no longer built. * Update embedded newlib to 4.6.0.20260123 * Add Algol68 packages. * Add gfx9-4-generic multilib for amdgcn, link llvm-objdump to local tools * Take patches inherited from GCC 15: * add the ability to provide a specs file that is read by default * avoid direct %fs references on x86 to not slow down Xen * do not produce unwind tables for CRT files * fix expansion of __builtin_return_addr for ppc, just a testcase * make translation files version specific and adjust textdomain to find them * fix cross-references in info files when renaming them to be version specific * fix link in the installed libstdc++ html documentation * removes new warning from -Wextra * default to -gdwarf-4 on old products * enable the use of _dl_find_object even when not available at build time ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4767 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4767 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4767 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4767 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4767 * SUSE Linux Enterprise High Performance Computing 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4767 * SUSE Linux Enterprise Desktop 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4767 * SUSE Linux Enterprise Server 15 SP6 zypper in -t patch SUSE-SLE-INSTALLER-15-SP6-2026-4767 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4767 * SUSE Linux Enterprise Server 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4767 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4767 * SUSE Linux Enterprise High Performance Computing 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4767 * SUSE Linux Enterprise Desktop 15 SP7 zypper in -t patch SUSE-SLE-INSTALLER-15-SP7-2026-4767 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4767 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4767 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4767 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP6 (aarch64 x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Desktop 15 SP6 (x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP6 (aarch64 ppc64le s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 s390x x86_64) * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Server 15 SP7 (aarch64 ppc64le s390x x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 (ppc64le x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise High Performance Computing 15 SP7 (aarch64 x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * SUSE Linux Enterprise Desktop 15 SP7 (x86_64) * libstdc++6-16.2.0+git9497-150000.1.3.3 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libubsan1-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-pp-16.2.0+git9497-150000.1.3.3 * libstdc++6-devel-gcc16-16.2.0+git9497-150000.1.3.3 * libitm1-debuginfo-16.2.0+git9497-150000.1.3.3 * libobjc4-debuginfo-16.2.0+git9497-150000.1.3.3 * libobjc4-16.2.0+git9497-150000.1.3.3 * libgfortran5-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * libtsan2-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-locale-16.2.0+git9497-150000.1.3.3 * liblsan0-16.2.0+git9497-150000.1.3.3 * libitm1-16.2.0+git9497-150000.1.3.3 * libgomp1-debuginfo-16.2.0+git9497-150000.1.3.3 * libasan8-16.2.0+git9497-150000.1.3.3 * libubsan1-16.2.0+git9497-150000.1.3.3 * libstdc++6-debuginfo-16.2.0+git9497-150000.1.3.3 * libgcc_s1-16.2.0+git9497-150000.1.3.3 * libgfortran5-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * libtsan2-16.2.0+git9497-150000.1.3.3 * libstdc++6-16.2.0+git9497-150000.1.3.3 * libasan8-debuginfo-16.2.0+git9497-150000.1.3.3 * liblsan0-debuginfo-16.2.0+git9497-150000.1.3.3 * libgomp1-16.2.0+git9497-150000.1.3.3 * libgcc_s1-debuginfo-16.2.0+git9497-150000.1.3.3 * libatomic1-16.2.0+git9497-150000.1.3.3 * Basesystem Module 15-SP7 (x86_64) * libasan8-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libasan8-32bit-16.2.0+git9497-150000.1.3.3 * libgomp1-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libgcc_s1-32bit-16.2.0+git9497-150000.1.3.3 * libobjc4-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libgfortran5-32bit-16.2.0+git9497-150000.1.3.3 * libatomic1-32bit-16.2.0+git9497-150000.1.3.3 * libquadmath0-32bit-16.2.0+git9497-150000.1.3.3 * libitm1-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-pp-32bit-16.2.0+git9497-150000.1.3.3 * libquadmath0-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-32bit-16.2.0+git9497-150000.1.3.3 * libobjc4-32bit-16.2.0+git9497-150000.1.3.3 * libatomic1-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libitm1-32bit-16.2.0+git9497-150000.1.3.3 * libgomp1-32bit-16.2.0+git9497-150000.1.3.3 * libubsan1-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libgfortran5-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libubsan1-32bit-16.2.0+git9497-150000.1.3.3 * libgcc_s1-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * Basesystem Module 15-SP7 (aarch64 x86_64) * libhwasan0-debuginfo-16.2.0+git9497-150000.1.3.3 * libhwasan0-16.2.0+git9497-150000.1.3.3 * Basesystem Module 15-SP7 (ppc64le x86_64) * libquadmath0-devel-gcc16-16.2.0+git9497-150000.1.3.3 * libquadmath0-16.2.0+git9497-150000.1.3.3 * libquadmath0-debuginfo-16.2.0+git9497-150000.1.3.3 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cpp16-16.2.0+git9497-150000.1.3.3 * gcc16-16.2.0+git9497-150000.1.3.3 * cpp16-debuginfo-16.2.0+git9497-150000.1.3.3 * libstdc++6-devel-gcc16-16.2.0+git9497-150000.1.3.3 * gcc16-fortran-16.2.0+git9497-150000.1.3.3 * gcc16-c++-16.2.0+git9497-150000.1.3.3 * gcc16-fortran-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-c++-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-PIE-16.2.0+git9497-150000.1.3.3 * gcc16-locale-16.2.0+git9497-150000.1.3.3 * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 * Development Tools Module 15-SP7 (x86_64) * cross-nvptx-gcc16-debuginfo-16.2.0+git9497-150000.1.3.1 * gcc16-32bit-16.2.0+git9497-150000.1.3.3 * cross-nvptx-newlib16-devel-16.2.0+git9497-150000.1.3.1 * libstdc++6-devel-gcc16-32bit-16.2.0+git9497-150000.1.3.3 * cross-nvptx-gcc16-16.2.0+git9497-150000.1.3.1 * gcc16-c++-32bit-16.2.0+git9497-150000.1.3.3 * gcc16-fortran-32bit-16.2.0+git9497-150000.1.3.3 * libquadmath0-devel-gcc16-32bit-16.2.0+git9497-150000.1.3.3 * Development Tools Module 15-SP7 (noarch) * gcc16-info-16.2.0+git9497-150000.1.3.3 * Development Tools Module 15-SP7 (ppc64le x86_64) * libquadmath0-devel-gcc16-16.2.0+git9497-150000.1.3.3 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libm2pim21-debuginfo-16.2.0+git9497-150000.1.3.3 * libgo25-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-ada-16.2.0+git9497-150000.1.3.3 * libada16-debuginfo-16.2.0+git9497-150000.1.3.3 * libm2log21-16.2.0+git9497-150000.1.3.3 * libm2iso21-16.2.0+git9497-150000.1.3.3 * libm2iso21-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-objc-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-go-16.2.0+git9497-150000.1.3.3 * libm2min21-debuginfo-16.2.0+git9497-150000.1.3.3 * libga68-2-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-algol68-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-algol68-16.2.0+git9497-150000.1.3.3 * libga68-2-16.2.0+git9497-150000.1.3.3 * gcc16-objc-16.2.0+git9497-150000.1.3.3 * libm2cor21-16.2.0+git9497-150000.1.3.3 * gcc16-m2-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-m2-16.2.0+git9497-150000.1.3.3 * libm2pim21-16.2.0+git9497-150000.1.3.3 * libgo25-16.2.0+git9497-150000.1.3.3 * libm2log21-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-go-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-obj-c++-16.2.0+git9497-150000.1.3.3 * libm2min21-16.2.0+git9497-150000.1.3.3 * libm2cor21-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-ada-debuginfo-16.2.0+git9497-150000.1.3.3 * libada16-16.2.0+git9497-150000.1.3.3 * gcc16-obj-c++-debuginfo-16.2.0+git9497-150000.1.3.3 * SUSE Package Hub 15 15-SP7 (x86_64) * libm2min21-32bit-16.2.0+git9497-150000.1.3.3 * libgo25-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libm2iso21-32bit-16.2.0+git9497-150000.1.3.3 * libm2cor21-32bit-16.2.0+git9497-150000.1.3.3 * libgdruntime7-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-algol68-32bit-16.2.0+git9497-150000.1.3.3 * gcc16-m2-32bit-16.2.0+git9497-150000.1.3.3 * libgo25-32bit-16.2.0+git9497-150000.1.3.3 * libada16-32bit-16.2.0+git9497-150000.1.3.3 * libada16-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libgdruntime7-32bit-16.2.0+git9497-150000.1.3.3 * libm2log21-32bit-16.2.0+git9497-150000.1.3.3 * libgphobos7-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libm2pim21-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libga68-2-32bit-16.2.0+git9497-150000.1.3.3 * gcc16-ada-32bit-16.2.0+git9497-150000.1.3.3 * libgphobos7-32bit-16.2.0+git9497-150000.1.3.3 * gcc16-d-32bit-16.2.0+git9497-150000.1.3.3 * libm2log21-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libga68-2-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libm2min21-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-obj-c++-32bit-16.2.0+git9497-150000.1.3.3 * libm2iso21-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * libm2pim21-32bit-16.2.0+git9497-150000.1.3.3 * libm2cor21-32bit-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-objc-32bit-16.2.0+git9497-150000.1.3.3 * gcc16-go-32bit-16.2.0+git9497-150000.1.3.3 * SUSE Package Hub 15 15-SP7 (aarch64 s390x x86_64) * libgdruntime7-debuginfo-16.2.0+git9497-150000.1.3.3 * libgphobos7-16.2.0+git9497-150000.1.3.3 * libgphobos7-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-d-16.2.0+git9497-150000.1.3.3 * libgdruntime7-16.2.0+git9497-150000.1.3.3 * gcc16-d-debuginfo-16.2.0+git9497-150000.1.3.3 * SUSE Package Hub 15 15-SP7 (aarch64) * gcc16-debuginfo-16.2.0+git9497-150000.1.3.3 * gcc16-debugsource-16.2.0+git9497-150000.1.3.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1272616 * https://bugzilla.suse.com/show_bug.cgi?id=1277919 * https://jira.suse.com/browse/PED-16807 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:22 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:22 -0000 Subject: SUSE-RU-2026:4766-1: important: Recommended update for timezone Message-ID: <179252984283.2203.1574846566656880138@816288a415ff> # Recommended update for timezone Announcement ID: SUSE-RU-2026:4766-1 Release Date: 2026-10-20T13:54:14Z Rating: important References: * bsc#1264965 * bsc#1284525 Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that has two fixes can now be installed. ## Description: This update for timezone fixes the following issues: * Update to version 2026e: * Fix: Customer requesting new timezone patch for British Columbia change to permanent DST (bsc#1284525): * Manitoba moves to permanent -05 on 2026-10-31 * Update to version 2026d: * Canada's Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime * Update to 2026c: * Alberta moved to permanent -06 on 2026-06-18. * Morocco moves to permanent +00 on 2026-09-20. * More integer overflow bugs have been fixed in zic. * Update to 2026b: * British Columbia moved to permanent -07 on 2026-03-09. (bsc#1264965) * Some more overflow bugs have been fixed in zic. * Update to 2026a: * Moldova has used EU transition times since 2022. * The "right" TZif files are no longer installed by default. * -DTZ_RUNTIME_LEAPS=0 disables runtime support for leap seconds. * TZif files are no longer limited to 50 bytes of abbreviations. * zic is no longer limited to 50 leap seconds. * Several integer overflow bugs have been fixed. * Changes from 2025c: * update Baja California DST rules in 1953, 1961-1975 * An unset TZ is no longer invalid when /etc/localtime is missing, and is abbreviated "UTC" not "-00". * tzset etc. are now more cautious about questionable TZ settings. * tzset etc. now treat ' ' like '_' in time zone abbreviations. * tzfree now preserves errno, consistently with POSIX.1-2024 'free'. * zic has new options inspired by FreeBSD. '-D' skips creation of output ancestor directories, '-m MODE' sets output files mode, and '-u OWNER[:GROUP]' sets output files owner and group. * multiple changes visible to developers * Use "REDO=posix_right" to keep installing "right" TZif files. * Update to 2025b: * New zone for Aisen Region in Chile (America/Coyhaique) which moves from -04/-03 to -03 * Update to 2025a: * Paraguay adopts permanent -03 starting spring 2024 * Improve pre-1991 data for the Philippines * Etc/Unknown is now reserved * Update to 2024b: * Improve historical data for Mexico, Mongolia, and Portugal. * System V names are now obsolescent. * The main data form now uses %z. * The code now conforms to RFC 8536 for early timestamps. * Support POSIX.1-2024, which removes asctime_r and ctime_r. * Assume POSIX.2-1992 or later for shell scripts. * SUPPORT_C89 now defaults to 1. * Fixes testsuite failures for other packages ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4766 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4766 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * timezone-2026e-0.52.54.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch) * timezone-java-2026e-0.52.54.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * timezone-2026e-0.52.54.1 * SUSE Linux Enterprise Server 11 SP4 (noarch) * timezone-java-2026e-0.52.54.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1264965 * https://bugzilla.suse.com/show_bug.cgi?id=1284525 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:28 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:28 -0000 Subject: SUSE-SU-2026:4765-1: moderate: Security update for python-WebOb Message-ID: <179252984828.2203.15428851148465050809@816288a415ff> # Security update for python-WebOb Announcement ID: SUSE-SU-2026:4765-1 Release Date: 2026-10-20T13:53:04Z Rating: moderate References: * bsc#1275917 Cross-References: * CVE-2026-54770 CVSS scores: * CVE-2026-54770 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-54770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-WebOb fixes the following issues: * CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4765 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4765 ## Package List: * Basesystem Module 15-SP7 (noarch) * python3-WebOb-1.7.4-150000.3.9.1 * SUSE Package Hub 15 15-SP7 (noarch) * python2-WebOb-1.7.4-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-54770.html * https://bugzilla.suse.com/show_bug.cgi?id=1275917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:42 -0000 Subject: SUSE-SU-2026:4764-1: moderate: Security update for ntfs-3g_ntfsprogs Message-ID: <179252986216.2203.18110036526546548204@816288a415ff> # Security update for ntfs-3g_ntfsprogs Announcement ID: SUSE-SU-2026:4764-1 Release Date: 2026-10-20T13:51:18Z Rating: moderate References: * bsc#1281756 * bsc#1281757 * bsc#1281758 * bsc#1281759 * bsc#1281760 * bsc#1281761 * bsc#1281762 * bsc#1281763 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has eight security fixes can now be installed. ## Description: This update for ntfs-3g_ntfsprogs fixes the following issues: * Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). * Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). * Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). * Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). * Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). * Heap buffer overflow in ntfs_same_sid() (bsc#1281757). * Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). * Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4764 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4764 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ntfsprogs-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debugsource-2022.5.17-150000.3.30.1 * libntfs-3g87-debuginfo-2022.5.17-150000.3.30.1 * libntfs-3g87-2022.5.17-150000.3.30.1 * ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g-2022.5.17-150000.3.30.1 * ntfs-3g-debuginfo-2022.5.17-150000.3.30.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ntfs-3g_ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debugsource-2022.5.17-150000.3.30.1 * libntfs-3g-devel-2022.5.17-150000.3.30.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281756 * https://bugzilla.suse.com/show_bug.cgi?id=1281757 * https://bugzilla.suse.com/show_bug.cgi?id=1281758 * https://bugzilla.suse.com/show_bug.cgi?id=1281759 * https://bugzilla.suse.com/show_bug.cgi?id=1281760 * https://bugzilla.suse.com/show_bug.cgi?id=1281761 * https://bugzilla.suse.com/show_bug.cgi?id=1281762 * https://bugzilla.suse.com/show_bug.cgi?id=1281763 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:59 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:59 -0000 Subject: SUSE-SU-2026:4761-1: moderate: Security update for libXpm Message-ID: <179252987942.2203.5324798031556188888@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:4761-1 Release Date: 2026-10-20T13:48:52Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4761 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libXpm-devel-3.5.11-6.13.1 * libXpm4-debuginfo-32bit-3.5.11-6.13.1 * libXpm4-32bit-3.5.11-6.13.1 * libXpm4-3.5.11-6.13.1 * libXpm4-debuginfo-3.5.11-6.13.1 * libXpm-debugsource-3.5.11-6.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:47 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:47 -0000 Subject: SUSE-SU-2026:4763-1: moderate: Security update for libXpm Message-ID: <179252986756.2203.17412523760167651253@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:4763-1 Release Date: 2026-10-20T13:49:56Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4763 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4763 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4763 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libXpm4-debuginfo-3.5.12-150000.3.13.1 * libXpm-devel-3.5.12-150000.3.13.1 * libXpm4-3.5.12-150000.3.13.1 * libXpm-debugsource-3.5.12-150000.3.13.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libXpm-debugsource-3.5.12-150000.3.13.1 * libXpm-tools-debuginfo-3.5.12-150000.3.13.1 * libXpm-tools-3.5.12-150000.3.13.1 * SUSE Package Hub 15 15-SP7 (x86_64) * libXpm4-32bit-3.5.12-150000.3.13.1 * libXpm4-32bit-debuginfo-3.5.12-150000.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:54 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:57:54 -0000 Subject: SUSE-SU-2026:4762-1: moderate: Security update for openssl-1_0_0 Message-ID: <179252987427.2203.8097060183023077030@816288a415ff> # Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2026:4762-1 Release Date: 2026-10-20T13:49:16Z Rating: moderate References: * bsc#1274774 * bsc#1274795 Cross-References: * CVE-2026-54874 CVSS scores: * CVE-2026-54874 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54874 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). Changes for openssl-1_0_0: * Security fixes in August 2026 release (bsc#1274774) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4762 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4762 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-1.0.2p-3.115.1 * openssl-1_0_0-debuginfo-1.0.2p-3.115.1 * openssl-1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-1.0.2p-3.115.1 * openssl-1_0_0-debugsource-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libopenssl1_0_0-32bit-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * openssl-1_0_0-doc-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libopenssl1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-32bit-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-3.115.1 * openssl-1_0_0-debuginfo-1.0.2p-3.115.1 * openssl-1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-1.0.2p-3.115.1 * openssl-1_0_0-debugsource-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * openssl-1_0_0-doc-1.0.2p-3.115.1 ## References: * https://www.suse.com/security/cve/CVE-2026-54874.html * https://bugzilla.suse.com/show_bug.cgi?id=1274774 * https://bugzilla.suse.com/show_bug.cgi?id=1274795 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:23 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:58:23 -0000 Subject: SUSE-RU-2026:4757-1: low: - Update to version 1.35.8: Message-ID: <179252990379.2203.10525251158318676703@816288a415ff> # \- Update to version 1.35.8: Announcement ID: SUSE-RU-2026:4757-1 Release Date: 2026-10-20T12:59:12Z Rating: low References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: * Update to version 1.35.8: * Full changelog - https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.35.md#v1358 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4757 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4757 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.44.1 * kubernetes1.35-client-1.35.8-150600.13.44.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.35-client-fish-completion-1.35.8-150600.13.44.1 * kubernetes1.35-client-bash-completion-1.35.8-150600.13.44.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.44.1 * kubernetes1.35-client-1.35.8-150600.13.44.1 * Containers Module 15-SP7 (noarch) * kubernetes1.35-client-bash-completion-1.35.8-150600.13.44.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:58:19 -0000 Subject: SUSE-RU-2026:4758-1: moderate: Recommended update for timezone Message-ID: <179252989994.2203.15366029277793505577@816288a415ff> # Recommended update for timezone Announcement ID: SUSE-RU-2026:4758-1 Release Date: 2026-10-20T13:41:52Z Rating: moderate References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for timezone fixes the following issues: * Update to version 2026e: * Manitoba moves to permanent -05 on 2026-10-31 * Update to version 2026d: * Canada's Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4758 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4758 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4758 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4758 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * timezone-2026e-150600.91.15.1 * timezone-debuginfo-2026e-150600.91.15.1 * timezone-debugsource-2026e-150600.91.15.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * timezone-2026e-150600.91.15.1 * timezone-debuginfo-2026e-150600.91.15.1 * timezone-debugsource-2026e-150600.91.15.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * timezone-2026e-150600.91.15.1 * timezone-debuginfo-2026e-150600.91.15.1 * timezone-debugsource-2026e-150600.91.15.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * timezone-2026e-150600.91.15.1 * timezone-debuginfo-2026e-150600.91.15.1 * timezone-debugsource-2026e-150600.91.15.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:16 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:58:16 -0000 Subject: SUSE-RU-2026:4759-1: moderate: Recommended update for timezone Message-ID: <179252989609.2203.8595768429048352518@816288a415ff> # Recommended update for timezone Announcement ID: SUSE-RU-2026:4759-1 Release Date: 2026-10-20T13:44:18Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for timezone fixes the following issues: * Update to verion 2026e: * Manitoba moves to permanent -05 on 2026-10-31 * Update to verion 2026d: * Canada's Northwest Territories moved to permanent -06 on 2026-08-21 * Obsolescent settings like TZ="EST5EDT" now conform better to POSIX * Fix security, performance and porting bugs in zic and localtime ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4759 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4759 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4759 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4759 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4759 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4759 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4759 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4759 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4759 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4759 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4759 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4759 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4759 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * timezone-java-2026e-150000.75.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * timezone-2026e-150000.75.43.1 * timezone-debuginfo-2026e-150000.75.43.1 * timezone-debugsource-2026e-150000.75.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * timezone-java-2026e-150000.75.43.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:27 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:58:27 -0000 Subject: SUSE-RU-2026:4756-1: moderate: Recommended update for pqcverification-zypp-plugin Message-ID: <179252990784.2203.11587942013741920444@816288a415ff> # Recommended update for pqcverification-zypp-plugin Announcement ID: SUSE-RU-2026:4756-1 Release Date: 2026-10-20T12:58:56Z Rating: moderate References: * jsc#PED-11922 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that contains one feature can now be installed. ## Description: This update for pqcverification-zypp-plugin fixes the following issues: * Initial shipment of a PQC repository verification plugin for libzypp [jsc#PED-11922] ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4756 ## Package List: * Basesystem Module 15-SP7 (noarch) * pqcverification-zypp-plugin-1.0-150700.15.3.1 ## References: * https://jira.suse.com/browse/PED-11922 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:11 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 20 Oct 2026 20:58:11 -0000 Subject: SUSE-SU-2026:4760-1: important: Security update for busybox Message-ID: <179252989190.2203.2749548357423374549@816288a415ff> # Security update for busybox Announcement ID: SUSE-SU-2026:4760-1 Release Date: 2026-10-20T13:48:37Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4760 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * busybox-1.37.0-150700.18.24.1 * busybox-static-1.37.0-150700.18.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:13 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 08:30:13 -0000 Subject: SUSE-SU-2026:4776-1: important: Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Message-ID: <179257141301.2859.2560875456174208781@09d8eb4075ed> # Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4776-1 Release Date: 2026-10-20T18:34:35Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4776 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_323-default-4-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:31 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 08:30:31 -0000 Subject: SUSE-SU-2026:4773-1: important: Security update for busybox Message-ID: <179257143145.2859.10250492895134707231@09d8eb4075ed> # Security update for busybox Announcement ID: SUSE-SU-2026:4773-1 Release Date: 2026-10-20T17:58:57Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4773 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4773 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * busybox-1.35.0-10.12.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * busybox-1.35.0-10.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:53 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 08:30:53 -0000 Subject: SUSE-SU-2026:4772-1: important: Security update for bind Message-ID: <179257145312.2859.14191280409383029429@09d8eb4075ed> # Security update for bind Announcement ID: SUSE-SU-2026:4772-1 Release Date: 2026-10-20T17:58:11Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280440 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-77119 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4772 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4772 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4772 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4772 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4772 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4772 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * openSUSE Leap 15.5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * bind-debugsource-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * bind-utils-9.16.50-150500.8.46.1 * bind-utils-debuginfo-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:59 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 08:30:59 -0000 Subject: SUSE-RU-2026:4771-1: moderate: Recommended update for python-gcemetadata Message-ID: <179257145919.2859.12033196969206500875@09d8eb4075ed> # Recommended update for python-gcemetadata Announcement ID: SUSE-RU-2026:4771-1 Release Date: 2026-10-20T17:04:34Z Rating: moderate References: * bsc#1261908 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-gcemetadata fixes the following issues: * Update to version 1.1.2: * Fix: openQA publiccloud test fails to boot during instance creation waiting for guestregister.service (bsc#1261908): * Avoid connection attempt to black hole * Handle IPv6 and IPv4 access to the metadata server giving IPv6 preference ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4771 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4771 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4771 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4771 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4771 ## Package List: * Public Cloud Module 15-SP4 (noarch) * python-gcemetadata-1.1.2-150400.9.11.1 * openSUSE Leap 15.4 (noarch) * python-gcemetadata-1.1.2-150400.9.11.1 * Public Cloud Module 15-SP5 (noarch) * python-gcemetadata-1.1.2-150400.9.11.1 * Public Cloud Module 15-SP6 (noarch) * python-gcemetadata-1.1.2-150400.9.11.1 * Public Cloud Module 15-SP7 (noarch) * python-gcemetadata-1.1.2-150400.9.11.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261908 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:31:06 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 08:31:06 -0000 Subject: SUSE-RU-2026:4770-1: important: Recommended update for nftables Message-ID: <179257146653.2859.5572105918304410309@09d8eb4075ed> # Recommended update for nftables Announcement ID: SUSE-RU-2026:4770-1 Release Date: 2026-10-20T17:03:10Z Rating: important References: * bsc#1278301 Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for nftables fixes the following issues: * erec: guard against NULL indesc in erec_print() (bsc#1278301) * parser_json: give handle locations an input descriptor ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4770 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4770 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4770 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4770 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4770 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4770 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4770 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4770 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4770 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4770 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4770 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4770 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4770 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4770 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4770 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4770 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4770 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4770 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * openSUSE Leap 15.4 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python3-nftables-0.9.8-150400.6.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * Basesystem Module 15-SP7 (noarch) * python3-nftables-0.9.8-150400.6.6.1 * Python 3 Module 15-SP7 (noarch) * python311-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * nftables-debugsource-0.9.8-150400.6.6.1 * nftables-0.9.8-150400.6.6.1 * libnftables1-0.9.8-150400.6.6.1 * nftables-debuginfo-0.9.8-150400.6.6.1 * libnftables1-debuginfo-0.9.8-150400.6.6.1 * nftables-devel-0.9.8-150400.6.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-nftables-0.9.8-150400.6.6.1 * python3-nftables-0.9.8-150400.6.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278301 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:30:16 -0000 Subject: SUSE-SU-2026:4785-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Message-ID: <179258581627.14165.10520057269246142074@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4785-1 Release Date: 2026-10-21T04:05:56Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4785 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4785 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4784 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4784 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-4-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-4-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-4-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-4-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-4-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-4-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:38 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:30:38 -0000 Subject: SUSE-SU-2026:4791-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6) Message-ID: <179258583851.14165.6247920530445574311@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4791-1 Release Date: 2026-10-21T06:34:26Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.78 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4790 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4791 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4782 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4790 SUSE-2026-4791 SUSE-2026-4782 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_17-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-19-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-16-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_17-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-19-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-16-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:50 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:30:50 -0000 Subject: SUSE-SU-2026:4793-1: important: Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Message-ID: <179258585099.14165.12000772450445851762@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4793-1 Release Date: 2026-10-21T07:36:16Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4793 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4789 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4780 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4794 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4788 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4789 SUSE-2026-4780 SUSE-2026-4794 SUSE-2026-4788 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4779 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4781 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4777 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4778 SUSE- SLE-Module-Live-Patching-15-SP5-2026-4786 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4783 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4779 SUSE-2026-4781 SUSE-2026-4777 SUSE-2026-4778 SUSE-2026-4786 SUSE-2026-4783 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_280-default-15-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_219-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_57-debugsource-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_219-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_57-debugsource-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-7-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-7-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-7-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:59 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:30:59 -0000 Subject: SUSE-SU-2026:4810-1: moderate: Security update for python-oauthlib Message-ID: <179258585912.14165.12327996200227847967@c0911b1ee8c1> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:4810-1 Release Date: 2026-10-21T08:05:08Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4810 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4810 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4810 ## Package List: * Public Cloud Module 15-SP4 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 * openSUSE Leap 15.4 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 * Python 3 Module 15-SP7 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:14 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:31:14 -0000 Subject: SUSE-SU-2026:4809-1: important: Security update for python311 Message-ID: <179258587439.14165.7942899725704509547@c0911b1ee8c1> # Security update for python311 Announcement ID: SUSE-SU-2026:4809-1 Release Date: 2026-10-21T08:04:21Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4809 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4809 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4809 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4809 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4809 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4809 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4809 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4809 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4809 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4809 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-testsuite-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-testsuite-debuginfo-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (x86_64) * python311-base-32bit-debuginfo-3.11.17-150400.9.105.1 * python311-32bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-32bit-3.11.17-150400.9.105.1 * libpython3_11-1_0-32bit-debuginfo-3.11.17-150400.9.105.1 * libpython3_11-1_0-32bit-3.11.17-150400.9.105.1 * python311-32bit-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-64bit-3.11.17-150400.9.105.1 * libpython3_11-1_0-64bit-3.11.17-150400.9.105.1 * python311-64bit-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:21 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:31:21 -0000 Subject: SUSE-SU-2026:4807-1: moderate: Security update for python-oauthlib Message-ID: <179258588120.14165.4950244925283200132@c0911b1ee8c1> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:4807-1 Release Date: 2026-10-21T08:02:33Z Rating: moderate References: * bsc#1283526 Cross-References: * CVE-2026-49264 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-oauthlib fixes the following issue: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4807 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4807 ## Package List: * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-oauthlib-2.0.6-150000.3.9.1 * python2-oauthlib-2.0.6-150000.3.9.1 * Basesystem Module 15-SP7 (noarch) * python3-oauthlib-2.0.6-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:43 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:31:43 -0000 Subject: SUSE-SU-2026:4806-1: important: Security update for MozillaFirefox Message-ID: <179258590388.14165.9842330943327054604@c0911b1ee8c1> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4806-1 Release Date: 2026-10-21T08:01:45Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service (bsc#1275098). * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service (bsc#1275098). * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption (bsc#1275098). * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption (bsc#1275098). * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks (bsc#1275098). * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption (bsc#1275098). * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service (bsc#1275098). * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption (bsc#1275098). * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c (bsc#1275736). * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service (bsc#1275605). * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash (bsc#1275736). * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks (bsc#1275736). * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption (bsc#1275736). * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters (bsc#1282347). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4806 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4806 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-common-153.5.0-118.16.2 * MozillaFirefox-debuginfo-153.5.0-118.16.2 * MozillaFirefox-debugsource-153.5.0-118.16.2 * MozillaFirefox-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-translations-common-153.5.0-118.16.2 * MozillaFirefox-debuginfo-153.5.0-118.16.2 * MozillaFirefox-debugsource-153.5.0-118.16.2 * MozillaFirefox-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.5.0-118.16.2 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:51 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:31:51 -0000 Subject: SUSE-SU-2026:4805-1: moderate: Security update for perl-DBI Message-ID: <179258591147.14165.7101000121813862293@c0911b1ee8c1> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4805-1 Release Date: 2026-10-21T08:01:10Z Rating: moderate References: * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4805 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4805 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * perl-DBI-debuginfo-1.647.0-150600.12.26.1 * perl-DBI-1.647.0-150600.12.26.1 * perl-DBI-debugsource-1.647.0-150600.12.26.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-DBI-debuginfo-1.647.0-150600.12.26.1 * perl-DBI-1.647.0-150600.12.26.1 * perl-DBI-debugsource-1.647.0-150600.12.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:59 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:31:59 -0000 Subject: SUSE-SU-2026:4804-1: important: Security update for pgvector Message-ID: <179258591953.14165.8752694032768378032@c0911b1ee8c1> # Security update for pgvector Announcement ID: SUSE-SU-2026:4804-1 Release Date: 2026-10-21T08:00:51Z Rating: important References: * bsc#1284129 Cross-References: * CVE-2026-103484 CVSS scores: * CVE-2026-103484 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-103484 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103484 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for pgvector fixes the following issue: * CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: * Updated to version 0.8.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4804 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4804 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4804 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4804 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * postgresql15-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql14-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql14-pgvector-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql15-pgvector-0.8.7-150600.13.12.1 * postgresql14-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql15-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103484.html * https://bugzilla.suse.com/show_bug.cgi?id=1284129 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:05 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:32:05 -0000 Subject: SUSE-SU-2026:4803-1: important: Security update for cups-filters Message-ID: <179258592567.14165.6542190711447087208@c0911b1ee8c1> # Security update for cups-filters Announcement ID: SUSE-SU-2026:4803-1 Release Date: 2026-10-21T08:00:06Z Rating: important References: * bsc#1282291 Cross-References: * CVE-2026-95511 CVSS scores: * CVE-2026-95511 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-95511 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-95511 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cups-filters fixes the following issue: * CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4803 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4803 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4803 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4803 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4803 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4803 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4803 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4803 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4803 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4803 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4803 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-95511.html * https://bugzilla.suse.com/show_bug.cgi?id=1282291 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:11 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:32:11 -0000 Subject: SUSE-SU-2026:4802-1: important: Security update for cyrus-sasl Message-ID: <179258593166.14165.1264364989965324694@c0911b1ee8c1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4802-1 Release Date: 2026-10-21T07:58:39Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4802 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4802 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4802 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4802 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4802 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4802 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4802 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4802 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4802 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ntlm-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-scram-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * openSUSE Leap 15.3 (x86_64) * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-otp-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-devel-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.27-150300.4.9.1 * openSUSE Leap 15.3 (aarch64_ilp32) * cyrus-sasl-devel-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.27-150300.4.9.1 * libsasl2-3-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:19 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:32:19 -0000 Subject: SUSE-SU-2026:4801-1: moderate: Security update for libpng16 Message-ID: <179258593934.14165.314694510213260359@c0911b1ee8c1> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4801-1 Release Date: 2026-10-21T07:57:25Z Rating: moderate References: * bsc#1283183 * jsc#PED-16190 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for libpng16 fixes the following issues: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59 (jsc#PED-16190): * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4801 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpng16-compat-devel-1.6.59-15.27.1 * libpng16-debugsource-1.6.59-15.27.1 * libpng16-devel-1.6.59-15.27.1 * libpng16-16-32bit-1.6.59-15.27.1 * libpng16-16-debuginfo-32bit-1.6.59-15.27.1 * libpng16-16-debuginfo-1.6.59-15.27.1 * libpng16-16-1.6.59-15.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 * https://jira.suse.com/browse/PED-16190 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:56 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:32:56 -0000 Subject: SUSE-SU-2026:4799-1: important: Security update for ImageMagick Message-ID: <179258597665.14165.14936197482349508443@c0911b1ee8c1> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4799-1 Release Date: 2026-10-21T07:57:04Z Rating: important References: * bsc#1268113 * bsc#1268117 * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1284217 * bsc#1284662 * bsc#1284663 * bsc#1284664 * bsc#1284665 * bsc#1284667 * bsc#1284668 * bsc#1284669 * bsc#1284671 * bsc#1284672 * bsc#1284673 * bsc#1284675 * bsc#1284677 * bsc#1284678 * bsc#1284680 * bsc#1284681 * bsc#1284682 * bsc#1284683 * bsc#1285071 Cross-References: * CVE-2026-105083 * CVE-2026-106565 * CVE-2026-106566 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106570 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106573 * CVE-2026-106574 * CVE-2026-106575 * CVE-2026-106577 * CVE-2026-106578 * CVE-2026-106579 * CVE-2026-106580 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-109259 * CVE-2026-109260 * CVE-2026-109261 * CVE-2026-109262 * CVE-2026-109263 * CVE-2026-109266 * CVE-2026-109268 * CVE-2026-109269 * CVE-2026-109270 * CVE-2026-109273 * CVE-2026-109274 * CVE-2026-109275 * CVE-2026-109276 * CVE-2026-109277 * CVE-2026-109278 * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 CVSS scores: * CVE-2026-105083 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-105083 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105083 ( NVD ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106566 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106566 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106574 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106574 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106575 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106575 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106578 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106578 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106580 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-106580 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109259 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109259 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109259 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109260 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109260 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109260 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109261 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109262 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109263 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109263 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109266 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109266 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-109268 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109268 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109269 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109269 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109270 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109270 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109273 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109273 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109274 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109274 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109275 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109275 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-109276 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109276 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109277 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109277 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109278 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109278 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 37 vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something else that is valid xml (bsc#1284217). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106566: delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data (bsc#1284663). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106570: an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing a DoS (bsc#1284667). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106573: a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long- running operation (bsc#1284671). * CVE-2026-106574: a client connected to the distributed pixel cache server can send crafted pixel data that triggers a heap buffer overwrite and crash the server (bsc#1284672). * CVE-2026-106575: a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors (bsc#1284673). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106578: a crafted image can cause an invalid memory free in the MVG decoder and crash the process (bsc#1284677). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash (bsc#1284680). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). * CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071). * CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071). * CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071). * CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071). * CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071). * CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071). * CVE-2026-109268: Denial of Service via use-after-free in PDF writer (bsc#1285071). * CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071). * CVE-2026-109270: Denial of Service via memory leak in the -process option (bsc#1285071). * CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071). * CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071). * CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071). * CVE-2026-109277: Security policy bypass via -script operation (bsc#1285071). * CVE-2026-109278: Denial of Service via memory leak in wavelet-denoise operation (bsc#1285071). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4799 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4799 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4799 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4799 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4799 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4799 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4799 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4799 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4799 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4799 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4799 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4799 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-extra-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * ImageMagick-extra-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (x86_64) * libMagick++-7_Q16HDRI5-32bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-32bit-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-32bit-7.1.0.9-150400.6.122.1 * ImageMagick-devel-32bit-7.1.0.9-150400.6.122.1 * libMagick++-devel-32bit-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libMagick++-7_Q16HDRI5-64bit-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-64bit-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-devel-64bit-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-64bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-64bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-64bit-7.1.0.9-150400.6.122.1 * libMagick++-devel-64bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-64bit-debuginfo-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (noarch) * ImageMagick-doc-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105083.html * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106566.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106570.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106573.html * https://www.suse.com/security/cve/CVE-2026-106574.html * https://www.suse.com/security/cve/CVE-2026-106575.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106578.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-106580.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-109259.html * https://www.suse.com/security/cve/CVE-2026-109260.html * https://www.suse.com/security/cve/CVE-2026-109261.html * https://www.suse.com/security/cve/CVE-2026-109262.html * https://www.suse.com/security/cve/CVE-2026-109263.html * https://www.suse.com/security/cve/CVE-2026-109266.html * https://www.suse.com/security/cve/CVE-2026-109268.html * https://www.suse.com/security/cve/CVE-2026-109269.html * https://www.suse.com/security/cve/CVE-2026-109270.html * https://www.suse.com/security/cve/CVE-2026-109273.html * https://www.suse.com/security/cve/CVE-2026-109274.html * https://www.suse.com/security/cve/CVE-2026-109275.html * https://www.suse.com/security/cve/CVE-2026-109276.html * https://www.suse.com/security/cve/CVE-2026-109277.html * https://www.suse.com/security/cve/CVE-2026-109278.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://bugzilla.suse.com/show_bug.cgi?id=1268113 * https://bugzilla.suse.com/show_bug.cgi?id=1268117 * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1284217 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284663 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284667 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284671 * https://bugzilla.suse.com/show_bug.cgi?id=1284672 * https://bugzilla.suse.com/show_bug.cgi?id=1284673 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284677 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284680 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 * https://bugzilla.suse.com/show_bug.cgi?id=1285071 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:10 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:33:10 -0000 Subject: SUSE-SU-2026:4798-1: important: Security update for busybox Message-ID: <179258599061.14165.13997061285370921798@c0911b1ee8c1> # Security update for busybox Announcement ID: SUSE-SU-2026:4798-1 Release Date: 2026-10-21T07:55:39Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4798 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4798 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4798 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4798 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4798 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * busybox-testsuite-1.35.0-150400.3.23.1 * openSUSE Leap 15.4 (noarch) * busybox-grep-1.35.0-150400.4.11.1 * busybox-time-1.35.0-150400.4.11.1 * busybox-iproute2-1.35.0-150400.4.11.1 * busybox-cpio-1.35.0-150400.4.11.1 * busybox-kbd-1.35.0-150400.4.11.1 * busybox-whois-1.35.0-150400.4.11.1 * busybox-findutils-1.35.0-150400.4.11.1 * busybox-links-1.35.0-150400.4.11.1 * busybox-sendmail-1.35.0-150400.4.11.1 * busybox-bzip2-1.35.0-150400.4.11.1 * busybox-selinux-tools-1.35.0-150400.4.11.1 * busybox-vi-1.35.0-150400.4.11.1 * busybox-less-1.35.0-150400.4.11.1 * busybox-syslogd-1.35.0-150400.4.11.1 * busybox-coreutils-1.35.0-150400.4.11.1 * busybox-dos2unix-1.35.0-150400.4.11.1 * busybox-man-1.35.0-150400.4.11.1 * busybox-tar-1.35.0-150400.4.11.1 * busybox-patch-1.35.0-150400.4.11.1 * busybox-which-1.35.0-150400.4.11.1 * busybox-telnet-1.35.0-150400.4.11.1 * busybox-netcat-1.35.0-150400.4.11.1 * busybox-vlan-1.35.0-150400.4.11.1 * busybox-wget-1.35.0-150400.4.11.1 * busybox-ncurses-utils-1.35.0-150400.4.11.1 * busybox-diffutils-1.35.0-150400.4.11.1 * busybox-util-linux-1.35.0-150400.4.11.1 * busybox-procps-1.35.0-150400.4.11.1 * busybox-policycoreutils-1.35.0-150400.4.11.1 * busybox-bc-1.35.0-150400.4.11.1 * busybox-sysvinit-tools-1.35.0-150400.4.11.1 * busybox-gzip-1.35.0-150400.4.11.1 * busybox-hostname-1.35.0-150400.4.11.1 * busybox-net-tools-1.35.0-150400.4.11.1 * busybox-attr-1.35.0-150400.4.11.1 * busybox-misc-1.35.0-150400.4.11.1 * busybox-sharutils-1.35.0-150400.4.11.1 * busybox-kmod-1.35.0-150400.4.11.1 * busybox-psmisc-1.35.0-150400.4.11.1 * busybox-bind-utils-1.35.0-150400.4.11.1 * busybox-tunctl-1.35.0-150400.4.11.1 * busybox-xz-1.35.0-150400.4.11.1 * busybox-sed-1.35.0-150400.4.11.1 * busybox-ed-1.35.0-150400.4.11.1 * busybox-gawk-1.35.0-150400.4.11.1 * busybox-sh-1.35.0-150400.4.11.1 * busybox-tftp-1.35.0-150400.4.11.1 * busybox-iputils-1.35.0-150400.4.11.1 * busybox-unzip-1.35.0-150400.4.11.1 * busybox-adduser-1.35.0-150400.4.11.1 * busybox-traceroute-1.35.0-150400.4.11.1 * openSUSE Leap 15.4 (aarch64 i586 x86_64) * busybox-warewulf3-1.35.0-150400.3.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:32 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:33:32 -0000 Subject: SUSE-SU-2026:4797-1: important: Security update for bouncycastle Message-ID: <179258601236.14165.18114452863263699397@c0911b1ee8c1> # Security update for bouncycastle Announcement ID: SUSE-SU-2026:4797-1 Release Date: 2026-10-21T07:55:00Z Rating: important References: * bsc#1284065 * bsc#1284073 * bsc#1284075 * bsc#1284165 * bsc#1284205 * bsc#1284212 * bsc#1284213 * bsc#1284215 * bsc#1284218 * bsc#1284219 * bsc#1284220 * bsc#1284221 * bsc#1284222 * bsc#1284224 Cross-References: * CVE-2026-17507 * CVE-2026-17508 * CVE-2026-18036 * CVE-2026-18040 * CVE-2026-71885 * CVE-2026-71886 * CVE-2026-71887 * CVE-2026-71888 * CVE-2026-71889 * CVE-2026-71890 * CVE-2026-71891 * CVE-2026-71892 * CVE-2026-85515 * CVE-2026-97873 CVSS scores: * CVE-2026-17507 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-17507 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-17507 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-17507 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-17508 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-17508 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-17508 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18036 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18036 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18036 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18040 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-18040 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18040 ( NVD ): 5.9 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71885 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-71885 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-71885 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71886 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71886 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-71886 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71887 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71887 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71887 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71888 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71888 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71888 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71889 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71889 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71889 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71890 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71890 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71890 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71891 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71891 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71891 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71892 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-71892 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-71892 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-85515 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-85515 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-85515 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-97873 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97873 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-97873 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for bouncycastle fixes the following issues: * CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). * CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion (bsc#1284073). * CVE-2026-18036: variable-time modulo and division operations in NTRU implementation can allow timing side-channel attacks (bsc#1284065). * CVE-2026-18040: table lookups and variable-time duplicate scanning in HQC can cause cache side-channel leaks (bsc#1284205). * CVE-2026-71885: unbound X.509 certificates in MLS LeafNode verification can cause identity impersonation and group message interception (bsc#1284165). * CVE-2026-71886: unvalidated CERTIFY_OTHER flags in OpenPGP subkeys can cause unauthorized trust delegations and identity spoofing (bsc#1284212). * CVE-2026-71887: missing primary key back-signature validation on subkeys can cause signature misattribution and trust context spoofing (bsc#1284213). * CVE-2026-71888: disagreement between digestAlgorithm and authAttrs in CMS parsing can cause unauthenticated attribute injection (bsc#1284215). * CVE-2026-71889: skipped leaf certificate evaluation in checkNameConstraints can cause X.509 name constraint bypasses (bsc#1284218). * CVE-2026-71890: unbounded Remove proposals in external MLS commits can cause arbitrary group member eviction and session takeover (bsc#1284219). * CVE-2026-71891: forged ECPoint curves in BLS12-381 key validation can cause aggregate signature verification bypasses (bsc#1284220). * CVE-2026-71892: type mismatch in CMS key-transport validation can cause key- size enforcement bypasses for HKDF-derived content keys (bsc#1284221). * CVE-2026-85515: laundered EOF exceptions in OpenPGP message stream processing can cause unregistered truncation errors and integrity check bypasses (bsc#1284222). * CVE-2026-97873: unbounded iteration counts in legacy PBES1 and PKCS#12 PBE implementations can cause resource exhaustion (bsc#1284224). Changes for bouncycastle: * Updated to version 1.86. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4797 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4797 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4797 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4797 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4797 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4797 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4797 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4797 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4797 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4797 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4797 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * Development Tools Module 15-SP7 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-17507.html * https://www.suse.com/security/cve/CVE-2026-17508.html * https://www.suse.com/security/cve/CVE-2026-18036.html * https://www.suse.com/security/cve/CVE-2026-18040.html * https://www.suse.com/security/cve/CVE-2026-71885.html * https://www.suse.com/security/cve/CVE-2026-71886.html * https://www.suse.com/security/cve/CVE-2026-71887.html * https://www.suse.com/security/cve/CVE-2026-71888.html * https://www.suse.com/security/cve/CVE-2026-71889.html * https://www.suse.com/security/cve/CVE-2026-71890.html * https://www.suse.com/security/cve/CVE-2026-71891.html * https://www.suse.com/security/cve/CVE-2026-71892.html * https://www.suse.com/security/cve/CVE-2026-85515.html * https://www.suse.com/security/cve/CVE-2026-97873.html * https://bugzilla.suse.com/show_bug.cgi?id=1284065 * https://bugzilla.suse.com/show_bug.cgi?id=1284073 * https://bugzilla.suse.com/show_bug.cgi?id=1284075 * https://bugzilla.suse.com/show_bug.cgi?id=1284165 * https://bugzilla.suse.com/show_bug.cgi?id=1284205 * https://bugzilla.suse.com/show_bug.cgi?id=1284212 * https://bugzilla.suse.com/show_bug.cgi?id=1284213 * https://bugzilla.suse.com/show_bug.cgi?id=1284215 * https://bugzilla.suse.com/show_bug.cgi?id=1284218 * https://bugzilla.suse.com/show_bug.cgi?id=1284219 * https://bugzilla.suse.com/show_bug.cgi?id=1284220 * https://bugzilla.suse.com/show_bug.cgi?id=1284221 * https://bugzilla.suse.com/show_bug.cgi?id=1284222 * https://bugzilla.suse.com/show_bug.cgi?id=1284224 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:40 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:33:40 -0000 Subject: SUSE-SU-2026:4796-1: moderate: Security update for libpng16 Message-ID: <179258602001.14165.5993948609710923778@c0911b1ee8c1> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4796-1 Release Date: 2026-10-21T07:53:21Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4796 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4796 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libpng16-16-1.6.59-150600.3.26.1 * libpng16-tools-1.6.59-150600.3.26.1 * libpng16-debugsource-1.6.59-150600.3.26.1 * libpng16-16-debuginfo-1.6.59-150600.3.26.1 * libpng16-tools-debuginfo-1.6.59-150600.3.26.1 * libpng16-compat-devel-1.6.59-150600.3.26.1 * libpng16-devel-1.6.59-150600.3.26.1 * openSUSE Leap 15.6 (x86_64) * libpng16-16-32bit-1.6.59-150600.3.26.1 * libpng16-devel-32bit-1.6.59-150600.3.26.1 * libpng16-compat-devel-32bit-1.6.59-150600.3.26.1 * libpng16-16-32bit-debuginfo-1.6.59-150600.3.26.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libpng16-compat-devel-64bit-1.6.59-150600.3.26.1 * libpng16-16-64bit-1.6.59-150600.3.26.1 * libpng16-devel-64bit-1.6.59-150600.3.26.1 * libpng16-16-64bit-debuginfo-1.6.59-150600.3.26.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libpng16-16-1.6.59-150600.3.26.1 * libpng16-debugsource-1.6.59-150600.3.26.1 * libpng16-16-debuginfo-1.6.59-150600.3.26.1 * libpng16-compat-devel-1.6.59-150600.3.26.1 * libpng16-devel-1.6.59-150600.3.26.1 * Basesystem Module 15-SP7 (x86_64) * libpng16-16-32bit-1.6.59-150600.3.26.1 * libpng16-16-32bit-debuginfo-1.6.59-150600.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:46 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:33:46 -0000 Subject: SUSE-SU-2026:4795-1: important: Security update for cyrus-sasl Message-ID: <179258602687.14165.2802271485288236281@c0911b1ee8c1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4795-1 Release Date: 2026-10-21T07:52:59Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4795 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4795 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-2.1.26-14.10.1 * cyrus-sasl-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-2.1.26-14.10.1 * libsasl2-3-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-2.1.26-14.10.1 * cyrus-sasl-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-2.1.26-14.10.1 * cyrus-sasl-digestmd5-2.1.26-14.10.1 * cyrus-sasl-devel-2.1.26-14.10.1 * cyrus-sasl-crammd5-2.1.26-14.10.1 * cyrus-sasl-digestmd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-plain-2.1.26-14.10.1 * libsasl2-3-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debugsource-2.1.26-14.10.1 * cyrus-sasl-debugsource-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-2.1.26-14.10.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * cyrus-sasl-crammd5-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-32bit-2.1.26-14.10.1 * cyrus-sasl-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-32bit-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-32bit-2.1.26-14.10.1 * libsasl2-3-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-32bit-2.1.26-14.10.1 * libsasl2-3-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-otp-32bit-2.1.26-14.10.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cyrus-sasl-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-2.1.26-14.10.1 * cyrus-sasl-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-2.1.26-14.10.1 * cyrus-sasl-otp-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-32bit-2.1.26-14.10.1 * libsasl2-3-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-digestmd5-2.1.26-14.10.1 * cyrus-sasl-devel-2.1.26-14.10.1 * cyrus-sasl-plain-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-2.1.26-14.10.1 * cyrus-sasl-digestmd5-debuginfo-2.1.26-14.10.1 * libsasl2-3-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-debuginfo-32bit-2.1.26-14.10.1 * libsasl2-3-2.1.26-14.10.1 * cyrus-sasl-otp-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debugsource-2.1.26-14.10.1 * cyrus-sasl-debugsource-2.1.26-14.10.1 * libsasl2-3-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-2.1.26-14.10.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:54 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:33:54 -0000 Subject: SUSE-RU-2026:4792-1: moderate: Recommended update for crypto-policies Message-ID: <179258603406.14165.13098498166395037335@c0911b1ee8c1> # Recommended update for crypto-policies Announcement ID: SUSE-RU-2026:4792-1 Release Date: 2026-10-21T07:08:59Z Rating: moderate References: * bsc#1259515 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for crypto-policies fixes the following issues: * Disable umac-128* in DEFAULT, FUTURE and BSI openssh policies (bsc#1259515) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4792 ## Package List: * Basesystem Module 15-SP7 (noarch) * crypto-policies-20250714.cd6043a-150700.6.7.1 * crypto-policies-scripts-20250714.cd6043a-150700.6.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1259515 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:34:02 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 12:34:02 -0000 Subject: SUSE-SU-2026:4787-1: important: Security update for containerd Message-ID: <179258604204.14165.14591840733993648470@c0911b1ee8c1> # Security update for containerd Announcement ID: SUSE-SU-2026:4787-1 Release Date: 2026-10-21T04:29:25Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-53488 CVSS scores: * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4787 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4787 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4787 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4787 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4787 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4787 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4787 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4787 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4787 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4787 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4787 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4787 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4787 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4787 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4787 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4787 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4787 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:21 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:21 -0000 Subject: SUSE-SU-2026:4812-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6) Message-ID: <179260022111.2368.15395037478673561145@6232765b24e4> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4812-1 Release Date: 2026-10-21T09:34:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4812 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4813 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4812 SUSE-2026-4813 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-11-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-11-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:27 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:27 -0000 Subject: SUSE-SU-2026:4829-1: moderate: Security update for libraw Message-ID: <179260022716.2368.16948586518747757572@6232765b24e4> # Security update for libraw Announcement ID: SUSE-SU-2026:4829-1 Release Date: 2026-10-21T11:59:15Z Rating: moderate References: * bsc#1282783 Cross-References: * CVE-2026-88387 CVSS scores: * CVE-2026-88387 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88387 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88387 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libraw fixes the following issue: * CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc#1282783). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4829 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4829 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4829 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4829 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libraw-tools-0.21.1-150600.3.13.1 * libraw23-0.21.1-150600.3.13.1 * libraw-devel-static-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * libraw-devel-0.21.1-150600.3.13.1 * libraw23-debuginfo-0.21.1-150600.3.13.1 * libraw-tools-debuginfo-0.21.1-150600.3.13.1 * openSUSE Leap 15.6 (x86_64) * libraw23-32bit-debuginfo-0.21.1-150600.3.13.1 * libraw23-32bit-0.21.1-150600.3.13.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libraw23-64bit-debuginfo-0.21.1-150600.3.13.1 * libraw23-64bit-0.21.1-150600.3.13.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libraw23-0.21.1-150600.3.13.1 * libraw23-debuginfo-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libraw-devel-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * libraw-tools-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * libraw-devel-0.21.1-150600.3.13.1 * libraw-devel-static-0.21.1-150600.3.13.1 * libraw-tools-debuginfo-0.21.1-150600.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88387.html * https://bugzilla.suse.com/show_bug.cgi?id=1282783 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:33 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4828-1: moderate: Security update for openexr Message-ID: <179260023325.2368.1178960789767923639@6232765b24e4> # Security update for openexr Announcement ID: SUSE-SU-2026:4828-1 Release Date: 2026-10-21T11:58:42Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4828 ## Package List: * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openexr-debugsource-2.2.1-150000.3.58.1 * libIlmImf-2_2-23-debuginfo-2.2.1-150000.3.58.1 * openexr-debuginfo-2.2.1-150000.3.58.1 * libIlmImfUtil-2_2-23-debuginfo-2.2.1-150000.3.58.1 * openexr-devel-2.2.1-150000.3.58.1 * libIlmImf-2_2-23-2.2.1-150000.3.58.1 * libIlmImfUtil-2_2-23-2.2.1-150000.3.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:45 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:45 -0000 Subject: SUSE-SU-2026:4827-1: moderate: Security update for openssh Message-ID: <179260024518.2368.16871134508008891885@6232765b24e4> # Security update for openssh Announcement ID: SUSE-SU-2026:4827-1 Release Date: 2026-10-21T11:57:42Z Rating: moderate References: * bsc#1259462 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). Changes for openssh: \- Included mentions of the configuration drop-in directories (bsc#1259462). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4827 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4827 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4827 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4827 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4827 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-9.6p1-150600.6.52.2 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-cavs-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-cavs-9.6p1-150600.6.52.2 * openssh-9.6p1-150600.6.52.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-9.6p1-150600.6.52.2 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-9.6p1-150600.6.52.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:51 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:51 -0000 Subject: SUSE-RU-2026:4826-1: important: Recommended update for kdump Message-ID: <179260025138.2368.14440599030893224767@6232765b24e4> # Recommended update for kdump Announcement ID: SUSE-RU-2026:4826-1 Release Date: 2026-10-21T11:56:51Z Rating: important References: * bsc#1255300 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for kdump fixes the following issues: * Fix: Removal of kdumptool's save_dump command in SLES 15 SP6 breaks customer setup (bsc#1255300): * Fix VLAN interface naming * Fix bonding options for VLAN slaves ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4826 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4826 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4826 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * kdump-debugsource-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-debuginfo-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-2.0.6+git28.g9e9a829-150600.3.17.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-debuginfo-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-2.0.6+git28.g9e9a829-150600.3.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-debuginfo-2.0.6+git28.g9e9a829-150600.3.17.1 * kdump-2.0.6+git28.g9e9a829-150600.3.17.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1255300 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:57 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:30:57 -0000 Subject: SUSE-RU-2026:4825-1: important: Recommended update for kdump Message-ID: <179260025708.2368.2785035196812624271@6232765b24e4> # Recommended update for kdump Announcement ID: SUSE-RU-2026:4825-1 Release Date: 2026-10-21T11:56:27Z Rating: important References: * bsc#1255300 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for kdump fixes the following issues: * Fix: Removal of kdumptool's save_dump command in SLES 15 SP6 breaks customer setup (bsc#1255300): * Fix VLAN interface naming * Fix bonding options for VLAN slaves ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4825 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kdump-debugsource-2.0.18+git5.g76c4b92-150700.3.6.1 * kdump-debuginfo-2.0.18+git5.g76c4b92-150700.3.6.1 * kdump-2.0.18+git5.g76c4b92-150700.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1255300 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:01 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:01 -0000 Subject: SUSE-SU-2026:4824-1: important: Security update for rootlesskit Message-ID: <179260026149.2368.17701844817681626925@6232765b24e4> # Security update for rootlesskit Announcement ID: SUSE-SU-2026:4824-1 Release Date: 2026-10-21T11:20:01Z Rating: important References: Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for rootlesskit rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4824 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4824 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4824 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4824 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4824 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4824 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4824 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4824 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:05 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:05 -0000 Subject: SUSE-SU-2026:4823-1: important: Security update for rootlesskit Message-ID: <179260026599.2368.15210788195352084554@6232765b24e4> # Security update for rootlesskit Announcement ID: SUSE-SU-2026:4823-1 Release Date: 2026-10-21T11:18:33Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rootlesskit rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4823 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4823 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4823 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4823 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:11 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:11 -0000 Subject: SUSE-SU-2026:4822-1: important: Security update for docker Message-ID: <179260027177.2368.1409748789465202188@6232765b24e4> # Security update for docker Announcement ID: SUSE-SU-2026:4822-1 Release Date: 2026-10-21T11:17:43Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for docker rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4822 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4822 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4822 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4822 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4822 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4822 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4822 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4822 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4822 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4822 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4822 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4822 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4822 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4822 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4822 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4822 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4822 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * Containers Module 15-SP7 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:19 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:19 -0000 Subject: SUSE-SU-2026:4821-1: important: Security update for ca-certificates-mozilla Message-ID: <179260027945.2368.1275439067395633913@6232765b24e4> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:4821-1 Release Date: 2026-10-21T10:58:31Z Rating: important References: * bsc#1279961 * bsc#1286261 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has two security fixes can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 Updated to 2.90 state (bsc#1279961) Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4821 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4821 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * ca-certificates-mozilla-2.92-12.62.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * ca-certificates-mozilla-2.92-12.62.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:26 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:26 -0000 Subject: SUSE-SU-2026:4820-1: important: Security update for openssl-certs Message-ID: <179260028656.2368.11434182442089729647@6232765b24e4> # Security update for openssl-certs Announcement ID: SUSE-SU-2026:4820-1 Release Date: 2026-10-21T10:39:12Z Rating: important References: * bsc#1286261 Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that has one security fix can now be installed. ## Description: This update for openssl-certs fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4820 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4820 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch) * openssl-certs-2.92-0.7.39.1 * SUSE Linux Enterprise Server 11 SP4 (noarch) * openssl-certs-2.92-0.7.39.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:32 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:32 -0000 Subject: SUSE-SU-2026:4819-1: important: Security update for cifs-utils Message-ID: <179260029246.2368.13484043481607270366@6232765b24e4> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:4819-1 Release Date: 2026-10-21T10:16:29Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4819 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4819 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4819 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4819 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4819 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4819 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4819 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4819 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4819 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4819 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4819 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4819 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4819 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4819 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4819 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4819 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4819 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * pam_cifscreds-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * pam_cifscreds-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-devel-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:39 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:39 -0000 Subject: SUSE-SU-2026:4818-1: important: Security update for mutt Message-ID: <179260029959.2368.14378332649734696315@6232765b24e4> # Security update for mutt Announcement ID: SUSE-SU-2026:4818-1 Release Date: 2026-10-21T10:13:48Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4818 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4818 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4818 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4818 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4818 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4818 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4818 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4818 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:45 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:45 -0000 Subject: SUSE-SU-2026:4817-1: important: Security update for cyrus-sasl Message-ID: <179260030561.2368.12536098129027677161@6232765b24e4> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4817-1 Release Date: 2026-10-21T10:12:40Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4817 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4817 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4817 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4817 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4817 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4817 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (x86_64) * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-devel-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libsasl2-3-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-64bit-2.1.28-150500.3.12.1 * libsasl2-3-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-devel-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:57 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:31:57 -0000 Subject: SUSE-SU-2026:4816-1: moderate: Security update for poppler Message-ID: <179260031728.2368.5566689417045059740@6232765b24e4> # Security update for poppler Announcement ID: SUSE-SU-2026:4816-1 Release Date: 2026-10-21T10:11:32Z Rating: moderate References: * bsc#1282531 * bsc#1282532 * bsc#1283330 * bsc#1283331 * bsc#1284844 Cross-References: * CVE-2026-102620 * CVE-2026-102621 * CVE-2026-107705 * CVE-2026-93313 * CVE-2026-93314 CVSS scores: * CVE-2026-102620 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-102620 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-102620 ( NVD ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102620 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-102621 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-102621 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-102621 ( NVD ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102621 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-107705 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107705 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93313 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93313 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93313 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-93314 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93314 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93314 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 An update that solves five vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532). * CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531). * CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330). * CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331). * CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4816 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * poppler-tools-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-22.01.0-150400.3.51.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.51.1 * poppler-debugsource-22.01.0-150400.3.51.1 * poppler-tools-22.01.0-150400.3.51.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt6-3-22.01.0-150400.3.51.1 * libpoppler-glib-devel-22.01.0-150400.3.51.1 * libpoppler-glib8-22.01.0-150400.3.51.1 * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.51.1 * poppler-qt6-debugsource-22.01.0-150400.3.51.1 * libpoppler-devel-22.01.0-150400.3.51.1 * libpoppler-qt5-devel-22.01.0-150400.3.51.1 * libpoppler-glib8-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt6-devel-22.01.0-150400.3.51.1 * libpoppler-cpp0-22.01.0-150400.3.51.1 * libpoppler-qt6-3-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-22.01.0-150400.3.51.1 * poppler-qt5-debugsource-22.01.0-150400.3.51.1 * openSUSE Leap 15.4 (x86_64) * libpoppler-glib8-32bit-22.01.0-150400.3.51.1 * libpoppler-qt5-1-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-cpp0-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-32bit-22.01.0-150400.3.51.1 * libpoppler117-32bit-22.01.0-150400.3.51.1 * libpoppler-cpp0-32bit-22.01.0-150400.3.51.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.51.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpoppler-cpp0-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-cpp0-64bit-22.01.0-150400.3.51.1 * libpoppler-glib8-64bit-22.01.0-150400.3.51.1 * libpoppler-qt5-1-64bit-22.01.0-150400.3.51.1 * libpoppler117-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-glib8-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-64bit-22.01.0-150400.3.51.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102620.html * https://www.suse.com/security/cve/CVE-2026-102621.html * https://www.suse.com/security/cve/CVE-2026-107705.html * https://www.suse.com/security/cve/CVE-2026-93313.html * https://www.suse.com/security/cve/CVE-2026-93314.html * https://bugzilla.suse.com/show_bug.cgi?id=1282531 * https://bugzilla.suse.com/show_bug.cgi?id=1282532 * https://bugzilla.suse.com/show_bug.cgi?id=1283330 * https://bugzilla.suse.com/show_bug.cgi?id=1283331 * https://bugzilla.suse.com/show_bug.cgi?id=1284844 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:04 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:32:04 -0000 Subject: SUSE-SU-2026:4815-1: moderate: Security update for libheif Message-ID: <179260032488.2368.14608742135705949639@6232765b24e4> # Security update for libheif Announcement ID: SUSE-SU-2026:4815-1 Release Date: 2026-10-21T10:11:10Z Rating: moderate References: * bsc#1279444 * bsc#1281829 Cross-References: * CVE-2026-84449 CVSS scores: * CVE-2026-84449 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84449 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84449 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for libheif fixes the following issues: * CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). * Out-of-bounds read and write in derived-item and pixel-plane handling (bsc#1279444). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4815 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gdk-pixbuf-loader-libheif-debuginfo-1.12.0-150400.3.30.1 * gdk-pixbuf-loader-libheif-1.12.0-150400.3.30.1 * libheif1-1.12.0-150400.3.30.1 * libheif-debugsource-1.12.0-150400.3.30.1 * libheif-devel-1.12.0-150400.3.30.1 * libheif1-debuginfo-1.12.0-150400.3.30.1 * openSUSE Leap 15.4 (x86_64) * libheif1-32bit-1.12.0-150400.3.30.1 * libheif1-32bit-debuginfo-1.12.0-150400.3.30.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libheif1-64bit-1.12.0-150400.3.30.1 * libheif1-64bit-debuginfo-1.12.0-150400.3.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84449.html * https://bugzilla.suse.com/show_bug.cgi?id=1279444 * https://bugzilla.suse.com/show_bug.cgi?id=1281829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:11 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:32:11 -0000 Subject: SUSE-SU-2026:4814-1: moderate: Security update for libpng16 Message-ID: <179260033108.2368.10389968365021777721@6232765b24e4> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4814-1 Release Date: 2026-10-21T10:10:51Z Rating: moderate References: * bsc#1283183 * jsc#PED-16190 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for libpng16 fixes the following issues: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59 (jsc#PED-16190): * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4814 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4814 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4814 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4814 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4814 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 * https://jira.suse.com/browse/PED-16190 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:19 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 16:32:19 -0000 Subject: SUSE-SU-2026:4811-1: moderate: Security update for openssh Message-ID: <179260033969.2368.14176375830600546232@6232765b24e4> # Security update for openssh Announcement ID: SUSE-SU-2026:4811-1 Release Date: 2026-10-21T08:46:52Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4811 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4811 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4811 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4811 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4811 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4811 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4811 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4811 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4811 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4811 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4811 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4811 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-cavs-debuginfo-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-cavs-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:16 -0000 Subject: SUSE-SU-2026:4831-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6) Message-ID: <179261461625.291.70485142262034746@9bf698548bc1> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4831-1 Release Date: 2026-10-21T15:34:28Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4841 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4831 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4840 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4830 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4831 SUSE-2026-4840 SUSE-2026-4830 SUSE-2026-4841 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-13-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-13-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:22 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:22 -0000 Subject: SUSE-SU-2026:4845-1: moderate: Security update for tiff Message-ID: <179261462220.291.18118379931534209238@9bf698548bc1> # Security update for tiff Announcement ID: SUSE-SU-2026:4845-1 Release Date: 2026-10-21T15:55:25Z Rating: moderate References: * bsc#1280164 Cross-References: * CVE-2026-18495 CVSS scores: * CVE-2026-18495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-18495 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2026-18495 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for tiff fixes the following issue: * CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough (bsc#1280164). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4845 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4845 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4845 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4845 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4845 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4845 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * Basesystem Module 15-SP7 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.72.1 * libtiff5-32bit-4.0.9-150000.45.72.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18495.html * https://bugzilla.suse.com/show_bug.cgi?id=1280164 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:28 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:28 -0000 Subject: SUSE-SU-2026:4844-1: important: Security update for php8 Message-ID: <179261462873.291.4746927423824609097@9bf698548bc1> # Security update for php8 Announcement ID: SUSE-SU-2026:4844-1 Release Date: 2026-10-21T15:45:09Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: Update to php 8.3.36: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4844 ## Package List: * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php8-debugsource-8.3.36-150700.3.24.1 * php8-exif-debuginfo-8.3.36-150700.3.24.1 * php8-ctype-8.3.36-150700.3.24.1 * php8-dba-8.3.36-150700.3.24.1 * php8-soap-8.3.36-150700.3.24.1 * php8-intl-debuginfo-8.3.36-150700.3.24.1 * php8-sysvshm-debuginfo-8.3.36-150700.3.24.1 * php8-sqlite-debuginfo-8.3.36-150700.3.24.1 * php8-mysql-8.3.36-150700.3.24.1 * php8-tidy-debuginfo-8.3.36-150700.3.24.1 * php8-embed-debuginfo-8.3.36-150700.3.24.1 * php8-enchant-8.3.36-150700.3.24.1 * php8-bcmath-8.3.36-150700.3.24.1 * php8-bcmath-debuginfo-8.3.36-150700.3.24.1 * php8-intl-8.3.36-150700.3.24.1 * php8-embed-debugsource-8.3.36-150700.3.24.1 * php8-iconv-debuginfo-8.3.36-150700.3.24.1 * php8-sysvshm-8.3.36-150700.3.24.1 * php8-xsl-8.3.36-150700.3.24.1 * php8-sysvsem-debuginfo-8.3.36-150700.3.24.1 * php8-shmop-8.3.36-150700.3.24.1 * php8-dom-debuginfo-8.3.36-150700.3.24.1 * php8-zip-debuginfo-8.3.36-150700.3.24.1 * php8-xmlreader-8.3.36-150700.3.24.1 * php8-sockets-8.3.36-150700.3.24.1 * php8-tidy-8.3.36-150700.3.24.1 * php8-exif-8.3.36-150700.3.24.1 * php8-sodium-8.3.36-150700.3.24.1 * php8-calendar-debuginfo-8.3.36-150700.3.24.1 * php8-zlib-8.3.36-150700.3.24.1 * php8-sysvsem-8.3.36-150700.3.24.1 * php8-xmlwriter-debuginfo-8.3.36-150700.3.24.1 * php8-fpm-8.3.36-150700.3.24.1 * php8-cli-debuginfo-8.3.36-150700.3.24.1 * php8-sodium-debuginfo-8.3.36-150700.3.24.1 * php8-iconv-8.3.36-150700.3.24.1 * php8-sysvmsg-8.3.36-150700.3.24.1 * php8-opcache-debuginfo-8.3.36-150700.3.24.1 * php8-ftp-debuginfo-8.3.36-150700.3.24.1 * php8-fpm-debugsource-8.3.36-150700.3.24.1 * php8-readline-debuginfo-8.3.36-150700.3.24.1 * php8-bz2-8.3.36-150700.3.24.1 * php8-gd-debuginfo-8.3.36-150700.3.24.1 * php8-fileinfo-debuginfo-8.3.36-150700.3.24.1 * php8-pgsql-8.3.36-150700.3.24.1 * php8-posix-8.3.36-150700.3.24.1 * php8-soap-debuginfo-8.3.36-150700.3.24.1 * php8-sockets-debuginfo-8.3.36-150700.3.24.1 * php8-ctype-debuginfo-8.3.36-150700.3.24.1 * php8-fastcgi-8.3.36-150700.3.24.1 * php8-mbstring-debuginfo-8.3.36-150700.3.24.1 * php8-zip-8.3.36-150700.3.24.1 * php8-gmp-8.3.36-150700.3.24.1 * php8-odbc-8.3.36-150700.3.24.1 * php8-snmp-8.3.36-150700.3.24.1 * php8-zlib-debuginfo-8.3.36-150700.3.24.1 * php8-calendar-8.3.36-150700.3.24.1 * php8-phar-debuginfo-8.3.36-150700.3.24.1 * php8-bz2-debuginfo-8.3.36-150700.3.24.1 * php8-pdo-debuginfo-8.3.36-150700.3.24.1 * php8-cli-8.3.36-150700.3.24.1 * php8-dba-debuginfo-8.3.36-150700.3.24.1 * apache2-mod_php8-debuginfo-8.3.36-150700.3.24.1 * php8-gmp-debuginfo-8.3.36-150700.3.24.1 * php8-pdo-8.3.36-150700.3.24.1 * php8-readline-8.3.36-150700.3.24.1 * php8-devel-8.3.36-150700.3.24.1 * php8-tokenizer-8.3.36-150700.3.24.1 * php8-curl-8.3.36-150700.3.24.1 * php8-gettext-8.3.36-150700.3.24.1 * php8-ldap-debuginfo-8.3.36-150700.3.24.1 * php8-tokenizer-debuginfo-8.3.36-150700.3.24.1 * php8-snmp-debuginfo-8.3.36-150700.3.24.1 * php8-xsl-debuginfo-8.3.36-150700.3.24.1 * php8-sqlite-8.3.36-150700.3.24.1 * php8-fpm-debuginfo-8.3.36-150700.3.24.1 * php8-pgsql-debuginfo-8.3.36-150700.3.24.1 * php8-openssl-8.3.36-150700.3.24.1 * php8-xmlwriter-8.3.36-150700.3.24.1 * php8-enchant-debuginfo-8.3.36-150700.3.24.1 * php8-gd-8.3.36-150700.3.24.1 * php8-test-8.3.36-150700.3.24.1 * php8-shmop-debuginfo-8.3.36-150700.3.24.1 * php8-odbc-debuginfo-8.3.36-150700.3.24.1 * php8-ldap-8.3.36-150700.3.24.1 * php8-opcache-8.3.36-150700.3.24.1 * apache2-mod_php8-8.3.36-150700.3.24.1 * php8-mbstring-8.3.36-150700.3.24.1 * php8-dom-8.3.36-150700.3.24.1 * php8-8.3.36-150700.3.24.1 * php8-pcntl-debuginfo-8.3.36-150700.3.24.1 * php8-curl-debuginfo-8.3.36-150700.3.24.1 * php8-sysvmsg-debuginfo-8.3.36-150700.3.24.1 * php8-debuginfo-8.3.36-150700.3.24.1 * php8-xmlreader-debuginfo-8.3.36-150700.3.24.1 * php8-openssl-debuginfo-8.3.36-150700.3.24.1 * php8-posix-debuginfo-8.3.36-150700.3.24.1 * php8-gettext-debuginfo-8.3.36-150700.3.24.1 * apache2-mod_php8-debugsource-8.3.36-150700.3.24.1 * php8-fileinfo-8.3.36-150700.3.24.1 * php8-mysql-debuginfo-8.3.36-150700.3.24.1 * php8-fastcgi-debuginfo-8.3.36-150700.3.24.1 * php8-embed-8.3.36-150700.3.24.1 * php8-pcntl-8.3.36-150700.3.24.1 * php8-ftp-8.3.36-150700.3.24.1 * php8-fastcgi-debugsource-8.3.36-150700.3.24.1 * php8-phar-8.3.36-150700.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:37 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:37 -0000 Subject: SUSE-SU-2026:4843-1: important: Security update for php8 Message-ID: <179261463738.291.2136201410656532363@9bf698548bc1> # Security update for php8 Announcement ID: SUSE-SU-2026:4843-1 Release Date: 2026-10-21T15:44:41Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4843 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4843 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4843 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ffi-debuginfo-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-ffi-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.35-150600.3.39.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:42 -0000 Subject: SUSE-RU-2026:4842-1: moderate: Recommended update for glade Message-ID: <179261464257.291.17672183726636273662@9bf698548bc1> # Recommended update for glade Announcement ID: SUSE-RU-2026:4842-1 Release Date: 2026-10-21T15:43:57Z Rating: moderate References: * jsc#PED-16856 Affected Products: * Development Tools Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that contains one feature can now be installed. ## Description: This update for glade, gnome-documents, mm-common, babl, gegl, meson fixes the following issues: * Update meson to 0.63.3 * Fix glade, gnome-documents, mm-comon, babl and gegl to build with meson 0.61.0 and newer. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4842 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4842 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4842 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4842 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4842 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4842 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4842 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4842 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4842 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4842 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4842 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4842 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4842 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4842 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4842 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4842 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4842 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glade-lang-3.38.2-150400.4.5.2 * meson-0.63.3-150400.3.3.1 * gnome-desktop-lang-41.8-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glade-lang-3.38.2-150400.4.5.2 * meson-0.63.3-150400.3.3.1 * gnome-desktop-lang-41.8-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glade-lang-3.38.2-150400.4.5.2 * meson-0.63.3-150400.3.3.1 * gnome-desktop-lang-41.8-150400.3.7.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gegl-0_4-0.4.34-150400.3.8.1 * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * gegl-doc-0.4.34-150400.3.8.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * meson-test-0.63.3-150400.3.3.1 * libbabl-0_1-0-debuginfo-0.1.88-150400.3.3.2 * glade-debuginfo-3.38.2-150400.4.5.2 * gnome-shell-search-provider-documents-3.34.0+37-150400.3.3.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * libgegl-0_4-0-debuginfo-0.4.34-150400.3.8.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * gnome-documents-debuginfo-3.34.0+37-150400.3.3.2 * gnome-documents-debugsource-3.34.0+37-150400.3.3.2 * libgladeui-2-devel-3.38.2-150400.4.5.2 * gnome-documents-3.34.0+37-150400.3.3.2 * libxkbcommon-tools-1.3.0-150400.3.7.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * gegl-0_4-debuginfo-0.4.34-150400.3.8.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * gegl-debuginfo-0.4.34-150400.3.8.1 * gegl-0.4.34-150400.3.8.1 * babl-devel-0.1.88-150400.3.3.2 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * babl-debugsource-0.1.88-150400.3.3.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libbabl-0_1-0-0.1.88-150400.3.3.2 * typelib-1_0-Babl-0_1-0.1.88-150400.3.3.2 * libxkbregistry-devel-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libgegl-0_4-0-0.4.34-150400.3.8.1 * libxkbcommon-tools-debuginfo-1.3.0-150400.3.7.1 * typelib-1_0-Gegl-0_4-0.4.34-150400.3.8.1 * gegl-devel-0.4.34-150400.3.8.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * gegl-debugsource-0.4.34-150400.3.8.1 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * openSUSE Leap 15.4 (noarch) * glade-lang-3.38.2-150400.4.5.2 * gnome-desktop-lang-41.8-150400.3.7.1 * gegl-0_4-lang-0.4.34-150400.3.8.1 * gnome-documents-lang-3.34.0+37-150400.3.3.2 * mm-common-1.0.2-150400.3.3.1 * meson-vim-0.63.3-150400.3.3.1 * mm-common-docs-1.0.2-150400.3.3.1 * meson-0.63.3-150400.3.3.1 * openSUSE Leap 15.4 (x86_64) * libxkbcommon-x11-devel-32bit-1.3.0-150400.3.7.1 * libgegl-0_4-0-32bit-debuginfo-0.4.34-150400.3.8.1 * libbabl-0_1-0-32bit-0.1.88-150400.3.3.2 * libxkbcommon-devel-32bit-1.3.0-150400.3.7.1 * libgegl-0_4-0-32bit-0.4.34-150400.3.8.1 * libxkbregistry0-32bit-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon0-32bit-1.3.0-150400.3.7.1 * libxkbregistry-devel-32bit-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-32bit-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-32bit-1.3.0-150400.3.7.1 * libxkbregistry0-32bit-1.3.0-150400.3.7.1 * libxkbcommon0-32bit-debuginfo-1.3.0-150400.3.7.1 * libbabl-0_1-0-32bit-debuginfo-0.1.88-150400.3.3.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libxkbcommon-devel-64bit-1.3.0-150400.3.7.1 * libxkbregistry0-64bit-1.3.0-150400.3.7.1 * libbabl-0_1-0-64bit-debuginfo-0.1.88-150400.3.3.2 * libxkbregistry0-64bit-debuginfo-1.3.0-150400.3.7.1 * libgegl-0_4-0-64bit-0.4.34-150400.3.8.1 * libxkbcommon0-64bit-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-64bit-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-64bit-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-64bit-1.3.0-150400.3.7.1 * libxkbcommon0-64bit-1.3.0-150400.3.7.1 * libxkbregistry-devel-64bit-1.3.0-150400.3.7.1 * libbabl-0_1-0-64bit-0.1.88-150400.3.3.2 * libgegl-0_4-0-64bit-debuginfo-0.4.34-150400.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * glade-lang-3.38.2-150400.4.5.2 * gnome-desktop-lang-41.8-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * glade-lang-3.38.2-150400.4.5.2 * gnome-desktop-lang-41.8-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * glade-lang-3.38.2-150400.4.5.2 * gnome-desktop-lang-41.8-150400.3.7.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * libxkbcommon0-1.3.0-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * glade-lang-3.38.2-150400.4.5.2 * meson-0.63.3-150400.3.3.1 * gnome-desktop-lang-41.8-150400.3.7.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ninja-debuginfo-1.10.0-150200.3.2.1 * ninja-1.10.0-150200.3.2.1 * ninja-debugsource-1.10.0-150200.3.2.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * babl-devel-0.1.88-150400.3.3.2 * libgnome-desktop-3-19-41.8-150400.3.7.1 * babl-debugsource-0.1.88-150400.3.3.2 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * gnome-documents-debuginfo-3.34.0+37-150400.3.3.2 * gnome-documents-debugsource-3.34.0+37-150400.3.3.2 * libbabl-0_1-0-0.1.88-150400.3.3.2 * typelib-1_0-Babl-0_1-0.1.88-150400.3.3.2 * gnome-documents-3.34.0+37-150400.3.3.2 * libbabl-0_1-0-debuginfo-0.1.88-150400.3.3.2 * gnome-shell-search-provider-documents-3.34.0+37-150400.3.3.2 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * gnome-desktop-debugsource-41.8-150400.3.7.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gnome-documents-lang-3.34.0+37-150400.3.3.2 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * babl-devel-0.1.88-150400.3.3.2 * babl-debugsource-0.1.88-150400.3.3.2 * gnome-documents-debugsource-3.34.0+37-150400.3.3.2 * gnome-documents-debuginfo-3.34.0+37-150400.3.3.2 * libbabl-0_1-0-0.1.88-150400.3.3.2 * typelib-1_0-Babl-0_1-0.1.88-150400.3.3.2 * gnome-documents-3.34.0+37-150400.3.3.2 * libbabl-0_1-0-debuginfo-0.1.88-150400.3.3.2 * gnome-shell-search-provider-documents-3.34.0+37-150400.3.3.2 * SUSE Package Hub 15 15-SP7 (noarch) * gnome-documents-lang-3.34.0+37-150400.3.3.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libgnome-desktop-3-19-41.8-150400.3.7.1 * libgnome-desktop-3_0-common-debuginfo-41.8-150400.3.7.1 * libxkbcommon-x11-0-1.3.0-150400.3.7.1 * libxkbcommon-x11-devel-1.3.0-150400.3.7.1 * libxkbcommon-x11-0-debuginfo-1.3.0-150400.3.7.1 * libxkbcommon-debugsource-1.3.0-150400.3.7.1 * glade-debuginfo-3.38.2-150400.4.5.2 * typelib-1_0-GnomeDesktop-3_0-41.8-150400.3.7.1 * ninja-debuginfo-1.10.0-150200.3.2.1 * gjs-debugsource-1.70.2-150400.3.7.1 * libxkbcommon-devel-1.3.0-150400.3.7.1 * typelib-1_0-GjsPrivate-1_0-1.70.2-150400.3.7.1 * gjs-debuginfo-1.70.2-150400.3.7.1 * gnome-desktop-debuginfo-41.8-150400.3.7.1 * libgladeui-2-devel-3.38.2-150400.4.5.2 * ninja-debugsource-1.10.0-150200.3.2.1 * gnome-version-41.8-150400.3.7.1 * libxkbcommon0-debuginfo-1.3.0-150400.3.7.1 * libgnome-desktop-3_0-common-41.8-150400.3.7.1 * libgjs0-debuginfo-1.70.2-150400.3.7.1 * glade-3.38.2-150400.4.5.2 * typelib-1_0-Gladeui-2_0-3.38.2-150400.4.5.2 * libxkbregistry0-debuginfo-1.3.0-150400.3.7.1 * libxkbregistry-devel-1.3.0-150400.3.7.1 * ninja-1.10.0-150200.3.2.1 * libxkbcommon0-1.3.0-150400.3.7.1 * gjs-1.70.2-150400.3.7.1 * libgjs-devel-1.70.2-150400.3.7.1 * libgnome-desktop-3-19-debuginfo-41.8-150400.3.7.1 * libxkbregistry0-1.3.0-150400.3.7.1 * libgnome-desktop-3-devel-41.8-150400.3.7.1 * glade-docs-3.38.2-150400.4.5.2 * glade-debugsource-3.38.2-150400.4.5.2 * libgladeui-2-13-3.38.2-150400.4.5.2 * libgladeui-2-13-debuginfo-3.38.2-150400.4.5.2 * gnome-desktop-debugsource-41.8-150400.3.7.1 * libgjs0-1.70.2-150400.3.7.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * glade-lang-3.38.2-150400.4.5.2 * gnome-desktop-lang-41.8-150400.3.7.1 ## References: * https://jira.suse.com/browse/PED-16856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:50 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:50 -0000 Subject: SUSE-RU-2026:4839-1: important: Recommended update for python-azure-mgmt-recoveryservicesbackup Message-ID: <179261465011.291.8183550826155193000@9bf698548bc1> # Recommended update for python-azure-mgmt-recoveryservicesbackup Announcement ID: SUSE-RU-2026:4839-1 Release Date: 2026-10-21T14:37:31Z Rating: important References: * bsc#1274062 Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that has one fix can now be installed. ## Description: This update for python-azure-mgmt-recoveryservicesbackup contains the following fixes: * Downgrade to previous upstream release (bsc#1274062) * Version 9.2.0 * Required to unbreak Azure CLI packages * For detailed information about changes see the CHANGELOG.md file provided with this package * Override upstream version with 10.1.0.really.9.2.0 * Update Requires from setup.py ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4839 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4839 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4839 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4839 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4839 ## Package List: * Public Cloud Module 15-SP4 (noarch) * python311-azure-mgmt-recoveryservicesbackup-10.1.0.really.9.2.0-150400.15.14.1 * openSUSE Leap 15.4 (noarch) * python311-azure-mgmt-recoveryservicesbackup-10.1.0.really.9.2.0-150400.15.14.1 * Public Cloud Module 15-SP5 (noarch) * python311-azure-mgmt-recoveryservicesbackup-10.1.0.really.9.2.0-150400.15.14.1 * Public Cloud Module 15-SP6 (noarch) * python311-azure-mgmt-recoveryservicesbackup-10.1.0.really.9.2.0-150400.15.14.1 * Public Cloud Module 15-SP7 (noarch) * python311-azure-mgmt-recoveryservicesbackup-10.1.0.really.9.2.0-150400.15.14.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1274062 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:54 -0000 Subject: SUSE-RU-2026:4838-1: moderate: Recommended update for tiertune Message-ID: <179261465452.291.12483569156199121638@9bf698548bc1> # Recommended update for tiertune Announcement ID: SUSE-RU-2026:4838-1 Release Date: 2026-10-21T14:19:02Z Rating: moderate References: Affected Products: * openSUSE Leap 15.6 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for tiertune fixes the following issues: * Update to version 0.1.4: * Group and sort the sysctl settings: * Disable the nmi wtachdog * Set the kernel watchdog threshold only once ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4838 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4838 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4838 ## Package List: * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * tiertune-aws-0.1.4-150600.13.12.1 * python311-tiertune-0.1.4-150600.13.12.1 * tiertune-azure-0.1.4-150600.13.12.1 * tiertune-gce-0.1.4-150600.13.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * tiertune-aws-0.1.4-150600.13.12.1 * python311-tiertune-0.1.4-150600.13.12.1 * tiertune-azure-0.1.4-150600.13.12.1 * tiertune-gce-0.1.4-150600.13.12.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * tiertune-aws-0.1.4-150600.13.12.1 * python311-tiertune-0.1.4-150600.13.12.1 * tiertune-azure-0.1.4-150600.13.12.1 * tiertune-gce-0.1.4-150600.13.12.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:59 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:30:59 -0000 Subject: SUSE-SU-2026:4837-1: important: Security update for buildah Message-ID: <179261465933.291.5345494879613729708@9bf698548bc1> # Security update for buildah Announcement ID: SUSE-SU-2026:4837-1 Release Date: 2026-10-21T14:15:40Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for buildah rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4837 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4837 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4837 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4837 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4837 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4837 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4837 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4837 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.68.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * buildah-1.35.5-150500.3.68.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:05 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:31:05 -0000 Subject: SUSE-SU-2026:4836-1: important: Security update for cyrus-sasl Message-ID: <179261466582.291.5611732259333114977@9bf698548bc1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4836-1 Release Date: 2026-10-21T12:52:41Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Legacy Module 15-SP7 * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4836 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4836 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4836 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4836 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4836 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4836 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-scram-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gs2-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-devel-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-32bit-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (aarch64_ilp32) * cyrus-sasl-digestmd5-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-devel-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-64bit-2.1.28-150600.7.17.1 * libsasl2-3-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.28-150600.7.17.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * Basesystem Module 15-SP7 (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:32 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:31:32 -0000 Subject: SUSE-SU-2026:4835-1: important: Security update for xwayland Message-ID: <179261469218.291.7134005923760211779@9bf698548bc1> # Security update for xwayland Announcement ID: SUSE-SU-2026:4835-1 Release Date: 2026-10-21T12:51:34Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281240 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93522 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93522 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93522 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4835 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * xwayland-24.1.5-150700.3.25.1 * xwayland-debugsource-24.1.5-150700.3.25.1 * xwayland-debuginfo-24.1.5-150700.3.25.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93522.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281240 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:50 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:31:50 -0000 Subject: SUSE-SU-2026:4834-1: important: Security update for MozillaFirefox Message-ID: <179261471047.291.3526877147749383022@9bf698548bc1> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4834-1 Release Date: 2026-10-21T12:51:18Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value. (bsc#1259727) * CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712) * CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730) * CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263) * CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. (bsc#1264713) * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service. (bsc#1275098) * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks. (bsc#1275098) * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c. (bsc#1275736) * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service. (bsc#1275605) * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash. (bsc#1275736) * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks. (bsc#1275736) * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption. (bsc#1275736) * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters. (bsc#1282347) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4834 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4834 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4834 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4834 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4834 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4834 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4834 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4834 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4834 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4834 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4834 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4834 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-153.5.0-150400.157.16.1 * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * openSUSE Leap 15.4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * Desktop Applications Module 15-SP7 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:56 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:31:56 -0000 Subject: SUSE-SU-2026:4833-1: moderate: Security update for libraw Message-ID: <179261471696.291.11025952157264098963@9bf698548bc1> # Security update for libraw Announcement ID: SUSE-SU-2026:4833-1 Release Date: 2026-10-21T12:49:21Z Rating: moderate References: * bsc#1282783 Cross-References: * CVE-2026-88387 CVSS scores: * CVE-2026-88387 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88387 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88387 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for libraw fixes the following issue: * CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc#1282783). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4833 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libraw-devel-static-0.20.2-150400.3.24.1 * libraw20-0.20.2-150400.3.24.1 * libraw-tools-0.20.2-150400.3.24.1 * libraw-devel-0.20.2-150400.3.24.1 * libraw-tools-debuginfo-0.20.2-150400.3.24.1 * libraw-debugsource-0.20.2-150400.3.24.1 * libraw20-debuginfo-0.20.2-150400.3.24.1 * openSUSE Leap 15.4 (x86_64) * libraw20-32bit-0.20.2-150400.3.24.1 * libraw20-32bit-debuginfo-0.20.2-150400.3.24.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libraw20-64bit-debuginfo-0.20.2-150400.3.24.1 * libraw20-64bit-0.20.2-150400.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88387.html * https://bugzilla.suse.com/show_bug.cgi?id=1282783 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:32:02 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 21 Oct 2026 20:32:02 -0000 Subject: SUSE-SU-2026:4832-1: moderate: Security update for python-hpack Message-ID: <179261472296.291.8387393838954758478@9bf698548bc1> # Security update for python-hpack Announcement ID: SUSE-SU-2026:4832-1 Release Date: 2026-10-21T12:48:54Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4832 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4832 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-hpack-4.0.0-150400.8.6.1 * Python 3 Module 15-SP7 (noarch) * python311-hpack-4.0.0-150400.8.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 08:30:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 08:30:09 -0000 Subject: SUSE-SU-2026:4847-1: important: Security update for ca-certificates-mozilla Message-ID: <179265780980.953.14860257622010826693@8741a845db10> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:4847-1 Release Date: 2026-10-21T16:36:01Z Rating: important References: * bsc#1286261 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4847 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4847 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4847 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4847 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4847 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4847 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4847 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4847 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4847 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4847 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4847 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4847 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4847 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4847 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4847 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4847 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4847 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Micro 5.3 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro 5.5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * Basesystem Module 15-SP7 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * Development Tools Module 15-SP7 (noarch) * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:21 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 12:30:21 -0000 Subject: SUSE-SU-2026:4848-1: important: Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4) Message-ID: <179267222187.1378.3602721904377468219@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4848-1 Release Date: 2026-10-22T05:05:17Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4850 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4851 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4848 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4849 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4850 SUSE-2026-4851 SUSE-2026-4848 SUSE-2026-4849 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-19-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-15-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-19-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-15-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 12:30:48 -0000 Subject: SUSE-SU-2026:4853-1: important: Security update for php7 Message-ID: <179267224870.1378.1905103692163166137@f5dd93353bb2> # Security update for php7 Announcement ID: SUSE-SU-2026:4853-1 Release Date: 2026-10-22T08:09:05Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 * bsc#1286027 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-109618 * CVE-2026-109619 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * Legacy Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4853 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4853 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4853 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4853 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4853 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4853 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4853 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4853 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4853 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4853 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4853 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-embed-debugsource-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-embed-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-test-7.4.33-150400.4.81.2 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-embed-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-embed-debugsource-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-embed-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-test-7.4.33-150400.4.81.2 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-embed-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 12:30:57 -0000 Subject: SUSE-SU-2026:4852-1: important: Security update for php8 Message-ID: <179267225703.1378.7093382444380849398@f5dd93353bb2> # Security update for php8 Announcement ID: SUSE-SU-2026:4852-1 Release Date: 2026-10-22T07:42:53Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4852 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4852 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4852 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4852 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4852 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4852 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4852 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4852 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4852 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:30:15 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4856-1: important: Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4) Message-ID: <179268661541.8348.9417555518470990144@8741a845db10> # Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4856-1 Release Date: 2026-10-22T09:05:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4856 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4856 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_225-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_225-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-7-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:30:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 16:30:30 -0000 Subject: SUSE-SU-2026:4855-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) Message-ID: <179268663059.8348.10024073638135800916@8741a845db10> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4855-1 Release Date: 2026-10-22T11:05:15Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4855 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4859 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4860 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4859 SUSE-2026-4860 SUSE-2026-4855 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-8-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-8-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:01 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 16:31:01 -0000 Subject: SUSE-SU-2026:4858-1: critical: Security update for webkit2gtk3 Message-ID: <179268666194.8348.12196036059458229261@8741a845db10> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4858-1 Release Date: 2026-10-22T09:58:05Z Rating: critical References: * bsc#1276418 * bsc#1277001 * bsc#1277004 * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277015 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1277755 * bsc#1281116 * bsc#1284619 * bsc#1285528 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43670 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64715 * CVE-2026-64718 * CVE-2026-64753 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64784 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65335 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78376 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-83596 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78376 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78376 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78376 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-83596 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 237 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): * CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. * CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. * CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. * CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. * CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. * CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. * CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. * CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. * CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. * CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. * CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. * CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. * CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. * CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. * CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. * CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. * CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). * CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. * CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. * CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. * CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. * CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. * CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-78376: use-after-free of `JSCValue` function parameters (bsc#1276418). * CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. * CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. * CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. * CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. * CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. * CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. * CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. * CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. * CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755). * CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. * CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. * CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. * CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. * CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4858 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4858 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4858 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4858 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4858 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4858 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-minibrowser-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * webkit2gtk4-minibrowser-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * webkit-jsc-6.0-debuginfo-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * webkit-jsc-4.1-debuginfo-2.54.1-150600.12.81.3 * webkit-jsc-4-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit-jsc-4-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkit-jsc-4.1-2.54.1-150600.12.81.3 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk3-minibrowser-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * webkit-jsc-6.0-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_1-0-32bit-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-32bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-64bit-2.54.1-150600.12.81.4 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150600.12.81.3 * openSUSE Leap 15.6 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * Basesystem Module 15-SP7 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * Desktop Applications Module 15-SP7 (noarch) * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64718.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65335.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78376.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-83596.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1276418 * https://bugzilla.suse.com/show_bug.cgi?id=1277001 * https://bugzilla.suse.com/show_bug.cgi?id=1277004 * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277015 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1277755 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 * https://bugzilla.suse.com/show_bug.cgi?id=1285528 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:10 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 16:31:10 -0000 Subject: SUSE-SU-2026:4857-1: important: Security update for mutt Message-ID: <179268667021.8348.12070463643569855102@8741a845db10> # Security update for mutt Announcement ID: SUSE-SU-2026:4857-1 Release Date: 2026-10-22T09:56:58Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4857 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4857 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4857 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4857 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * Basesystem Module 15-SP7 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 16:31:17 -0000 Subject: SUSE-SU-2026:4854-1: important: Security update for podman Message-ID: <179268667757.8348.4159911749893288674@8741a845db10> # Security update for podman Announcement ID: SUSE-SU-2026:4854-1 Release Date: 2026-10-22T08:30:26Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4854 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4854 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4854 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4854 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4854 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4854 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4854 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4854 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4854 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * Containers Module 15-SP7 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * podman-docker-4.9.5-150500.3.84.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:30:19 -0000 Subject: SUSE-RU-2026:24272-1: moderate: Recommended update for aws-cli, python-s3transfer, python-boto3, python-botocore Message-ID: <179270101936.838.8002322864945410020@8741a845db10> # Recommended update for aws-cli, python-s3transfer, python-boto3, python- botocore Announcement ID: SUSE-RU-2026:24272-1 Release Date: 2026-10-16T10:27:18Z Rating: moderate References: * bsc#1204537 * bsc#1209255 * bsc#1267424 * jsc#PED-2333 * jsc#PED-3780 * jsc#SLE-15 Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains three features and has three fixes can now be installed. ## Description: This update for aws-cli, python-s3transfer, python-boto3, python-botocore fixes the following issues: Changes in aws-cli: * Update to 1.45.36 (bsc#1267424) * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.45.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.45.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.45.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.45.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.45.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.45.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.45.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.45.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * enhancement:emr: EMR SSH/SCP helper commands (`aws emr ssh`, `socks`, `put`, `get`) now default to `StrictHostKeyChecking=accept-new` for improved host key verification security. A new `--ssh-options` parameter allows passing arbitrary SSH options to override defaults. On systems with OpenSSH < 7.6, the CLI automatically falls back to the previous behavior with a warning. * from version 1.45.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.45.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.45.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.45.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.45.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.45.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.45.21 * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.45.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.45.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.45.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * bugfix:s3: Fix false negative in parent-directory escape detection that allowed keys like `/../foo` to bypass warning during downloads * from version 1.45.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.45.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update to 1.45.15 * api-change:`backup`: Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.45.14 * api-change:`datazone`: Add support for VPC connection * api-change:`ec2`: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call * api-change:`securityagent`: Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:configure: Warn if the credentials file has permissions beyond the default of 0o600 when modifying the file. Fixes `#10019 <https://github.com/aws/aws-cli/issues/10019>`__. * from version 1.45.13 * api-change:`batch`: Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.45.12 * api-change:`bedrock-runtime`: Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: GenerateAuthRequestCryptogram API launch. * enhancement:`cloudtrail validate-logs`: Invalidate log files with data appended to the end of the gzip stream. * Update to 1.45.11 * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.45.10 * api-change:`accessanalyzer`: Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: Support for dataset enrichment and geo spatial in new data preparation experience From 1.45.9 * api-change:`logs`: Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.45.8 * api-change:`bedrock`: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: Release --has-databases parameter for AWS Glue get- catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: Introducing new option for security groups mapping * with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.45.7 * api-change:`arc-region-switch`: Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. From 1.45.6 * api-change:`bcm-data-exports`: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: Launching AgentCore payments * a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: This is a documentation update * api-change:`invoicing`: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. From 1.45.5 * api-change:`bedrock-agentcore-control`: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: Validate outpost access point resource name * api-change:`sagemaker`: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. From 1.45.4 * api-change:`cleanroomsml`: Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). From 1.45.3 * api-change:`bedrock-agentcore-control`: Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service- specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: Amazon VPC Lattice now supports privately resolvable DNS resources * enhancement:Migration: Added support to upgrade debug mode for detecting breaking change introduced in AWS CLI v2: in v2, Cyclic Redundancy Check 64 (CRC64NVME) is used by default for `aws s3` commands that upload a file to S3, but Cyclic Redundancy Check 32 (CRC32) is used instead in v1. To use upgrade debug mode, specify the `--v2-debug` global parameter on a command. From 1.45.2 * api-change:`appstream`: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. From 1.45.1 * api-change:`bedrock-agentcore`: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: AgentCore Identity now supports on- behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: Adds support for asynchronous notebook runs * api-change:`eks`: Vended logs update param for capability vended logs feature * api-change:`kafka`: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API From 1.45.0 * api-change:`account`: Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage * api-change:`cloudfront`: Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: Removes support for registry policy V1 * api-change:`gamelift`: Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: Allow admins to configure IPv6 ranges on IP Access Settings. * feature:Python: End of support for Python 3.9 From 1.44.87 * api-change:`application-signals`: Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: Add support for Passthrough pricing plan * api-change:`gameliftstreams`: Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: Added support for Protocol as modified resource and added update failure as modification state From 1.44.86 * api-change:`bedrock-agentcore-control`: Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * enhancement:configure: Added aws_security_token to the list of keys that are written to the shared credentials file when using aws configure set. From 1.44.85 * api-change:`datazone`: Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: Rename `get-o-tel-enrichment`, `start-o-tel- enrichment`, and `stop-o-tel-enrichment` commands to `get-otel-enrichment`, `start-otel-enrichment`, and `stop-otel-enrichment`. The old names are kept as hidden aliases for backward compatibility. From 1.44.84 * api-change:`batch`: Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iotwireless`: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * enhancement:`s3`: Add support for xxhash3, xxhash64, xxhash128, and sha512 algorithms to the high level s3 sync and cp commands From 1.44.83 * api-change:`cognito-idp`: Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * enhancement:`S3`: Add support for creating S3 account regional namespace buckets with `aws s3 mb`. The command now automatically detects bucket names matching the account-regional naming pattern and sets the required `x-amz- bucket-namespace` header. From 1.44.82 * api-change:`application-signals`: Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: Expanded support for new suppression rule fields. * api-change:`kafka`: Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. From 1.44.81 * api-change:`cleanrooms`: This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations * UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: Improving Documentation for Neptune * api-change:`quicksight`: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. From 1.44.80 * api-change:`appstream`: Add content redirection to Update Stack * api-change:`autoscaling`: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: Added error handling for service quota limits * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: Launching SMUS IAM domain SDK support * api-change:`devops-agent`: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: Updating regex for identification of AWS Regions. * api-change:`logs`: Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. From 1.44.79 * api-change:`customer-profiles`: This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key- value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high-speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. From 1.44.78 * api-change:`connect`: Conversational Analytics for Email * api-change:`devops-agent`: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: Minor updates to exceptions for completeness * api-change:`imagebuilder`: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * bugfix:codedeploy: Tighten file permissions for CodeDeploy configuration file From 1.44.77 * api-change:`bcm-dashboards`: Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: Adds support for MediaLive Channel-type Router Inputs. * api-change:`redshift-data`: The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: Release support for g7e instance types for SageMaker HyperPod * bugfix:s3, streaming output: Output files created by S3 Select and streaming output commands are now created with owner-only permissions (0600). Existing files are also tightened to 0600 when overwritten. From 1.44.76 * api-change:`backup`: Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`ivs-realtime`: Adds support for Amazon IVS real-time streaming redundant ingest. * api-change:`marketplace-discovery`: AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * bugfix:CodeArtifact: Tighten file permissions when writing credentials in CodeArtifact login * bugfix:`iam`: Tighten file permissions for virtual MFA bootstrap output From 1.44.75 * api-change:`accessanalyzer`: Revert previous additions of API changes. * api-change:`bedrock-agentcore`: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`lambda`: Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. From 1.44.74 * api-change:`accessanalyzer`: Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: Migrated to Smithy. No functional changes * api-change:`lightsail`: This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. From 1.44.73 * api-change:`bedrock`: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: Add support for tagging of Alarm resource type * api-change:`logs`: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions From 1.44.72 * api-change:`appstream`: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects * api-change:`bedrock-runtime`: Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. From 1.44.71 * api-change:`bedrock`: Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * bugfix:`s3`: Fix handling of SSE-C keys when copying unencrypted to encrypted objects or objects with different encryption keys From 1.44.70 * api-change:`acm`: Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: AWS DevOps Agent service General Availability release. * api-change:`dms`: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-maps`: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * bugfix:Configuration: Update `configure set` command to return an error when newline or carriage-return characters are specified in the value. From 1.44.69 * api-change:`appstream`: Add support for URL Redirection * api-change:`autoscaling`: Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: AWS DevOps Agent General Availability. * api-change:`ecs`: Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Update CreateScript API documentation. * api-change:`lakeformation`: Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re- verification without requiring manual intervention from support teams. * api-change:`sagemaker`: Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: Added support for opting out of Amazon S3 Express session authentication via the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. From 1.44.68 * api-change:`bedrock-agentcore`: Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. From 1.44.67 * api-change:`bcm-data-exports`: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * enhancement:emr: Add support for StepExecutionRoleArn parameter in RunJobFlow API. From 1.44.66 * api-change:`apigatewayv2`: Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`marketplace-agreement`: The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. From 1.44.65 * api-change:`bedrock-agentcore-control`: Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: Adds support for updating the vector options field for existing collections. * api-change:`pcs`: This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. From 1.44.64 * api-change:`batch`: AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: Add support for tagging of ContactMethod resource type * api-change:`omics`: Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. From 1.44.63 * api-change:`backup`: Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`opensearch`: Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. From 1.44.62 * api-change:`batch`: AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 1. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. From 1.44.61 * api-change:`ec2`: The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: This update adds additional bitrate options for Dolby AC-4 audio outputs. From 1.44.60 * api-change:`bedrock-agentcore-control`: Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * enhancement:emr: Add support for S3LoggingConfiguration in \--monitoring- configuration parameter of the emr create-cluster command. From 1.44.59 * api-change:`bedrock`: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. From 1.44.58 * api-change:`apigateway`: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: The change adds a new capability named ManageSharedFolders in Custom Permissions From 1.44.57 * api-change:`datasync`: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`s3`: Add support for specifying tags on buckets during bucket creation using the `aws s3 mb` command via a new `--tags` flag. From 1.44.56 * api-change:`customer-profiles`: Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`polly`: Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: Added WINDOWS SERVER 2025 OperatingSystemName. From 1.44.55 * api-change:`bedrock-agentcore-control`: Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kafka`: Add dual stack endpoint to SDK * api-change:`lexv2-models`: This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. From 1.44.54 * api-change:`iam`: Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. From 1.44.53 * api-change:`appintegrations`: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. From 1.44.52 * api-change:`connecthealth`: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * Update to 1.44.51 * api-change:`connect`: Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: Adding support for DeploymentStrategyOptions * api-change:`quicksight`: Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * from version 1.44.50 * api-change:`bedrock-agentcore-control`: Support for AgentCore Policy GA * api-change:`datazone`: Adding QueryGraph operation to DataZone SDK * api-change:`logs`: CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.44.49 * api-change:`arc-region-switch`: Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.44.48 * api-change:`backup-gateway`: This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.44.47 * api-change:`batch`: AWS Batch documentation update for service job capacity units. * api-change:`ec2`: Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: Neptune global clusters now supports tags * api-change:`wafv2`: AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.44.46 * api-change:`cloudwatch`: This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.44.45 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: Add workflow properties support to connections APIs * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`mediatailor`: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.44.44 * api-change:`appstream`: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`sagemaker-runtime`: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * bugfix:cloudtrail: Fixed edge case in validate-logs where digest validation could fail with "public key not found" when the end time lands near a key rotation boundary * from version 1.44.43 * api-change:`bcm-dashboards`: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * from version 1.44.42 * api-change:`cleanrooms`: This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: Correcting in-app notifications API documentation. * from version 1.44.41 * api-change:`ec2`: Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`grafana`: This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`rds`: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: Adds support for branding customization without requiring a custom wallpaper. * from version 1.44.40 * api-change:`arc-region-switch`: Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: Documentation updates for EC2 Secondary Networks * api-change:`ecr`: Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: Update MessageType enum to include missing types. * from version 1.44.39 * api-change:`cloudwatch`: Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * from version 1.44.38 * api-change:`ec2`: Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * enhancement:cli-history: Create local history files with specific permissions * from version 1.44.37 * api-change:`batch`: Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * enhancement:cloudtrail: Added support for validating backfill digest files in `validate-logs` command * from version 1.44.36 * api-change:`bedrock-agentcore`: Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.44.35 * api-change:`connectcampaignsv2`: Add the missing event type for WhatsApp * api-change:`ec2`: Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: Allow cross account v5 in put data lake settings * api-change:`neptunedata`: Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.44.34 * api-change:`bedrock-data-automation-runtime`: Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: Adding g7e instance support in Sagemaker Training * from version 1.44.33 * api-change:`arc-region-switch`: Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: Minor neptune-graph documentation changes * api-change:`ram`: Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: Added support for 12 new graphics-optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * from version 1.44.32 * api-change:`bedrock-runtime`: Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: Amazon Connect Cases now supports larger, multi- line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: Update delete cluster description * api-change:`medialive`: AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * from version 1.44.31 * api-change:`batch`: AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-maps`: Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: Updated the CloseAccount description. * api-change:`sso-admin`: Added new Region management APIs to support multi- Region replication in IAM Identity Center. * from version 1.44.30 * api-change:`bedrock-agentcore-control`: Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.44.29 * api-change:`connect`: This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.44.28 * api-change:`ec2`: G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.44.27 * api-change:`cognito-idp`: This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL- CODECS tag in HLS manifests. * api-change:`s3`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.44.26 * api-change:`connect`: Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * enhancement:`gamelift`: Add `--tags` parameter to `upload-build` command. * from version 1.44.25 * api-change:`connectcases`: Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: Adds support for AWS Ground Station Telemetry. * bugfix:documentation: Fixed shorthand example generation in documentation. * from version 1.44.24 * api-change:`connect`: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: Added api for deleting data export configuration for a domain * api-change:`qconnect`: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.44.23 * api-change:`autoscaling`: This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: Adding new enum value for ScanStatusReason * api-change:`health`: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.44.22 * api-change:`bedrock-agentcore`: Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.44.21 * api-change:`autoscaling`: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.44.20 * api-change:`connect`: Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: Adding security consideration comments for lcc accessing execution role under root access * from version 1.44.19 * api-change:`cleanrooms`: This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * from version 1.44.18 * api-change:`ce`: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: no feature changes. model migrated to Smithy * api-change:`redshift`: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update to 1.44.17 * api-change:`bedrock`: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.44.16 * api-change:`billing`: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * enhancement:`s3`: Adds new parameter `--case-conflict` that configures how case conflicts are handled on case-insensitive filesystems * from version 1.44.15 * api-change:`bedrock-agentcore-control`: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: Adding MaterializedViews task run APIs * api-change:`medialive`: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: Adds waiters to Amazon Transcribe. * from version 1.44.14 * api-change:`workspaces`: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.44.13 * api-change:`ce`: This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.44.12 * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.44.11 * bugfix:`s3`: Reverts addition of `--case-conflict` feature which caused a performance regression when copying from S3 to large local directories * from version 1.44.10 * api-change:`cleanrooms`: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.44.9 * api-change:`connect`: Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kafkaconnect`: This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect- fips as the service name. This is done to match the Kafka endpoints. * from version 1.44.8 * api-change:`connect`: Changes for Contact for Global Search * api-change:`quicksight`: This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.44.7 * api-change:`medialive`: AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.44.6 * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-places`: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: Add additional validation to Outpost bucket names. * enhancement:`s3`: Adds new parameter `--case-conflict` that configures how case conflicts are handled on case-insensitive filesystems * from version 1.44.5 * api-change:`config`: Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.44.4 * api-change:`arc-region-switch`: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: It is a internal bug fix for region expansion * api-change:`wickr`: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: Add support for WebAuthn under user settings. * from version 1.44.3 * api-change:`appstream`: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: Adds support for ECR Create On Push * api-change:`ecs`: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: Added "Stopping" for the HANA Database Status. * enhancement:cloudtrail: Fixed performance issue in cloudtrail validate-logs command by scoping S3 digest file listing to the trail's region instead of processing digest files from all regions. * from version 1.44.2 * api-change:`gameliftstreams`: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: Add support for dbiResourceId in finding. * api-change:`inspector-scan`: Adds an additional OutputFormat * api-change:`kafkaconnect`: Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.44.1 * api-change:`iot`: Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.44.0 * api-change:`bedrock-agentcore-control`: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`entityresolution`: Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: Add support for SQ Dashboard Api * feature:Migration: Implement a `--v2-debug` flag and `AWS_CLI_UPGRADE_DEBUG_MODE` environment variable that detects breaking changes for AWS CLI v2 for entered commands. * from version 1.43.15 * api-change:`bcm-recommended-actions`: Added new freetier action types to RecommendedAction.type. * api-change:`connect`: Amazon Connect now offers automated post-chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.43.14 * api-change:`lambda`: Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: Add SortBy parameter to ListSecrets * api-change:`sesv2`: Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.43.13 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: Adds support for Signer GetRevocationStatus with updated endpoints * Update to 1.43.12 * api-change:`account`: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.43.11 * api-change:`ce`: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: Update Mail Manager Archive ARN validation * from version 1.43.10 * api-change:`ecs`: Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * from version 1.43.9 * api-change:`lambda`: Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.43.8 * api-change:`bedrock`: Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.43.7 * api-change:`bedrock`: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: GPU-acceleration helps you build large- scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: New S3 Storage Class FSX_ONTAP * api-change:`s3control`: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: Added support for Amazon Database Savings Plans * api-change:`securityhub`: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.43.6 * api-change:`appintegrations`: This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: AWS Clean Rooms now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: This release adds support for EKS Capabilities * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi- product solutions. * api-change:`partnercentral-account`: Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * from version 1.43.5 * api-change:`bedrock-runtime`: Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.43.4 * api-change:`ec2`: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: Network Firewall release of the Proxy feature. * api-change:`organizations`: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: Adds support for new route53 feature: accelerated recovery. * Update to 1.43.3 * api-change:`cloudfront`: Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * from version 1.43.2 * api-change:`apigateway`: API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: Add support for ECR managed signing * api-change:`eks`: Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`invoicing`: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: This release adds support for Tiered Storage * api-change:`kms`: Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: Add support for resources in the aws-eusc partition. * api-change:`marketplace-entitlement`: Endpoint update for new region * api-change:`mediapackagev2`: Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: Endpoint update for new region * api-change:`odb`: Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: Add support for Upgrade Rollout Order * api-change:`redshift`: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: Adds support for creating Webapps accessible from a VPC. * from version 1.43.1 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large- scale distributed applications. * api-change:`autoscaling`: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: Bedrock Data Automation Runtime Sync API * api-change:`braket`: Add support for Braket spending limits. * api-change:`budgets`: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: Add support for environment variables and an IAM execution role. * api-change:`dms`: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. * api-change:`networkmanager`: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: Add support for EBS volume in Recycle Bin * api-change:`rds`: Add support for VPC Encryption Controls. * api-change:`redshift-data`: Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.43.0 * api-change:`apigateway`: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: Support for API Gateway portals and portal products. * api-change:`backup`: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: This release includes support for Search Results. * api-change:`billing`: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: Release ListEfficiencyMetrics API * api-change:`datazone`: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: Add support for scanning and viewing scan results for backup resource types * api-change:`health`: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: Initial GA launch of Partner Central Channel * api-change:`route53`: Add dual-stack endpoint support for Route53 * api-change:`rum`: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.42.76 * api-change:`autoscaling`: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. * api-change:`iam`: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.42.75 * api-change:`appstream`: Adding support for additional instances and extended storage * api-change:`backup`: AWS Backup now supports specifying a logically air- gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.42.74 * api-change:`datazone`: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * from version 1.42.73 * api-change:`cloudformation`: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iotwireless`: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: Updated endpoint and service metadata * api-change:`sagemaker`: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.42.72 * api-change:`amp`: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.42.71 * api-change:`batch`: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`medical-imaging`: Added new fields in existing APIs. * api-change:`rtbfabric`: Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.42.70 * api-change:`acm-pca`: Private Certificate Authority service now supports ML- DSA key algorithms. * api-change:`appstream`: AWS Appstream support for IPv6 * api-change:`backup`: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.42.69 * api-change:`controltower`: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.42.68 * api-change:`accessanalyzer`: New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: Add Amazon EC2 R8a instance types * api-change:`gamelift`: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: Support for New Data Prep Experience * api-change:`s3tables`: Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: Provides NoLongerSupportedException error message * from version 1.42.67 * api-change:`cloudfront`: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: Added support for Project Resource Tags * api-change:`ec2`: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.42.66 * api-change:`pinpoint-sms-voice-v2`: This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: Fix the AWS Budgets endpoint for the aws-eusc partition. * api-change:`ec2`: Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kinesis`: Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.42.64 * api-change:`connectcases`: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fms`: Update endpoint ruleset parameters casing * api-change:`fsx`: Update endpoint ruleset parameters casing * api-change:`health`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: Update endpoint ruleset parameters casing * api-change:`mediaconvert`: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: Update endpoint ruleset parameters casing * api-change:`textract`: Update endpoint ruleset parameters casing * api-change:`waf`: Update endpoint ruleset parameters casing * from version 1.42.63 * api-change:`amp`: Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: Update endpoint ruleset parameters casing * api-change:`appconfig`: Update endpoint ruleset parameters casing * api-change:`appflow`: Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: Update endpoint ruleset parameters casing * api-change:`appmesh`: Update endpoint ruleset parameters casing * api-change:`appsync`: Update endpoint ruleset parameters casing * api-change:`artifact`: Update endpoint ruleset parameters casing * api-change:`auditmanager`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: Update endpoint ruleset parameters casing * api-change:`cleanrooms`: Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: Update endpoint ruleset parameters casing * api-change:`clouddirectory`: Update endpoint ruleset parameters casing * api-change:`cloudsearch`: Update endpoint ruleset parameters casing * api-change:`cloudwatch`: Update endpoint ruleset parameters casing * api-change:`codecatalyst`: Update endpoint ruleset parameters casing * api-change:`codecommit`: Update endpoint ruleset parameters casing * api-change:`codedeploy`: Update endpoint ruleset parameters casing * api-change:`cognito-sync`: Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: Update endpoint ruleset parameters casing * api-change:`connectcases`: Update endpoint ruleset parameters casing * api-change:`deadline`: Update endpoint ruleset parameters casing * api-change:`devops-guru`: Update endpoint ruleset parameters casing * api-change:`docdb`: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: Update endpoint ruleset parameters casing * api-change:`elasticache`: Update endpoint ruleset parameters casing * api-change:`emr-serverless`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`firehose`: Update endpoint ruleset parameters casing * api-change:`frauddetector`: Update endpoint ruleset parameters casing * api-change:`geo-places`: Update endpoint ruleset parameters casing * api-change:`glue`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: Update endpoint ruleset parameters casing * api-change:`iotevents-data`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: Update endpoint ruleset parameters casing * api-change:`kms`: Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: Update endpoint ruleset parameters casing * api-change:`neptune`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: RTB Fabric documentation update. * api-change:`s3outposts`: Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: Update endpoint ruleset parameters casing * api-change:`schemas`: Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: Update endpoint ruleset parameters casing * api-change:`servicecatalog`: Update endpoint ruleset parameters casing * api-change:`sso`: Update endpoint ruleset parameters casing * api-change:`sts`: Update endpoint ruleset parameters casing * from version 1.42.62 * api-change:`bedrock-runtime`: Add support for system tool and web citation response. * from version 1.42.61 * api-change:`apigatewayv2`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: Update endpoint ruleset parameters casing * api-change:`cloud9`: Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: Update endpoint ruleset parameters casing * api-change:`codeconnections`: Update endpoint ruleset parameters casing * api-change:`codeguru-security`: Update endpoint ruleset parameters casing * api-change:`detective`: Update endpoint ruleset parameters casing * api-change:`ec2`: This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: Update endpoint ruleset parameters casing * api-change:`emr-containers`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gameliftstreams`: Add stream group expiration date and expired status * api-change:`glacier`: Update endpoint ruleset parameters casing * api-change:`groundstation`: Enable use of AzEl ephemerides * api-change:`inspector-scan`: Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: Update endpoint ruleset parameters casing * api-change:`kendra`: Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: Update endpoint ruleset parameters casing * api-change:`lambda`: Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: Update endpoint ruleset parameters casing * api-change:`notifications`: Update endpoint ruleset parameters casing * api-change:`opensearch`: Update endpoint ruleset parameters casing * api-change:`organizations`: Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: Update endpoint ruleset parameters casing * api-change:`pipes`: Update endpoint ruleset parameters casing * api-change:`ram`: Update endpoint ruleset parameters casing * api-change:`resource-groups`: Update endpoint ruleset parameters casing * api-change:`s3`: Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: Update endpoint ruleset parameters casing * api-change:`security-ir`: Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: Update endpoint ruleset parameters casing * api-change:`sqs`: Update endpoint ruleset parameters casing * api-change:`support-app`: Update endpoint ruleset parameters casing * api-change:`taxsettings`: Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: Update endpoint ruleset parameters casing * api-change:`xray`: Update endpoint ruleset parameters casing * from version 1.42.60 * api-change:`accessanalyzer`: Update endpoint ruleset parameters casing * api-change:`aiops`: Update endpoint ruleset parameters casing * api-change:`athena`: Update endpoint ruleset parameters casing * api-change:`backup-gateway`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: Update endpoint ruleset parameters casing * api-change:`braket`: Update endpoint ruleset parameters casing * api-change:`ce`: Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: Update endpoint ruleset parameters casing * api-change:`codeartifact`: Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: Update endpoint ruleset parameters casing * api-change:`cognito-idp`: Update endpoint ruleset parameters casing * api-change:`comprehend`: Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: Update endpoint ruleset parameters casing * api-change:`controltower`: Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: Update endpoint ruleset parameters casing * api-change:`dax`: Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`entityresolution`: Update endpoint ruleset parameters casing * api-change:`forecast`: Update endpoint ruleset parameters casing * api-change:`greengrass`: Update endpoint ruleset parameters casing * api-change:`iam`: Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: Update endpoint ruleset parameters casing * api-change:`lex-runtime`: Update endpoint ruleset parameters casing * api-change:`managedblockchain`: Update endpoint ruleset parameters casing * api-change:`mturk`: Update endpoint ruleset parameters casing * api-change:`neptune-graph`: Update endpoint ruleset parameters casing * api-change:`outposts`: Update endpoint ruleset parameters casing * api-change:`pinpoint`: Update endpoint ruleset parameters casing * api-change:`rbin`: Update endpoint ruleset parameters casing * api-change:`rds-data`: Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: Update endpoint ruleset parameters casing * api-change:`rekognition`: Update endpoint ruleset parameters casing * api-change:`repostspace`: Update endpoint ruleset parameters casing * api-change:`route53profiles`: Update endpoint ruleset parameters casing * api-change:`route53resolver`: Update endpoint ruleset parameters casing * api-change:`s3vectors`: Update endpoint ruleset parameters casing * api-change:`scheduler`: Update endpoint ruleset parameters casing * api-change:`secretsmanager`: Update endpoint ruleset parameters casing * api-change:`ses`: Update endpoint ruleset parameters casing * api-change:`shield`: Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: Update endpoint ruleset parameters casing * api-change:`socialmessaging`: Update endpoint ruleset parameters casing * api-change:`ssm-sap`: Update endpoint ruleset parameters casing * api-change:`sso-admin`: Update endpoint ruleset parameters casing * api-change:`stepfunctions`: Update endpoint ruleset parameters casing * api-change:`waf-regional`: Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: Update endpoint ruleset parameters casing * from version 1.42.59 * api-change:`acm`: Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Update endpoint ruleset parameters casing * api-change:`billing`: Update endpoint ruleset parameters casing * api-change:`budgets`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: Update endpoint ruleset parameters casing * api-change:`cloudtrail`: Update endpoint ruleset parameters casing * api-change:`codepipeline`: Update endpoint ruleset parameters casing * api-change:`datapipeline`: Update endpoint ruleset parameters casing * api-change:`datazone`: This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: Update endpoint ruleset parameters casing * api-change:`eks`: Update endpoint ruleset parameters casing * api-change:`elb`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`evs`: Update endpoint ruleset parameters casing * api-change:`fis`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Update endpoint ruleset parameters casing * api-change:`iotwireless`: Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: Update endpoint ruleset parameters casing * api-change:`location`: Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: Update endpoint ruleset parameters casing * api-change:`mediapackage`: Update endpoint ruleset parameters casing * api-change:`mediastore`: Update endpoint ruleset parameters casing * api-change:`mediastore-data`: Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: Update endpoint ruleset parameters casing * api-change:`mq`: Update endpoint ruleset parameters casing * api-change:`panorama`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: Update endpoint ruleset parameters casing * api-change:`qbusiness`: Update endpoint ruleset parameters casing * api-change:`robomaker`: Update endpoint ruleset parameters casing * api-change:`route53domains`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Add support for custom rate limits. * api-change:`s3tables`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Added inference components model data caching feature * api-change:`sagemaker-metrics`: Update endpoint ruleset parameters casing * api-change:`securityhub`: Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: Update endpoint ruleset parameters casing * api-change:`snow-device-management`: Update endpoint ruleset parameters casing * api-change:`sso-oidc`: Update endpoint ruleset parameters casing * api-change:`supplychain`: Update endpoint ruleset parameters casing * api-change:`translate`: Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: Update endpoint ruleset parameters casing * api-change:`wisdom`: Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: Update endpoint ruleset parameters casing * from version 1.42.58 * api-change:`account`: Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: Fixing the service documentation name * api-change:`bedrock-agentcore-control`: Fixing the service documentation name * api-change:`chime-sdk-voice`: Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: Update endpoint ruleset parameters casing * api-change:`codebuild`: Update endpoint ruleset parameters casing * api-change:`codestar-connections`: Update endpoint ruleset parameters casing * api-change:`config`: Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: Update endpoint ruleset parameters casing * api-change:`cur`: Update endpoint ruleset parameters casing * api-change:`discovery`: Update endpoint ruleset parameters casing * api-change:`dms`: Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: Update endpoint ruleset parameters casing * api-change:`drs`: Update endpoint ruleset parameters casing * api-change:`dsql`: Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: Update endpoint ruleset parameters casing * api-change:`ecr`: Update endpoint ruleset parameters casing * api-change:`ecr-public`: Update endpoint ruleset parameters casing * api-change:`healthlake`: Update endpoint ruleset parameters casing * api-change:`internetmonitor`: Update endpoint ruleset parameters casing * api-change:`iotevents`: Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: Update endpoint ruleset parameters casing * api-change:`mediatailor`: Update endpoint ruleset parameters casing * api-change:`mgh`: Update endpoint ruleset parameters casing * api-change:`mgn`: Update endpoint ruleset parameters casing * api-change:`mpa`: Update endpoint ruleset parameters casing * api-change:`neptunedata`: Update endpoint ruleset parameters casing * api-change:`networkmonitor`: Update endpoint ruleset parameters casing * api-change:`odb`: Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: Update endpoint ruleset parameters casing * api-change:`personalize-events`: Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: Update endpoint ruleset parameters casing * api-change:`resiliencehub`: Update endpoint ruleset parameters casing * api-change:`rum`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: Update endpoint ruleset parameters casing * api-change:`savingsplans`: Update endpoint ruleset parameters casing * api-change:`securitylake`: Update endpoint ruleset parameters casing * api-change:`sesv2`: Update endpoint ruleset parameters casing * api-change:`storagegateway`: Update endpoint ruleset parameters casing * api-change:`synthetics`: Update endpoint ruleset parameters casing * from version 1.42.57 * api-change:`appfabric`: Update endpoint ruleset parameters casing * api-change:`autoscaling`: Update endpoint ruleset parameters casing * api-change:`b2bi`: Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: Update endpoint ruleset parameters casing * api-change:`ce`: Update endpoint ruleset parameters casing * api-change:`chatbot`: Update endpoint ruleset parameters casing * api-change:`cloudformation`: Update endpoint ruleset parameters casing * api-change:`cloudhsm`: Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: Update endpoint ruleset parameters casing * api-change:`cognito-identity`: Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: Update endpoint ruleset parameters casing * api-change:`connect`: This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: Update endpoint ruleset parameters casing * api-change:`devicefarm`: This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: Update endpoint ruleset parameters casing * api-change:`ds-data`: Update endpoint ruleset parameters casing * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`forecastquery`: Update endpoint ruleset parameters casing * api-change:`iam`: Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: Update endpoint ruleset parameters casing * api-change:`iot`: Update endpoint ruleset parameters casing * api-change:`iotanalytics`: Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: Update endpoint ruleset parameters casing * api-change:`iotsitewise`: Update endpoint ruleset parameters casing * api-change:`ivschat`: Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: Update endpoint ruleset parameters casing * api-change:`lexv2-models`: Update endpoint ruleset parameters casing * api-change:`mailmanager`: Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: Update endpoint ruleset parameters casing * api-change:`medialive`: Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: Update endpoint ruleset parameters casing * api-change:`oam`: Update endpoint ruleset parameters casing * api-change:`pcs`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: Update endpoint ruleset parameters casing * api-change:`redshift-data`: Update endpoint ruleset parameters casing * api-change:`route53`: Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: Update endpoint ruleset parameters casing * api-change:`sns`: Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: Update endpoint ruleset parameters casing * api-change:`workdocs`: Update endpoint ruleset parameters casing * api-change:`workmail`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Update endpoint ruleset parameters casing * from version 1.42.56 * api-change:`dynamodb`: Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`mediaconvert`: This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * enhancement:timestamps: Add `wire` as a valid value for `cli_timestamp_format`. * from version 1.42.55 * api-change:`amp`: Update endpoint ruleset parameters casing * api-change:`amplifybackend`: Update endpoint ruleset parameters casing * api-change:`appconfigdata`: Update endpoint ruleset parameters casing * api-change:`appintegrations`: Update endpoint ruleset parameters casing * api-change:`application-insights`: Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: Update endpoint ruleset parameters casing * api-change:`cloudfront`: Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: Update endpoint ruleset parameters casing * api-change:`controlcatalog`: Update endpoint ruleset parameters casing * api-change:`datasync`: Update endpoint ruleset parameters casing * api-change:`ds`: Update endpoint ruleset parameters casing * api-change:`dsql`: Update endpoint ruleset parameters casing * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Update endpoint ruleset parameters casing * api-change:`events`: Update endpoint ruleset parameters casing * api-change:`evidently`: Update endpoint ruleset parameters casing * api-change:`finspace`: Update endpoint ruleset parameters casing * api-change:`finspace-data`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: Update endpoint ruleset parameters casing * api-change:`iot-data`: Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: Update endpoint ruleset parameters casing * api-change:`lakeformation`: Update endpoint ruleset parameters casing * api-change:`license-manager`: Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: Update endpoint ruleset parameters casing * api-change:`network-firewall`: Update endpoint ruleset parameters casing * api-change:`networkmanager`: Update endpoint ruleset parameters casing * api-change:`organizations`: Update endpoint ruleset parameters casing * api-change:`pi`: Update endpoint ruleset parameters casing * api-change:`qapps`: Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: Update endpoint ruleset parameters casing * api-change:`signer`: Update endpoint ruleset parameters casing * api-change:`swf`: Releasing minor endpoint updates. * api-change:`timestream-write`: Update endpoint ruleset parameters casing * api-change:`tnb`: Update endpoint ruleset parameters casing * api-change:`wellarchitected`: Update endpoint ruleset parameters casing * from version 1.42.54 * api-change:`acm-pca`: Update endpoint ruleset parameters casing * api-change:`amplify`: Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: Update endpoint ruleset parameters casing * api-change:`apprunner`: Update endpoint ruleset parameters casing * api-change:`apptest`: Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: Update endpoint ruleset parameters casing * api-change:`billingconductor`: New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: Update endpoint ruleset parameters casing * api-change:`databrew`: Update endpoint ruleset parameters casing * api-change:`dataexchange`: Update endpoint ruleset parameters casing * api-change:`dlm`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`freetier`: Update endpoint ruleset parameters casing * api-change:`gamelift`: Update endpoint ruleset parameters casing * api-change:`geo-routes`: Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: Update endpoint ruleset parameters casing * api-change:`grafana`: Update endpoint ruleset parameters casing * api-change:`identitystore`: Update endpoint ruleset parameters casing * api-change:`ivs`: Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: Update endpoint ruleset parameters casing * api-change:`kafka`: Update endpoint ruleset parameters casing * api-change:`keyspaces`: Update endpoint ruleset parameters casing * api-change:`kms`: Update endpoint ruleset parameters casing * api-change:`lex-models`: Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: Update endpoint ruleset parameters casing * api-change:`m2`: Update endpoint ruleset parameters casing * api-change:`machinelearning`: Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: Update endpoint ruleset parameters casing * api-change:`medical-imaging`: Update endpoint ruleset parameters casing * api-change:`memorydb`: Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: Update endpoint ruleset parameters casing * api-change:`osis`: Update endpoint ruleset parameters casing * api-change:`personalize`: Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: Update endpoint ruleset parameters casing * api-change:`polly`: Update endpoint ruleset parameters casing * api-change:`pricing`: Update endpoint ruleset parameters casing * api-change:`qldb`: Update endpoint ruleset parameters casing * api-change:`qldb-session`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: Update endpoint ruleset parameters casing * api-change:`ssm`: Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: Update endpoint ruleset parameters casing * api-change:`timestream-query`: Update endpoint ruleset parameters casing * api-change:`voice-id`: Update endpoint ruleset parameters casing * api-change:`workspaces-web`: Update endpoint ruleset parameters casing * from version 1.42.53 * api-change:`bedrock`: Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.42.52 * api-change:`appstream`: This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: This release adds support for creating instant, point-in- time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: Move UntagResource API body member to query parameter * api-change:`transfer`: SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.42.51 * api-change:`bedrock-agentcore`: Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update to 1.42.50 * api-change:`bedrock-agentcore`: Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update to 1.42.49 * api-change:`quicksight`: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.42.48 * api-change:`bedrock-agentcore-control`: Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: Released support for IPv6 and dual-stack active directories * api-change:`outposts`: This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.42.47 * api-change:`proton`: Deprecating APIs in AWS Proton namespace. * from version 1.42.46 * api-change:`backup`: Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: Add new AWS Resource Explorer APIs * from version 1.42.45 * api-change:`cleanrooms`: Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.42.44 * api-change:`cloudformation`: Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: Adds support to configure canaries with pre- configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.42.43 * api-change:`chime-sdk-meetings`: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.42.42 * api-change:`application-signals`: Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: AWS Directory service now supports IPv6-native and dual- stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: added warnings to a few CLI pages * api-change:`rds`: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: Add support for updating server identity provider type * enhancement:`eks`: Add `proxy-url` to `aws eks update-kubeconfig`. * from version 1.42.41 * api-change:`bedrock`: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.42.40 * api-change:`bedrock-agent-runtime`: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: Support for payer account dimension and billing view health status. * api-change:`connect`: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`redshift`: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.42.39 * api-change:`glue`: Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.42.38 * api-change:`appstream`: G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kms`: Documentation only updates for KMS. * api-change:`neptune`: Doc-only update to address customer use. * from version 1.42.37 * api-change:`cleanrooms`: Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: This release includes exception definition and documentation updates. * from version 1.42.36 * api-change:`batch`: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.42.35 * api-change:`bedrock-agentcore-control`: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: Added support for cross- account Active Directories. * api-change:`medialive`: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sqs`: Update invalid character handling documentation for SQS SendMessage API * from version 1.42.34 * api-change:`bedrock`: Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.42.33 * api-change:`ec2`: Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: Add support for Amazon EC2 Capacity Blocks for ML * from version 1.42.32 * api-change:`budgets`: Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.42.31 * api-change:`ce`: Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * from version 1.42.30 * api-change:`payment-cryptography`: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.42.29 * api-change:`amp`: Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: adding IAM principal id to IAM user profile details * api-change:`ecs`: This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS- related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.42.28 * api-change:`networkflowmonitor`: Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.42.27 * api-change:`autoscaling`: Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: SDK release for user defined predefined attributes. * api-change:`datazone`: Adds support for custom blueprints * api-change:`mediapackagev2`: Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.42.26 * api-change:`iotsitewise`: Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * from version 1.42.25 * api-change:`ecs`: This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.42.24 * api-change:`cleanrooms`: Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.42.23 * api-change:`cleanrooms`: Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.42.22 * api-change:`ec2`: MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.42.21 * api-change:`bedrock-runtime`: Fixed stop sequence limit for converse API. * api-change:`ec2`: Release shows new route types such as filtered and advertisement. * api-change:`xray`: AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.42.20 * api-change:`applicationcostprofiler`: Remove incorrect endpoint tests * api-change:`apprunner`: Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: Remove incorrect endpoint tests * api-change:`cloud9`: Remove incorrect endpoint tests * api-change:`cloudhsmv2`: Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: Remove incorrect endpoint tests * api-change:`codedeploy`: Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: Remove incorrect endpoint tests * api-change:`connect`: AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`ec2`: This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fis`: Remove incorrect endpoint tests * api-change:`fms`: Remove incorrect endpoint tests * api-change:`geo-maps`: Remove incorrect endpoint tests * api-change:`glue`: Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: Remove incorrect endpoint tests * api-change:`mediastore-data`: Remove incorrect endpoint tests * api-change:`mturk`: Remove incorrect endpoint tests * api-change:`omics`: Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: Remove incorrect endpoint tests * api-change:`rds`: Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: Remove incorrect endpoint tests * api-change:`savingsplans`: Remove incorrect endpoint tests * api-change:`scheduler`: Remove incorrect endpoint tests * api-change:`ses`: Remove incorrect endpoint tests * api-change:`ssm-sap`: Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: Remove incorrect endpoint tests * api-change:`timestream-query`: Remove incorrect endpoint tests * api-change:`waf`: Remove incorrect endpoint tests * api-change:`workmailmessageflow`: Remove incorrect endpoint tests * api-change:`xray`: Remove incorrect endpoint tests * from version 1.42.19 * api-change:`amplifybackend`: Remove incorrect endpoint tests * api-change:`application-insights`: Remove incorrect endpoint tests * api-change:`batch`: Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: Remove incorrect endpoint tests * api-change:`codeguruprofiler`: Remove incorrect endpoint tests * api-change:`datapipeline`: Remove incorrect endpoint tests * api-change:`discovery`: Remove incorrect endpoint tests * api-change:`ds`: Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`evidently`: Remove incorrect endpoint tests * api-change:`frauddetector`: Remove incorrect endpoint tests * api-change:`inspector`: Remove incorrect endpoint tests * api-change:`kinesisvideo`: Remove incorrect endpoint tests * api-change:`kinesis-video-media`: Remove incorrect endpoint tests * api-change:`lakeformation`: Remove incorrect endpoint tests * api-change:`lex-models`: Remove incorrect endpoint tests * api-change:`migrationhub-config`: Remove incorrect endpoint tests * api-change:`neptune-graph`: Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`personalize`: Remove incorrect endpoint tests * api-change:`pi`: Remove incorrect endpoint tests * api-change:`qldb-session`: Remove incorrect endpoint tests * api-change:`redshift`: Remove incorrect endpoint tests * api-change:`robomaker`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: Remove incorrect endpoint tests * api-change:`snow-device-management`: Remove incorrect endpoint tests * api-change:`timestream-write`: Remove incorrect endpoint tests * api-change:`voice-id`: Remove incorrect endpoint tests * api-change:`workdocs`: Remove incorrect endpoint tests * api-change:`workmail`: Remove incorrect endpoint tests * from version 1.42.18 * api-change:`apprunner`: Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: Remove incorrect endpoint tests * api-change:`codestar-connections`: Remove incorrect endpoint tests * api-change:`comprehendmedical`: Remove incorrect endpoint tests * api-change:`connectparticipant`: Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: Remove incorrect endpoint tests * api-change:`ec2`: Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`finspace`: Remove incorrect endpoint tests * api-change:`geo-routes`: Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: Remove incorrect endpoint tests * api-change:`globalaccelerator`: Remove incorrect endpoint tests * api-change:`greengrass`: Remove incorrect endpoint tests * api-change:`identitystore`: Remove incorrect endpoint tests * api-change:`imagebuilder`: Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: Remove incorrect endpoint tests * api-change:`kafka`: Remove incorrect endpoint tests * api-change:`lookoutvision`: Remove incorrect endpoint tests * api-change:`mgh`: Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: Remove incorrect endpoint tests * api-change:`mq`: Remove incorrect endpoint tests * api-change:`personalize-events`: Remove incorrect endpoint tests * api-change:`pinpoint`: Remove incorrect endpoint tests * api-change:`ram`: Remove incorrect endpoint tests * api-change:`rbin`: Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: Remove incorrect endpoint tests * api-change:`signer`: Remove incorrect endpoint tests * api-change:`waf-regional`: Remove incorrect endpoint tests * from version 1.42.17 * api-change:`appflow`: Remove incorrect endpoint tests * api-change:`b2bi`: Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: Remove incorrect endpoint tests * api-change:`cloudsearch`: Remove incorrect endpoint tests * api-change:`cloudtrail-data`: Remove incorrect endpoint tests * api-change:`codeartifact`: Remove incorrect endpoint tests * api-change:`codeguru-security`: Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: Remove incorrect endpoint tests * api-change:`cur`: Remove incorrect endpoint tests * api-change:`datazone`: Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: Remove incorrect endpoint tests * api-change:`devops-guru`: Remove incorrect endpoint tests * api-change:`ec2`: Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`finspace-data`: Remove incorrect endpoint tests * api-change:`forecast`: Remove incorrect endpoint tests * api-change:`iotfleethub`: Remove incorrect endpoint tests * api-change:`kendra`: Remove incorrect endpoint tests * api-change:`kinesisanalytics`: Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: Remove incorrect endpoint tests * api-change:`lex-runtime`: Remove incorrect endpoint tests * api-change:`lookoutequipment`: Remove incorrect endpoint tests * api-change:`mediaconvert`: This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: Remove incorrect endpoint tests * api-change:`mediastore`: Remove incorrect endpoint tests * api-change:`personalize-runtime`: Remove incorrect endpoint tests * api-change:`qbusiness`: The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: Remove incorrect endpoint tests * api-change:`sagemaker-edge`: Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: Remove incorrect endpoint tests * api-change:`serverlessrepo`: Remove incorrect endpoint tests * api-change:`shield`: Remove incorrect endpoint tests * api-change:`snowball`: Remove incorrect endpoint tests * api-change:`sqs`: Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: Remove incorrect endpoint tests * api-change:`support-app`: Remove incorrect endpoint tests * api-change:`timestream-influxdb`: Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: Remove incorrect endpoint tests * api-change:`wellarchitected`: Remove incorrect endpoint tests * from version 1.42.16 * api-change:`clouddirectory`: Remove incorrect endpoint tests * api-change:`cognito-sync`: Remove incorrect endpoint tests * api-change:`docdb`: Remove incorrect endpoint tests * api-change:`elb`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`healthlake`: Remove incorrect endpoint tests * api-change:`iotanalytics`: Remove incorrect endpoint tests * api-change:`macie2`: Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: Remove incorrect endpoint tests * api-change:`medialive`: AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: Remove incorrect endpoint tests * api-change:`proton`: Remove incorrect endpoint tests * api-change:`qconnect`: Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: Remove incorrect endpoint tests * api-change:`rds`: Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: Remove incorrect endpoint tests * api-change:`sagemaker`: Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: Remove incorrect endpoint tests * api-change:`simspaceweaver`: Remove incorrect endpoint tests * api-change:`synthetics`: Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: test and verified, safe to release * from version 1.42.15 * api-change:`apigatewaymanagementapi`: Remove incorrect endpoint tests * api-change:`appfabric`: Remove incorrect endpoint tests * api-change:`backup-gateway`: Remove incorrect endpoint tests * api-change:`cloudhsm`: Remove incorrect endpoint tests * api-change:`cognito-identity`: Remove incorrect endpoint tests * api-change:`comprehend`: Remove incorrect endpoint tests * api-change:`ebs`: Remove incorrect endpoint tests * api-change:`ecr-public`: Remove incorrect endpoint tests * api-change:`ecs`: This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Remove incorrect endpoint tests * api-change:`forecastquery`: Remove incorrect endpoint tests * api-change:`gameliftstreams`: The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: Remove incorrect endpoint tests * api-change:`guardduty`: Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: Remove incorrect endpoint tests * api-change:`iotevents`: Remove incorrect endpoint tests * api-change:`iotevents-data`: Remove incorrect endpoint tests * api-change:`iotthingsgraph`: Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: Remove incorrect endpoint tests * api-change:`lexv2-runtime`: Remove incorrect endpoint tests * api-change:`lookoutmetrics`: Remove incorrect endpoint tests * api-change:`managedblockchain`: Remove incorrect endpoint tests * api-change:`mediapackage`: Remove incorrect endpoint tests * api-change:`panorama`: Remove incorrect endpoint tests * api-change:`pinpoint-email`: Remove incorrect endpoint tests * api-change:`resource-groups`: Remove incorrect endpoint tests * api-change:`s3outposts`: Remove incorrect endpoint tests * api-change:`ssm-contacts`: Doc-only updates for Incident Manager Contacts August 2025 * from version 1.42.14 * api-change:`bedrock-runtime`: Launch CountTokens API to allow token counting * api-change:`billing`: Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: This release supports policy grant identifier for cloud formation integration * api-change:`detective`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`eks`: EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kinesisanalyticsv2`: Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.42.13 * api-change:`cleanrooms`: Support error message configuration for analysis templates * api-change:`ec2`: Add support for "warning" volume status. * api-change:`polly`: Added support for new output format - Opus. * from version 1.42.12 * api-change:`batch`: Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`s3control`: Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * from version 1.42.11 * api-change:`amp`: Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.42.10 * api-change:`arc-region-switch`: Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: Added support for entity lists. * api-change:`medialive`: CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.42.9 * api-change:`braket`: Add support for Braket program sets. * api-change:`datazone`: Adds support for account pools and project profile account decoupling * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: Add Tagging Support for Opportunity resources * api-change:`sagemaker`: This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * bugfix:`dynamodb`: Correct Scan and Scanned Count values when resuming a scan or query with a `--starting-token` * from version 1.42.8 * api-change:`backupsearch`: Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.42.7 * api-change:`bedrock`: This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: Updating SearchUserHierarchyGroups API * api-change:`deadline`: Adds support for Wait and Save feature in service- managed fleets * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: Added support for managing user background session for applications * from version 1.42.6 * api-change:`connect`: This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * from version 1.42.5 * api-change:`batch`: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: AWS CodeBuild now supports comment-based pull request control. * api-change:`gameliftstreams`: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.42.4 * api-change:`appstream`: Added support for G6 instances * api-change:`budgets`: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.42.3 * api-change:`bedrock`: This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: Add support for deletion protection on EKS clusters * api-change:`rds`: Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.42.2 * api-change:`bedrock-agentcore`: Remove superfluous field from API * api-change:`codeconnections`: New integration with Azure DevOps provider type. * api-change:`evs`: TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.42.1 * api-change:`acm-pca`: Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: This is the initial SDK release for Region switch * api-change:`auditmanager`: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: Release new resource detail type CodeRepository * api-change:`sns`: Amazon SNS support for Amazon SQS fair queues * from version 1.42.0 * api-change:`customer-profiles`: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: Added Impala connector support * api-change:`s3control`: Add Tags field to CreateAccessPoint * api-change:`sesv2`: This release introduces support for Multi-tenant management * api-change:`workspaces-web`: Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.41.17 * api-change:`cloudfront`: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.41.16 * api-change:`batch`: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: Adds support for tag management on monitors. * api-change:`location`: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. * api-change:`opensearchserverless`: This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.41.15 * api-change:`directconnect`: Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * from version 1.41.14 * api-change:`appintegrations`: Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross- contact), and run background applications (service). * api-change:`budgets`: Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: Documentation updates for Amazon SQS fair queues feature. * from version 1.41.13 * api-change:`datazone`: This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: Add Git integration and README support for HealthOmics workflows * from version 1.41.12 * api-change:`ec2`: Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: Added the lastUserId parameter to the ListDevices and GetDevice API. * from version 1.41.11 * api-change:`ecr`: Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: This release updates the supported regions for Neptune API to include current AWS regions. * enhancement:EMR: Updated create-cluster and describe-cluster commands to support \--extended-support and --no-extended-support arguments * from version 1.41.10 * api-change:`cloudfront`: Add dualstack endpoint support * api-change:`deadline`: Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * enhancement:cloudfront: This release adds automatic pagination to the list- origin-access-controls command. To disable this behavior, please use the --no-paginate flag. * from version 1.41.9 * api-change:`auditmanager`: Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: July 2025 doc-only updates for Systems Manager. * from version 1.41.8 * api-change:`cleanroomsml`: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: Align input with style guidelines. * api-change:`synthetics`: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.41.7 * api-change:`bedrock`: This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: document update to support on demand custom model. * api-change:`datasync`: AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.41.6 * api-change:`ecs`: This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.41.5 * api-change:`bedrock-agent`: Add support for S3 Vectors as a vector store. * api-change:`datazone`: Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: Introduced custom instructions for topics. * api-change:`repostspace`: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.41.4 * api-change:`ec2`: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: Removing content that refers to an S3 bucket that is no longer in use. * from version 1.41.3 * api-change:`customer-profiles`: This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.41.2 * api-change:`connectcases`: This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * from version 1.41.1 * api-change:`cleanroomsml`: This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: Add support for the new optional domain-unit-id parameter in the UpdateProject API. * api-change:`ec2`: Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: Updated field validation requirements for InstanceGroups. * from version 1.41.0 * api-change:`arc-zonal-shift`: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: Added support for UNKNOWN drift status. * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.40.45 * api-change:`config`: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: Adding UnauthorizedException to public SDK * api-change:`rds`: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: Added support for new SES regions * from version 1.40.44 * api-change:`deadline`: Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.40.43 * api-change:`ecs`: Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: Remove Tags field from Get API responses * from version 1.40.42 * api-change:`aiops`: Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real- time network latency for multiplayer games. * api-change:`license-manager`: AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: This Feature Adds Support for the "et-EE" Locale for Batch Operations * from version 1.40.41 * api-change:`glue`: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: Added support for Amazon WorkSpaces Instances API * from version 1.40.40 * api-change:`bedrock`: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: Add ECS support for Windows Server 2025 * api-change:`geo-places`: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.40.39 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON-formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.40.38 * api-change:`aiops`: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: Added paginators for `imagebuilder`. * api-change:`logs`: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.40.37 * api-change:`accessanalyzer`: We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: Adds support for Exportable Public Certificates * api-change:`backup`: AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: Release of Active Threat Defense in Network Firewall * api-change:`organizations`: Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.40.36 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.40.35 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: Fixed regex patterns for ARN fields. * from version 1.40.34 * api-change:`controlcatalog`: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: WAF now provides two DDoS protection options: resource- level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * from version 1.40.33 * api-change:`gameliftstreams`: Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.40.32 * api-change:`appsync`: Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: Support dual-stack endpoints for ce api * api-change:`customer-profiles`: This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: Add ConflictException to UpdateEnvironment API * enhancement:`cloudformation`: High-level Cloudformation commands such as `deploy` and `package` will now fallback to SHA256 for checksumming if MD5 isn't present on the host * from version 1.40.31 * api-change:`bedrock-agent-runtime`: This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: S3 Tables now supports getting details about a table via its table ARN. * from version 1.40.30 * api-change:`bcm-pricing-calculator`: Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.40.29 * api-change:`amplify`: Update documentation for cacheConfig in CreateApp API * api-change:`evs`: Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.40.28 * api-change:`apigateway`: Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.40.27 * api-change:`athena`: Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: Add support for generating match IDs in near real-time. * api-change:`pcs`: Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: Support for Java runtime handler pattern. * from version 1.40.26 * api-change:`emr-serverless`: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.40.25 * api-change:`amplify`: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.40.24 * api-change:`cost-optimization-hub`: This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.40.23 * api-change:`ce`: This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update to 1.40.22 * api-change:`ec2`: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.40.21 * api-change:`amp`: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: Features: support for customer managed encryption keys * api-change:`glue`: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.40.20 * api-change:`application-autoscaling`: Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.40.19 * api-change:`datasync`: Remove Discovery APIs from the DataSync service * api-change:`ec2`: This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`rds`: This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.40.18 * api-change:`dsql`: CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: This release adds support for DVB-DASH, EBU- TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.40.17 * api-change:`bedrock-data-automation`: Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: This release introduces CreateSupportCase operation to SDK. * from version 1.40.16 * api-change:`bedrock-agent`: Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: Introduces Data Resync feature to describe-table- statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.40.15 * api-change:`cognito-idp`: Add exceptions to WebAuthn operations. * api-change:`firehose`: This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.40.14 * api-change:`bedrock`: Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: Changes for enhanced metadata in trace * api-change:`controltower`: AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi-Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.40.13 * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: Add support to the AV1 rate control mode * api-change:`mediatailor`: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.40.12 * api-change:`athena`: Minor API documentation updates * api-change:`logs`: We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.40.11 * api-change:`cloudfront`: Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: Updated description of a data structure. * api-change:`sso-admin`: Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.40.10 * api-change:`ec2`: This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.40.9 * api-change:`ec2`: This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: Add dualstack endpoints support. * from version 1.40.8 * api-change:`datazone`: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.40.7 * api-change:`bedrock-data-automation`: Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: Doc only update - fixed typos. * api-change:`kinesis`: Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.40.6 * api-change:`appconfig`: Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.40.5 * api-change:`bedrock`: You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.40.4 * api-change:`connectcases`: Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * bugfix:bundled-installer: Fix installing setup dependencies on newer versions of pip * from version 1.40.3 * api-change:`acm`: Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: Doc only update for GSI descriptions. * api-change:`imagebuilder`: Add integration with SSM Parameter Store to Image Builder. * from version 1.40.2 * api-change:`bedrock-runtime`: You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.40.1 * api-change:`apprunner`: AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: Add data source support to Event APIs * api-change:`bedrock-data-automation`: Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: Remove redundant validation check. * api-change:`dynamodb`: Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: Documentation only release for Amazon ECS * api-change:`pcs`: Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update to 1.40.0 * api-change:`codebuild`: Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`resource-explorer-2`: Documentation-only update for CreateView option correction * feature:`eks`: Add assume-role-arn option to update-kubeconfig command for cross-account access * from version 1.39.0 * api-change:`account`: AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: This release adds refresh token rotation. * api-change:`ec2`: Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: Fix endpoint resolution test cases * feature:Python: End of support for Python 3.8 * feature:Python: End of support for Python 3.8 * from version 1.38.38 * api-change:`arc-zonal-shift`: Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.38.37 * api-change:`qconnect`: This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.38.36 * api-change:`accessanalyzer`: Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: Add versioning for HealthOmics workflows * from version 1.38.35 * api-change:`connectcases`: This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer-managed keys. * api-change:`servicecatalog`: Updated default value for the access-level- filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * bugfix:Formatter: Update JSON formatter to encode raw bytes as UTF-8. * from version 1.38.34 * api-change:`entityresolution`: This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: Indonesia SOR Tax Registration Launch * from version 1.38.33 * api-change:`connect-contact-lens`: Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: Add support for Detective DualStack endpoints * api-change:`dynamodb`: Doc only update for API descriptions. * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * from version 1.38.32 * api-change:`application-autoscaling`: Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: Add support to analysis and sheet level highlighting in QuickSight. * from version 1.38.31 * api-change:`controlcatalog`: The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: Documentation update for secondary indexes and Create_Table. * api-change:`glue`: The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: Support tagging Agents and adjust input field validations * api-change:`transfer`: This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.38.30 * api-change:`bedrock-runtime`: This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: Documentation updates for AWS Security Hub. * api-change:`storagegateway`: Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: Uzbekistan Launch on TaxSettings Page * from version 1.38.29 * api-change:`bedrock`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: Add input validations for multiple Glue APIs * api-change:`medialive`: AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.38.28 * api-change:`ds-data`: Doc only update - fixed broken links. * api-change:`ec2`: Doc-only updates for Amazon EC2 * api-change:`events`: Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: Updated max size of Prefixes parameter of Scope data type. * from version 1.38.27 * api-change:`bedrock-agent`: Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: Improve descriptions for various API commands and data types. * api-change:`route53`: Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: This Feature Adds Support for the "zh-HK" Locale for Batch Operations * from version 1.38.26 * api-change:`application-signals`: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.38.25 * api-change:`cleanrooms`: This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.38.24 * api-change:`bedrock-runtime`: Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: Add dual-stack support to global endpoints. * api-change:`transfer`: Add WebAppEndpointPolicy support for WebApps * from version 1.38.23 * api-change:`apigateway`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.38.22 * api-change:`batch`: This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: bedrock flow now support node action trace. * api-change:`cloudformation`: Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.38.21 * api-change:`arc-zonal-shift`: Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.38.20 * api-change:`bedrock-agent`: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: Minor updates to improve developer experience. * api-change:`keyspaces`: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: Deprecate tags field in Get API responses * from version 1.38.19 * api-change:`iotwireless`: Mark EutranCid under LteNmr optional. * api-change:`pcs`: ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: Provides the correct value for supported model ID. * api-change:`ssm`: This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.38.18 * api-change:`bedrock`: A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt- in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.38.17 * api-change:`amplify`: Added appId field to Webhook responses * api-change:`bedrock`: With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.38.16 * api-change:`bedrock`: Support custom prompt routers for evaluation jobs * api-change:`ec2`: Doc-only updates for EC2 for March 2025. * api-change:`lambda`: Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.38.15 * api-change:`appsync`: Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.38.14 * api-change:`application-signals`: This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.38.13 * api-change:`cognito-identity`: Updated API model build artifacts for identity pools * api-change:`cognito-idp`: Minor description updates to API parameters * api-change:`glue`: This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.38.12 * api-change:`acm-pca`: Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: This release adds support to update projects and environments * api-change:`dynamodb`: Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * from version 1.38.11 * api-change:`ec2`: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: Adding componentArn to network reachability details * api-change:`medialive`: Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.38.10 * api-change:`bedrock-agent`: Add support for computer use tools * api-change:`bedrock-agent-runtime`: Add support for computer use tools * api-change:`ce`: Releasing minor partition endpoint updates. * api-change:`connect`: Add support for contact transfers in external voice systems. * api-change:`medialive`: Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: This release updates the default value of pprof-disabled from false to true. * from version 1.38.9 * api-change:`bedrock-agent`: Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: Documentation updates for Amazon CloudFront. * api-change:`ec2`: Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: Several small updates to resolve customer requests. * from version 1.38.8 * api-change:`bedrock`: This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: Doc-only update for CloudTrail. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.38.7 * api-change:`bedrock-runtime`: This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.38.6 * api-change:`elasticache`: Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: AWS IoT SiteWise now supports MQTT-enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: Note support for Database Insights for Amazon RDS. * from version 1.38.5 * api-change:`cognito-idp`: Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: Update the DescribeVpcs response * api-change:`qbusiness`: Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: Add DomainId to CreateDomainResponse * api-change:`transcribe`: Updating documentation for post call analytics job queueing. * from version 1.38.4 * api-change:`bedrock-agent`: This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: Systems Manager doc-only updates for Feb. 2025. * from version 1.38.3 * api-change:`bedrock-agent-runtime`: Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: Definition update for EbsConfiguration. * api-change:`qbusiness`: This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.38.2 * api-change:`application-signals`: This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk- mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk- voice. * api-change:`cloudfront`: Documentation update for VPC origin config. * api-change:`ec2`: Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * from version 1.38.1 * api-change:`codebuild`: Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.38.0 * api-change:`bedrock-agent`: This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: Documentation update, adding clarity and rephrasing. * feature:Endpoints: Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account-id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.37.26 * api-change:`appstream`: Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.37.25 * api-change:`codebuild`: Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: Add support for toolbar configuration under user settings. * from version 1.37.24 * api-change:`codepipeline`: Add environment variables to codepipeline action declaration. * api-change:`ecs`: This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: Documentation updates for Amazon Lightsail. * api-change:`location`: Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.37.23 * api-change:`batch`: This documentation-only update corrects some typos. * api-change:`emr-containers`: EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.37.22 * api-change:`amplify`: Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: This release introduces APIs to manage DbClusters and adds support for read replicas * from version 1.37.21 * api-change:`codebuild`: Added test suite names to test case metadata * api-change:`connect`: Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: Add support for Stop DB feature. * api-change:`s3`: Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: Update Environment and Device name field definitions * from version 1.37.20 * api-change:`accessanalyzer`: This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.37.19 * api-change:`b2bi`: Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: Support for in-place Lustre version upgrades * api-change:`medialive`: Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * from version 1.37.18 * api-change:`acm-pca`: Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: Add support for operation level caching * api-change:`ec2`: Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.37.17 * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`cloudfront`: Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.37.16 * api-change:`ecr`: Adds support to handle the new basic scanning daily quota. * api-change:`eks`: Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.37.15 * api-change:`cloudformation`: We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * from version 1.37.14 * api-change:`rds`: Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.37.13 * api-change:`datasync`: Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: IPv6 support for Hyperpod clusters * from version 1.37.12 * api-change:`mediatailor`: Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * from version 1.37.11 * api-change:`amp`: Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.37.10 * api-change:`appstream`: Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: Add a 'reason' field to InternalServerException * api-change:`ecr`: Temporarily updating dualstack endpoint support * api-change:`ecr-public`: Temporarily updating dualstack endpoint support * api-change:`mediatailor`: Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: Adds Cedar JSON format support for entities and context data in authorization requests * from version 1.37.9 * api-change:`bcm-pricing-calculator`: Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: Add support for Dualstack and Dualstack-with-FIPS Endpoints * api-change:`ecr-public`: Add support for Dualstack Endpoints * api-change:`mailmanager`: This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.37.8 * api-change:`appsync`: Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.37.7 * api-change:`bedrock-agent`: Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * from version 1.37.6 * api-change:`cloudtrail`: This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: Fixed typos in the descriptions. * api-change:`transfer`: Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.37.5 * api-change:`ec2`: Added "future" allocation type for future dated capacity reservation * from version 1.37.4 * api-change:`bedrock-agent-runtime`: Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: Docs Update for timeout changes * api-change:`medialive`: AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.37.3 * api-change:`batch`: Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt- in. * api-change:`logs`: Documentation-only update to address doc errors * api-change:`quicksight`: Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update to 1.37.2 * api-change:`bedrock-runtime`: Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: Doc only update for Detective documentation. * api-change:`ec2`: Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.37.1 * api-change:`ecs`: The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.37.0 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: Now supports streaming for inline agents. * api-change:`cognito-identity`: corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: Mark type in MaintenanceWindow as required. * feature:`s3`: The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.36.40 * api-change:`gamelift`: Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.36.39 * api-change:`artifact`: Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.36.38 * api-change:`redshift`: Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: Fixed typos in the descriptions. * from version 1.36.37 * api-change:`codebuild`: AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.36.36 * api-change:`rds`: Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.36.35 * api-change:`cloudhsmv2`: Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: This release makes Amazon DynamoDB point-in-time- recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * enhancement:`s3 ls`: Expose low-level `ListBuckets` parameters`Prefix`and`BucketRegion`to high-level`s3 ls`command as`\--bucket- name-prefix`and`\--bucket-region``. * from version 1.36.34 * api-change:`iotsecuretunneling`: Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: Allow vanity DNS domain when creating a new ASC instance * from version 1.36.33 * api-change:`ecs`: Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.36.32 * api-change:`appsync`: Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in- progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: In-flight message typo fix from 20k to 120k. * from version 1.36.31 * api-change:`ecr`: Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: Restoring custom endpoint functionality for ECR Public * from version 1.36.30 * api-change:`rds`: Updates Amazon RDS documentation to correct various descriptions. * from version 1.36.29 * api-change:`bcm-pricing-calculator`: Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: Add support for Dualstack Endpoints * api-change:`network-firewall`: Dual-stack endpoints are now supported. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.36.28 * api-change:`ecr`: Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: Add support for Dualstack endpoints * api-change:`eks`: This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.36.27 * api-change:`bedrock-agent`: Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: Added new API's for defining and fetching Billing Views. * api-change:`ce`: Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: This release expands the catalog of upgrade insight checks * api-change:`macie2`: This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.36.26 * api-change:`appstream`: Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: MediaLive is releasing ListVersions api * api-change:`qconnect`: Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.36.25 * api-change:`amplify`: Added WAF Configuration to Amplify Apps * api-change:`budgets`: Releasing minor partition endpoint updates * api-change:`connect`: This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.36.24 * api-change:`account`: Update endpoint configuration. * api-change:`backup`: Add Support for Backup Indexing * api-change:`backupsearch`: Add support for searching backups * api-change:`batch`: This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.36.23 * api-change:`cloud9`: Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.36.22 * api-change:`cloudhsmv2`: Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.36.21 * api-change:`connect`: Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: Improved descriptions for certain APIs. * api-change:`route53domains`: This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.36.20 * api-change:`artifact`: Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: Doc-only updates for CloudTrail. * api-change:`cognito-idp`: Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.36.19 * api-change:`application-autoscaling`: Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update to 1.36.18 * api-change:`appsync`: Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: Added text to clarify case-sensitivity * from version 1.36.17 * api-change:`partnercentral-selling`: Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.36.16 * api-change:`bedrock`: Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.36.15 * api-change:`athena`: Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: Support for configuring AiOps investigation as alarm action * api-change:`datazone`: Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.36.14 * api-change:`bedrock-runtime`: Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: Added support for passing role arn corresponding to the supported event destination * from version 1.36.13 * api-change:`bedrock`: Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for Multi- Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: Add new Multi Domain Correlation findings. * api-change:`security-ir`: AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.36.12 * api-change:`bedrock-agent`: Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.36.11 * api-change:`bedrock-agent`: Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: Private sharing, file upload and data collection feature support for Q Apps * from version 1.36.10 * api-change:`directconnect`: Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.36.9 * api-change:`autoscaling`: Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: Add ProvisionedPollerConfig to Lambda event-source- mapping API. * api-change:`mailmanager`: Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.36.8 * api-change:`apigateway`: Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: Add support for the Amazon Bedrock Runtime. * api-change:`ce`: This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: Adds metadata property to an AffectedEntity. * api-change:`iot`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.36.7 * api-change:`autoscaling`: With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: Added data protection settings with support for inline data redaction. * from version 1.36.6 * api-change:`b2bi`: Add new X12 transactions sets and versions * api-change:`ec2`: This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: Add support for the new parameters in EFS replication APIs * api-change:`glue`: AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.36.5 * api-change:`appconfig`: AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adding request and response elements for managed resources. * api-change:`ecs`: This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.36.4 * api-change:`cloudwatch`: Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.36.3 * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.36.2 * api-change:`accessanalyzer`: Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update to 1.36.1 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.36.0 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * feature:shorthand: Adds support to shorthand syntax for loading parameters from files via the `@=` assignment operator. * from version 1.35.24 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.23 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.22 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.21 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * from version 1.35.20 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.19 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.18 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.17 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.16 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.15 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.14 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields * bugfix:shorthand: Improve performance when parsing invalid shorthand syntax. * Update to 1.35.13 * api-change:`bedrock`: Doc updates for supporting converse * api-change:`connect`: Amazon Connect Service Feature: Add support to start screen sharing for a web calling contact. * api-change:`ec2`: Amazon EC2 X8g, C8g and M8g instances are powered by AWS Graviton4 processors. X8g provide the lowest cost per GiB of memory among Graviton4 instances. C8g provide the best price performance for compute- intensive workloads. M8g provide the best price performance in for general purpose workloads. * api-change:`mwaa`: Introducing InvokeRestApi which allows users to invoke the Apache Airflow REST API on the webserver with the specified inputs. * api-change:`payment-cryptography`: Add support for ECC P-256 and P-384 Keys. * api-change:`payment-cryptography-data`: Add ECDH support on PIN operations. * from version 1.35.12 * api-change:`bedrock-runtime`: Updating invoke regex to support imported models for converse API * api-change:`imagebuilder`: Add macOS platform and instance placement options * api-change:`m2`: Add AuthSecretsManagerArn optional parameter to batch job APIs, expand batch parameter limits, and introduce clientToken constraints. * api-change:`rds`: Global clusters now expose the Endpoint attribute as one of its fields. It is a Read/Write endpoint for the global cluster which resolves to the Global Cluster writer instance. * api-change:`repostspace`: Adds the BatchAddRole and BatchRemoveRole APIs. * api-change:`timestream-query`: This release adds support for Query Insights, a feature that provides details of query execution, enabling users to identify areas for improvement to optimize their queries, resulting in improved query performance and lower query costs. * from version 1.35.11 * api-change:`application-insights`: This feature enables customers to specify SNS Topic ARN. CloudWatch Application Insights (CWAI) will utilize this ARN to send problem notifications. * api-change:`autoscaling`: Adds support for removing the PlacementGroup setting on an Auto Scaling Group through the UpdateAutoScalingGroup API. * api-change:`bedrock-agent-runtime`: Knowledge Bases for Amazon Bedrock now supports custom prompts and model parameters in the orchestrationConfiguration of the RetrieveAndGenerate API. The modelArn field accepts Custom Models and Imported Models ARNs. * api-change:`dms`: Added support for tagging in StartReplicationTaskAssessmentRun API and introduced IsLatestTaskAssessmentRun and ResultStatistic fields for enhanced tracking and assessment result statistics. * api-change:`ec2`: Amazon EC2 now allows you to create network interfaces with just the EFA driver and no ENA driver by specifying the network interface type as efa-only. * api-change:`eks`: This release adds support for Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift with EKS that enhances the resiliency of multi-AZ cluster environments * api-change:`fms`: Update AWS WAF policy - add the option to retrofit existing web ACLs instead of creating all new web ACLs. * api-change:`payment-cryptography-data`: Adding new API to generate authenticated scripts for EMV pin change use cases. * api-change:`wafv2`: Add a property to WebACL to indicate whether it's been retrofitted by Firewall Manager. * from version 1.35.10 * api-change:`athena`: Removing FEDERATED from Create/List/Delete/GetDataCatalog API * api-change:`bedrock`: Adding converse support to CMI API's * api-change:`bedrock-runtime`: Added converse support for custom imported models * api-change:`datazone`: Adding the following project member designations: PROJECT_CATALOG_VIEWER, PROJECT_CATALOG_CONSUMER and PROJECT_CATALOG_STEWARD in the CreateProjectMembership API and PROJECT_CATALOG_STEWARD designation in the AddPolicyGrant API. * api-change:`ec2`: RequestSpotInstances and RequestSpotFleet feature release. * from version 1.35.9 * api-change:`bedrock-agent`: Removing support for topK property in PromptModelInferenceConfiguration object, Making PromptTemplateConfiguration property as required, Limiting the maximum PromptVariant to 1 * api-change:`dataexchange`: This release adds Data Grant support, through which customers can programmatically create data grants to share with other AWS accounts and accept data grants from other AWS accounts. * api-change:`ecs`: This is an Amazon ECS documentation only update to address tickets. * api-change:`pinpoint-sms-voice-v2`: Added the registrations status of REQUIRES_AUTHENTICATION * api-change:`pipes`: This release adds validation to require specifying a SecurityGroup and Subnets in the Vpc object under PipesSourceSelfManagedKafkaParameters. It also adds support for iso-e, iso-f, and other non-commercial partitions in ARN parameters. * api-change:`quicksight`: Add StartDashboardSnapshotJobSchedule API. RestoreAnalysis now supports restoring analysis to folders. * api-change:`rds`: Updates Amazon RDS documentation for TAZ IAM support * api-change:`workspaces`: Updated the DomainName pattern for Active Directory * from version 1.35.8 * api-change:`s3`: Add support for the new optional bucket-region and prefix query parameters in the ListBuckets API. For ListBuckets requests that express pagination, Amazon S3 will now return both the bucket names and associated AWS regions in the response. * from version 1.35.7 * api-change:`amplify`: Added sourceUrlType field to StartDeployment request * api-change:`cloudformation`: Documentation update for AWS CloudFormation API Reference. * api-change:`codebuild`: Enable proxy for reserved capacity fleet. * api-change:`ivs`: On a channel that you own, you can now replace an ongoing stream with a new stream by streaming up with the priority parameter appended to the stream key. * api-change:`qbusiness`: Amazon Q Business now supports embedding the Amazon Q Business web experience on third-party websites. * api-change:`redshift`: This release launches the CreateIntegration, DeleteIntegration, DescribeIntegrations and ModifyIntegration APIs to create and manage Amazon Redshift Zero-ETL Integrations. * api-change:`resiliencehub`: AWS Resilience Hub now integrates with the myApplications platform, enabling customers to easily assess the resilience of applications defined in myApplications. The new Resiliency widget provides visibility into application resilience and actionable recommendations for improvement. * api-change:`sesv2`: This release adds support for email maximum delivery seconds that allows senders to control the time within which their emails are attempted for delivery. * from version 1.35.6 * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support automatically retrying failed stages and skipping stage for failed entry conditions. * api-change:`mailmanager`: Mail Manager support for viewing and exporting metadata of archived messages. * api-change:`securitylake`: This release updates request validation regex for resource ARNs. * api-change:`supplychain`: This release adds AWS Supply Chain instance management functionality. Specifically adding CreateInstance, DeleteInstance, GetInstance, ListInstances, and UpdateInstance APIs. * api-change:`transfer`: This release enables customers using SFTP connectors to query the transfer status of their files to meet their monitoring needs as well as orchestrate post transfer actions. * from version 1.35.5 * api-change:`appflow`: Doc only updates for clarification around OAuth2GrantType for Salesforce. * api-change:`elbv2`: Add zonal_shift.config.enabled attribute. Add new AdministrativeOverride construct in the describe-target-health API response to include information about the override status applied to a target. * api-change:`emr`: This release provides new parameter "Context" in instance fleet clusters. * api-change:`guardduty`: Added a new field for network connection details. * api-change:`robomaker`: Documentation update: added support notices to each API action. * from version 1.35.4 * api-change:`acm-pca`: Documentation updates for AWS Private CA. * api-change:`dms`: Introduces DescribeDataMigrations, CreateDataMigration, ModifyDataMigration, DeleteDataMigration, StartDataMigration, StopDataMigration operations to SDK. Provides FailedDependencyFault error message. * api-change:`ec2`: This release adds support for assigning the billing of shared Amazon EC2 On-Demand Capacity Reservations. * api-change:`ecs`: This is a documentation only release that updates to documentation to let customers know that Amazon Elastic Inference is no longer available. * api-change:`elastic-inference`: Elastic Inference - Documentation update to add service shutdown notice. * api-change:`iotfleetwise`: Refine campaign related API validations * api-change:`neptune-graph`: Support for 16 m-NCU graphs available through account allowlisting * api-change:`outposts`: Adding new "DELIVERED" enum value for Outposts Order status * api-change:`route53resolver`: Route 53 Resolver Forwarding Rules can now include a server name indication (SNI) in the target address for rules that use the DNS-over-HTTPS (DoH) protocol. When a DoH-enabled Outbound Resolver Endpoint forwards a request to a DoH server, it will provide the SNI in the TLS handshake. * api-change:`socialmessaging`: This release for AWS End User Messaging includes a public SDK, providing a suite of APIs that enable sending WhatsApp messages to end users. * api-change:`timestream-influxdb`: This release updates our regex based validation rules in regards to valid DbInstance and DbParameterGroup name. * from version 1.35.3 * api-change:`codepipeline`: AWS CodePipeline introduces a Compute category * from version 1.35.2 * api-change:`elasticache`: AWS ElastiCache SDK now supports using APIs with newly launched Valkey engine. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for newly launched Valkey engine. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * enhancement:`s3`: Adds logic to gracefully handle invalid timestamps returned in the Expires header. * from version 1.35.1 * api-change:`deadline`: Add support for using the template from a previous job during job creation and listing parameter definitions for a job. * api-change:`marketplace-reporting`: Documentation-only update for AWS Marketplace Reporting API. * api-change:`qconnect`: This release adds support for the following capabilities: Configuration of the Gen AI system via AIAgent and AIPrompts. Integration support for Bedrock Knowledge Base. * api-change:`redshift`: Add validation pattern to S3KeyPrefix on the EnableLogging API * from version 1.35.0 * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`iot-data`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * feature:s3: Adds `--checksum-mode` and `--checksum-algorithm` parameters to high-level `s3` commands. * from version 1.34.33 * api-change:`codepipeline`: AWS CodePipeline introduces Commands action that enables you to easily run shell commands as part of your pipeline execution. * api-change:`connect`: Public GetMetricDataV2 Grouping increase from 3 to 4 * api-change:`ec2`: This release includes a new API for modifying instance cpu-options after launch. * api-change:`iot`: This release adds support for Custom Authentication with X.509 Client Certificates, support for Custom Client Certificate validation, and support for selecting application protocol and authentication type without requiring TLS ALPN for customer's AWS IoT Domain Configurations. * api-change:`marketplace-reporting`: The AWS Marketplace Reporting service introduces the GetBuyerDashboard API. This API returns a dashboard that provides visibility into your organization's AWS Marketplace agreements and associated spend across the AWS accounts in your organization. * api-change:`mediapackagev2`: Added support for ClipStartTime on the FilterConfiguration object on OriginEndpoint manifest settings objects. Added support for EXT-X-START tags on produced HLS child playlists. * api-change:`quicksight`: QuickSight: Add support for exporting and importing folders in AssetBundle APIs * from version 1.34.32 * api-change:`appstream`: Added support for Automatic Time Zone Redirection on Amazon AppStream 2.0 * api-change:`b2bi`: Added and updated APIs to support outbound EDI transformations * api-change:`bedrock-agent-runtime`: Added raw model response and usage metrics to PreProcessing and PostProcessing Trace * api-change:`bedrock-runtime`: Added new fields to Amazon Bedrock Guardrails trace * api-change:`iotdeviceadvisor`: Add clientToken attribute and implement idempotency for CreateSuiteDefinition. * api-change:`ivs-realtime`: Adds new Stage Health EventErrorCodes applicable to RTMP(S) broadcasts. Bug Fix: Enforces that EncoderConfiguration Video height and width must be even-number values. * api-change:`s3`: This release introduces a header representing the minimum object size limit for Lifecycle transitions. * api-change:`sagemaker`: releasing builtinlcc to public * api-change:`workspaces`: WSP is being rebranded to become DCV. * from version 1.34.31 * api-change:`bedrock-agent`: This release adds support to stop an ongoing ingestion job using the StopIngestionJob API in Agents for Amazon Bedrock. * api-change:`codeartifact`: Add support for the dual stack endpoints. * api-change:`rds`: This release provides additional support for enabling Aurora Limitless Database DB clusters. * from version 1.34.30 * api-change:`bedrock`: Add support for custom models via provisioned throughput for Bedrock Model Evaluation * api-change:`clouddirectory`: Add examples for API operations in model. * api-change:`connect`: Amazon Connect introduces StartOutboundChatContact API allowing customers to initiate outbound chat contacts * api-change:`pricing`: Add examples for API operations in model. * api-change:`resource-groups`: This update includes new APIs to support application groups and to allow users to manage resource tag-sync tasks in applications. * api-change:`supplychain`: Release DataLakeDataset, DataIntegrationFlow and ResourceTagging APIs for AWS Supply Chain * api-change:`timestream-influxdb`: Timestream for InfluxDB now supports port configuration and additional customer-modifiable InfluxDB v2 parameters. This release adds Port to the CreateDbInstance and UpdateDbInstance API, and additional InfluxDB v2 parameters to the CreateDbParameterGroup API. * api-change:`verifiedpermissions`: Add examples for API operations in model. * from version 1.34.29 * api-change:`customer-profiles`: Introduces optional RoleArn parameter for PutIntegration request and includes RoleArn in the response of PutIntegration, GetIntegration and ListIntegrations * api-change:`quicksight`: Adding personalization in QuickSight data stories. Admins can enable or disable personalization through QuickSight settings. * api-change:`securityhub`: Documentation updates for AWS Security Hub * api-change:`sesv2`: This release adds support for engagement tracking over Https using custom domains. * from version 1.34.28 * api-change:`chatbot`: Return State and StateReason fields for Chatbot Channel Configurations. * api-change:`lambda`: Reverting Lambda resource-based policy and block public access APIs. * api-change:`organizations`: Add support for policy operations on the CHATBOT_POLICY policy type. * api-change:`pcs`: AWS PCS API documentation - Edited the description of the iamInstanceProfileArn parameter of the CreateComputeNodeGroup and UpdateComputeNodeGroup actions; edited the description of the SlurmCustomSetting data type to list the supported parameters for clusters and compute node groups. * api-change:`rds-data`: Documentation update for RDS Data API to reflect support for Aurora MySQL Serverless v2 and Provisioned DB clusters. * api-change:`sagemaker`: Adding `TagPropagation` attribute to Sagemaker API * from version 1.34.27 * api-change:`cloudtrail`: Doc-only update for CloudTrail network activity events release (in preview) * api-change:`ec2`: Updates to documentation for the transit gateway security group referencing feature. * api-change:`fsx`: Doc-only update to address Lustre S3 hard-coded names. * from version 1.34.26 * api-change:`bedrock`: Add support for Cross Region Inference in Bedrock Model Evaluations. * api-change:`budgets`: Releasing minor partitional endpoint updates * api-change:`kinesis`: This release includes support to add tags when creating a stream * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging SMS-Voice V2 has added support for resource policies. Use the three new APIs to create, view, edit, and delete resource policies. * api-change:`sagemaker`: Adding `HiddenInstanceTypes` and `HiddenSageMakerImageVersionAliases` attribute to SageMaker API * from version 1.34.25 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`athena`: List/Get/Update/Delete/CreateDataCatalog now integrate with AWS Glue connections. Users can create a Glue connection through Athena or use a Glue connection to define their Athena federated parameters. * api-change:`bedrock-agent`: Amazon Bedrock Prompt Flows and Prompt Management now supports using inference profiles to increase throughput and improve resilience. * api-change:`ec2`: Amazon EC2 G6e instances powered by NVIDIA L40S Tensor Core GPUs are the most cost-efficient GPU instances for deploying generative AI models and the highest performance GPU instances for spatial computing workloads. * api-change:`emr-serverless`: This release adds support for job concurrency and queuing configuration at Application level. * api-change:`glue`: Added AthenaProperties parameter to Glue Connections, allowing Athena to store service specific properties on Glue Connections. * api-change:`rds`: Support ComputeRedundancy parameter in ModifyDBShardGroup API. Add DBShardGroupArn in DBShardGroup API response. Remove InvalidMaxAcuFault from CreateDBShardGroup and ModifyDBShardGroup API. Both API will throw InvalidParameterValueException for invalid ACU configuration. * api-change:`resource-explorer-2`: AWS Resource Explorer released ListResources feature which allows customers to list all indexed AWS resources within a view. * from version 1.34.24 * api-change:`dynamodb`: Generate account endpoint for DynamoDB requests when the account ID is available * api-change:`neptune`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`sagemaker`: Amazon SageMaker now supports using manifest files to specify the location of uncompressed model artifacts within Model Packages * api-change:`sagemaker-metrics`: This release introduces support for the SageMaker Metrics BatchGetMetrics API. * api-change:`workspaces`: Releasing new ErrorCodes for SysPrep failures during ImageImport and CreateImage process * enhancement:paginator: Add warning when a non-positive value is provided for the max-items pagination parameter. * from version 1.34.23 * api-change:`codeconnections`: This release adds the PullRequestComment field to CreateSyncConfiguration API input, UpdateSyncConfiguration API input, GetSyncConfiguration API output and ListSyncConfiguration API output * api-change:`glue`: This change is for releasing TestConnection api SDK model * api-change:`lambda`: Tagging support for Lambda event source mapping, and code signing configuration resources. * api-change:`mediaconvert`: This release provides support for additional DRM configurations per SPEKE Version 2.0. * api-change:`medialive`: Adds Bandwidth Reduction Filtering for HD AVC and HEVC encodes, multiplex container settings. * api-change:`quicksight`: QuickSight: 1. Add new API - ListFoldersForResource. 2. Commit mode adds visibility configuration of Apply button on multi-select controls for authors. * api-change:`sagemaker`: Introduced support for G6e instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`workspaces-web`: WorkSpaces Secure Browser now enables Administrators to view and manage end-user browsing sessions via Session Management APIs. * from version 1.34.22 * api-change:`ce`: This release extends the GetReservationPurchaseRecommendation API to support recommendations for Amazon DynamoDB reservations. * api-change:`ds`: Added new APIs for enabling, disabling, and describing access to the AWS Directory Service Data API * api-change:`ds-data`: Added new AWS Directory Service Data API, enabling you to manage data stored in AWS Directory Service directories. This includes APIs for creating, reading, updating, and deleting directory users, groups, and group memberships. * api-change:`guardduty`: Add `launchType` and `sourceIPs` fields to GuardDuty findings. * api-change:`mailmanager`: Introduce a new RuleSet condition evaluation, where customers can set up a StringExpression with a MimeHeader condition. This condition will perform the necessary validation based on the X-header provided by customers. * api-change:`rds`: Updates Amazon RDS documentation with information upgrading snapshots with unsupported engine versions for RDS for MySQL and RDS for PostgreSQL. * api-change:`s3`: Added SSE-KMS support for directory buckets. * Update to 1.34.21 * api-change:`codebuild`: GitLab Enhancements - Add support for Self-Hosted GitLab runners in CodeBuild. Add group webhooks * api-change:`ecr`: The `DescribeImageScanning` API now includes `fixAvailable`, `exploitAvailable`, and `fixedInVersion` fields to provide more detailed information about the availability of fixes, exploits, and fixed versions for identified image vulnerabilities. * api-change:`ecs`: This is a documentation only release to address various tickets. * api-change:`lambda`: Support for JSON resource-based policies and block public access * api-change:`rds`: Updates Amazon RDS documentation with configuration information about the BYOL model for RDS for Db2. * api-change:`ssm`: Support for additional levels of cross-account, cross- Region organizational units in Automation. Various documentation updates. * from version 1.34.20 * api-change:`bedrock`: This feature adds cross account s3 bucket and VPC support to ModelInvocation jobs. To use a cross account bucket, pass in the accountId of the bucket to s3BucketOwner in the ModelInvocationJobInputDataConfig or ModelInvocationJobOutputDataConfig. * api-change:`iot`: This release adds additional enhancements to AWS IoT Device Management Software Package Catalog and Jobs. It also adds SBOM support in Software Package Version. * api-change:`medialive`: Removing the ON_PREMISE enum from the input settings field. * api-change:`organizations`: Doc only update for AWS Organizations that fixes several customer-reported issues * api-change:`pca-connector-scep`: This is a general availability (GA) release of Connector for SCEP, a feature of AWS Private CA. Connector for SCEP links your SCEP-enabled and mobile device management systems to AWS Private CA for digital signature installation and certificate management. * api-change:`rds`: Launching Global Cluster tagging. * from version 1.34.19 * api-change:`amplify`: Doc only update to Amplify to explain platform setting for Next.js 14 SSG only applications * api-change:`ivs`: Updates to all tags descriptions. * api-change:`ivschat`: Updates to all tags descriptions. * from version 1.34.18 * api-change:`cognito-idp`: Added email MFA option to user pools with advanced security features. * api-change:`elbv2`: Correct incorrectly mapped error in ELBv2 waiters * api-change:`emr`: Update APIs to allow modification of ODCR options, allocation strategy, and InstanceTypeConfigs on running InstanceFleet clusters. * api-change:`glue`: AWS Glue is introducing two new optimizers for Apache Iceberg tables: snapshot retention and orphan file deletion. Customers can enable these optimizers and customize their configurations to perform daily maintenance tasks on their Iceberg tables based on their specific requirements. * api-change:`mediaconvert`: This release includes support for dynamic video overlay workflows, including picture-in-picture and squeezeback * api-change:`rds`: This release adds support for the os-upgrade pending maintenance action for Amazon Aurora DB clusters. * api-change:`storagegateway`: The S3 File Gateway now supports DSSE-KMS encryption. A new parameter EncryptionType is added to these APIs: CreateSmbFileShare, CreateNfsFileShare, UpdateSmbFileShare, UpdateNfsFileShare, DescribeSmbFileShares, DescribeNfsFileShares. Also, in favor of EncryptionType, KmsEncrypted is deprecated. * api-change:`synthetics`: This release introduces two features. The first is tag replication, which allows for the propagation of canary tags onto Synthetics related resources, such as Lambda functions. The second is a limit increase in canary name length, which has now been increased from 21 to 255 characters. * from version 1.34.17 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using inference profiles to increase throughput and improve resilience. * api-change:`bedrock-agent-runtime`: Amazon Bedrock Knowledge Bases now supports using inference profiles to increase throughput and improve resilience. * api-change:`ecr`: Added KMS_DSSE to EncryptionType * api-change:`guardduty`: Add support for new statistic types in GetFindingsStatistics. * api-change:`lexv2-models`: Support new Polly voice engines in VoiceSettings: long-form and generative * api-change:`medialive`: Adds AV1 Codec support, SRT ouputs, and MediaLive Anywhere support. * from version 1.34.16 * api-change:`chime-sdk-voice`: Documentation-only update that clarifies the ValidateE911Address action of the Amazon Chime SDK Voice APIs. * api-change:`cognito-identity`: This release adds sensitive trait to some required shapes. * api-change:`pipes`: This release adds support for customer managed KMS keys in Amazon EventBridge Pipe * api-change:`securityhub`: Documentation update for Security Hub * from version 1.34.15 * api-change:`dynamodb`: Doc-only update for DynamoDB. Added information about async behavior for TagResource and UntagResource APIs and updated the description of ResourceInUseException. * api-change:`elbv2`: Add paginators for the ELBv2 DescribeListenerCertificates and DescribeRules APIs. Fix broken waiter for the ELBv2 DescribeLoadBalancers API. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to broadcast to Stages using RTMP(S). * api-change:`kafka`: Amazon MSK Replicator can now replicate data to identically named topics between MSK clusters within the same AWS Region or across different AWS Regions. * api-change:`sagemaker`: Amazon Sagemaker supports orchestrating SageMaker HyperPod clusters with Amazon EKS * api-change:`sagemaker-runtime`: AWS SageMaker Runtime feature: Add sticky routing to support stateful inference models. * from version 1.34.14 * api-change:`qapps`: Adds UpdateLibraryItemMetadata api to change status of app for admin verification feature and returns isVerified field in any api returning the app or library item. * from version 1.34.13 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives using a new calculation type. Users can now create SLOs which are configured with request-based SLIs to help meet their specific business requirements. * api-change:`codepipeline`: Updates to add recent notes to APIs and to replace example S3 bucket names globally. * api-change:`connect`: Amazon Connect Custom Vocabulary now supports Catalan (Spain), Danish (Denmark), Dutch (Netherlands), Finnish (Finland), Indonesian (Indonesia), Malay (Malaysia), Norwegian Bokmal (Norway), Polish (Poland), Swedish (Sweden), and Tagalog/Filipino (Philippines). * api-change:`gamelift`: Amazon GameLift provides additional events for tracking the fleet creation process. * api-change:`kinesisanalyticsv2`: Support for Flink 1.20 in Managed Service for Apache Flink * api-change:`sagemaker`: Amazon SageMaker now supports idle shutdown of JupyterLab and CodeEditor applications on SageMaker Studio. * from version 1.34.12 * api-change:`appsync`: Adds new logging levels (INFO and DEBUG) for additional log output control * api-change:`bedrock-agent`: Add support for user metadata inside PromptVariant. * api-change:`finspace`: Updates Finspace documentation for smaller instances. * api-change:`fis`: This release adds safety levers, a new mechanism to stop all running experiments and prevent new experiments from starting. * api-change:`logs`: Update to support new APIs for delivery of logs from AWS services. * api-change:`s3control`: Amazon Simple Storage Service /S3 Access Grants / Features : This release launches new Access Grants API - ListCallerAccessGrants. * from version 1.34.11 * api-change:`connect`: Release ReplicaConfiguration as part of DescribeInstance * api-change:`datazone`: Add support to let data publisher specify a subset of the data asset that a subscriber will have access to based on the asset filters provided, when accepting a subscription request. * api-change:`elbv2`: This release adds support for configuring TCP idle timeout on NLB and GWLB listeners. * api-change:`mediaconnect`: AWS Elemental MediaConnect introduces thumbnails for Flow source monitoring. Thumbnails provide still image previews of the live content feeding your MediaConnect Flow allowing you to easily verify that your source is operating as expected. * api-change:`medialive`: Added MinQP as a Rate Control option for H264 and H265 encodes. * api-change:`sagemaker`: Amazon SageMaker now supports automatic mounting of a user's home folder in the Amazon Elastic File System (EFS) associated with the SageMaker Studio domain to their Studio Spaces to enable users to share data between their own private spaces. * api-change:`timestream-influxdb`: Timestream for InfluxDB now supports compute scaling and deployment type conversion. This release adds the DbInstanceType and DeploymentType parameters to the UpdateDbInstance API. * Update to 1.34.10 * api-change:`backup`: The latest update introduces two new attributes, VaultType and VaultState, to the DescribeBackupVault and ListBackupVaults APIs. The VaultState attribute reflects the current status of the vault, while the VaultType attribute indicates the specific category of the vault. * api-change:`datazone`: Amazon DataZone now adds new governance capabilities of Domain Units for organization within your Data Domains, and Authorization Policies for tighter controls. * api-change:`logs`: This release introduces a new optional parameter: Entity, in PutLogEvents request * api-change:`redshift-data`: The release include the new Redshift DataAPI feature for session use, customer execute query with --session-keep-alive- seconds parameter and can submit follow-up queries to same sessions with returned`session-id` * from version 1.34.9 * api-change:`bedrock-agent-runtime`: Lifting the maximum length on Bedrock KnowledgeBase RetrievalFilter array * api-change:`bedrock-runtime`: Add support for imported-model in invokeModel and InvokeModelWithResponseStream. * api-change:`personalize`: This releases ability to update automatic training scheduler for customer solutions * api-change:`quicksight`: Increased Character Limit for Dataset Calculation Field expressions * api-change:`stepfunctions`: This release adds support for static analysis to ValidateStateMachineDefinition API, which can now return optional WARNING diagnostics for semantic errors on the definition of an Amazon States Language (ASL) state machine. * api-change:`wafv2`: The minimum request rate for a rate-based rule is now 10. Before this, it was 100. * from version 1.34.8 * api-change:`appconfig`: This release adds support for deletion protection, which is a safety guardrail to prevent the unintentional deletion of a recently used AWS AppConfig Configuration Profile or Environment. This also includes a change to increase the maximum length of the Name parameter in UpdateConfigurationProfile. * api-change:`datazone`: Update regex to include dot character to be consistent with IAM role creation in the authorized principal field for create and update subscription target. * api-change:`devicefarm`: This release removed support for Calabash, UI Automation, Built-in Explorer, remote access record, remote access replay, and web performance profile framework in ScheduleRun API. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now allows customers to provision IPv4 CIDR blocks and allocate Elastic IP Addresses directly from IPAM pools with public IPv4 space * api-change:`internetmonitor`: Adds new querying types to show overall traffic suggestion information for monitors * api-change:`pcs`: Introducing AWS Parallel Computing Service (AWS PCS), a new service makes it easy to setup and manage high performance computing (HPC) clusters, and build scientific and engineering models at virtually any scale on AWS. * api-change:`workspaces`: Documentation-only update that clarifies the StartWorkspaces and StopWorkspaces actions, and a few other minor edits. * from version 1.34.7 * api-change:`bedrock`: Amazon Bedrock SDK updates for Inference Profile. * api-change:`bedrock-runtime`: Amazon Bedrock SDK updates for Inference Profile. * api-change:`chatbot`: Update documentation to be consistent with the API docs * api-change:`omics`: Adds data provenance to import jobs from read sets and references * api-change:`polly`: Amazon Polly adds 2 new voices: Jitka (cs-CZ) and Sabrina (de-CH). * from version 1.34.6 * api-change:`iotsitewise`: AWS IoT SiteWise now supports versioning for asset models. It enables users to retrieve active version of their asset model and perform asset model writes with optimistic lock. * api-change:`workspaces`: This release adds support for creating and managing directories that use AWS IAM Identity Center as user identity source. Such directories can be used to create non-Active Directory domain joined WorkSpaces Personal.Updated RegisterWorkspaceDirectory and DescribeWorkspaceDirectories APIs. * from version 1.34.5 * api-change:`bedrock-agent`: Releasing the support for Action User Confirmation. * api-change:`bedrock-agent-runtime`: Releasing the support for Action User Confirmation. * api-change:`codebuild`: Added support for the MAC_ARM environment type for CodeBuild fleets. * api-change:`organizations`: Releasing minor partitional endpoint updates. * api-change:`qbusiness`: Amazon QBusiness: Enable support for SAML and OIDC federation through AWS IAM Identity Provider integration. * api-change:`supplychain`: Update API documentation to clarify the event SLA as well as the data model expectations * from version 1.34.4 * api-change:`autoscaling`: Amazon EC2 Auto Scaling now provides EBS health check to manage EC2 instance replacement * api-change:`bedrock`: Amazon Bedrock Evaluation BatchDeleteEvaluationJob API allows customers to delete evaluation jobs under terminated evaluation job statuses - Stopped, Failed, or Completed. Customers can submit a batch of 25 evaluation jobs to be deleted at once. * api-change:`emr-containers`: Correct endpoint for FIPS is configured for US Gov Regions. * api-change:`inspector2`: Add enums for Agentless scan statuses and EC2 enablement error states * api-change:`quicksight`: Explicit query for authors and dashboard viewing sharing for embedded users * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Malaysia) Region (ap-southeast-5) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * from version 1.34.3 * api-change:`ec2`: DescribeInstanceStatus now returns health information on EBS volumes attached to Nitro instances * api-change:`entityresolution`: Increase the mapping attributes in Schema to 35. * api-change:`glue`: Add optional field JobRunQueuingEnabled to CreateJob and UpdateJob APIs. * api-change:`lambda`: Release FilterCriteria encryption for Lambda EventSourceMapping, enabling customers to encrypt their filter criteria using a customer-owned KMS key. * api-change:`securityhub`: Security Hub documentation and definition updates * api-change:`ses`: Enable email receiving customers to provide SES with access to their S3 buckets via an IAM role for "Deliver to S3 Action" * from version 1.34.2 * api-change:`ecs`: Documentation only release to address various tickets * api-change:`opensearchserverless`: Added FailureCode and FailureMessage to BatchGetCollectionResponse for BatchGetVPCEResponse for non-Active Collection and VPCE. * api-change:`s3`: Amazon Simple Storage Service / Features : Add support for conditional writes for PutObject and CompleteMultipartUpload APIs. * from version 1.34.1 * api-change:`bedrock`: Amazon Bedrock Batch Inference/ Model Invocation is a feature which allows customers to asynchronously run inference on a large set of records/files stored in S3. * api-change:`codebuild`: AWS CodeBuild now supports creating fleets with macOS platform for running builds. * api-change:`deadline`: This release adds additional search fields and provides sorting by multiple fields. * api-change:`lambda`: Release Lambda FunctionRecursiveConfig, enabling customers to turn recursive loop detection on or off on individual functions. This release adds two new APIs, GetFunctionRecursionConfig and PutFunctionRecursionConfig. * api-change:`ssm-sap`: Add new attributes to the outputs of GetApplication and GetDatabase APIs. * from version 1.34.0 * api-change:`batch`: Improvements of integration between AWS Batch and EC2. * api-change:`inspector2`: Update the correct format of key and values for resource tags * api-change:`quicksight`: Amazon QuickSight launches Customer Managed Key (CMK) encryption for Data Source metadata * api-change:`sagemaker`: Introduce Endpoint and EndpointConfig Arns in sagemaker:ListPipelineExecutionSteps API response * api-change:`sesv2`: Marking use case description field of account details as deprecated. * enhancement:`codeartifact`: Update login command error message. * from version 1.33.44 * api-change:`docdb`: This release adds Global Cluster Failover capability which enables you to change your global cluster's primary AWS region, the region that serves writes, during a regional outage. Performing a failover action preserves your Global Cluster setup. * api-change:`ecs`: This release introduces a new ContainerDefinition configuration to support the customer-managed keys for ECS container restart feature. * api-change:`iam`: Make the LastUsedDate field in the GetAccessKeyLastUsed response optional. This may break customers who only call the API for access keys with a valid LastUsedDate. This fixes a deserialization issue for access keys without a LastUsedDate, because the field was marked as required but could be null. * api-change:`s3`: Amazon Simple Storage Service / Features : Adds support for pagination in the S3 ListBuckets API. * from version 1.33.43 * api-change:`codebuild`: AWS CodeBuild now supports using Secrets Manager to store git credentials and using multiple source credentials in a single project. * from version 1.33.42 * api-change:`amplify`: Add a new field "cacheConfig" that enables users to configure the CDN cache settings for an App * api-change:`appstream`: This release includes following new APIs: CreateThemeForStack, DescribeThemeForStack, UpdateThemeForStack, DeleteThemeForStack to support custom branding programmatically. * api-change:`fis`: This release adds support for additional error information on experiment failure. It adds the error code, location, and account id on relevant failures to the GetExperiment and ListExperiment API responses. * api-change:`glue`: Add AttributesToGet parameter support for Glue GetTables * api-change:`neptune-graph`: Amazon Neptune Analytics provides a new option for customers to load data into a graph using the RDF (Resource Description Framework) NTRIPLES format. When loading NTRIPLES files, use the value `convertToIri` for the `blankNodeHandling` parameter. * from version 1.33.41 * api-change:`compute-optimizer`: Doc only update for Compute Optimizer that fixes several customer-reported issues relating to ECS finding classifications * api-change:`config`: Documentation update for the OrganizationConfigRuleName regex pattern. * api-change:`ec2`: This release adds new capabilities to manage On-Demand Capacity Reservations including the ability to split your reservation, move capacity between reservations, and modify the instance eligibility of your reservation. * api-change:`eks`: Added support for new AL2023 GPU AMIs to the supported AMITypes. * api-change:`groundstation`: Updating documentation for OEMEphemeris to link to AWS Ground Station User Guide * api-change:`medialive`: AWS Elemental MediaLive now supports now supports editing the PID values for a Multiplex. * api-change:`sagemaker`: Releasing large data support as part of CreateAutoMLJobV2 in SageMaker Autopilot and CreateDomain API for SageMaker Canvas. * from version 1.33.40 * api-change:`cognito-idp`: Fixed a description of AdvancedSecurityAdditionalFlows in Amazon Cognito user pool configuration. * api-change:`connect`: This release supports adding RoutingCriteria via UpdateContactRoutingData public API. * api-change:`ssm`: Systems Manager doc-only updates for August 2024. * from version 1.33.39 * api-change:`cognito-idp`: Added support for threat protection for custom authentication in Amazon Cognito user pools. * api-change:`connect`: This release fixes a regression in number of access control tags that are allowed to be added to a security profile in Amazon Connect. You can now add up to four access control tags on a single security profile. * api-change:`ec2`: Launch of private IPv6 addressing for VPCs and Subnets. VPC IPAM supports the planning and monitoring of private IPv6 usage. * api-change:`glue`: This release adds support to retrieve the validation status when creating or updating Glue Data Catalog Views. Also added is support for BasicCatalogTarget partition keys. * from version 1.33.38 * api-change:`appintegrations`: Updated CreateDataIntegration and CreateDataIntegrationAssociation API to support bulk data export from Amazon Connect Customer Profiles to the customer S3 bucket. * api-change:`glue`: Introducing AWS Glue Data Quality anomaly detection, a new functionality that uses ML-based solutions to detect data anomalies users have not explicitly defined rules for. * from version 1.33.37 * api-change:`bedrock-agent-runtime`: Introduce model invocation output traces for orchestration traces, which contain the model's raw response and usage. * api-change:`cognito-idp`: Advanced security feature updates to include password history and log export for Cognito user pools. * api-change:`cost-optimization-hub`: This release adds savings percentage support to the ListRecommendationSummaries API. * api-change:`workspaces`: Added support for BYOL_GRAPHICS_G4DN_WSP IngestionProcess * from version 1.33.36 * api-change:`datazone`: This releases Data Product feature. Data Products allow grouping data assets into cohesive, self-contained units for ease of publishing for data producers, and ease of finding and accessing for data consumers. * api-change:`ecr`: Released two new APIs along with documentation updates. The GetAccountSetting API is used to view the current basic scan type version setting for your registry, while the PutAccountSetting API is used to update the basic scan type version for your registry. * api-change:`kinesis-video-webrtc-storage`: Add JoinStorageSessionAsViewer API * api-change:`pi`: Added a description for the Dimension db.sql.tokenized_id on the DimensionGroup data type page. * from version 1.33.35 * api-change:`cloudwatch`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`kinesis`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`resiliencehub`: Customers are presented with the grouping recommendations and can determine if the recommendations are accurate and apply to their case. This feature simplifies onboarding by organizing resources into appropriate AppComponents. * api-change:`route53`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`waf-regional`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.34 * api-change:`bedrock`: API and Documentation for Bedrock Model Copy feature. This feature lets you share and copy a custom model from one region to another or one account to another. * api-change:`controlcatalog`: AWS Control Tower provides two new public APIs controlcatalog:ListControls and controlcatalog:GetControl under controlcatalog service namespace, which enable customers to programmatically retrieve control metadata of available controls. * api-change:`controltower`: Updated Control Tower service documentation for controlcatalog control ARN support with existing Control Tower public APIs * api-change:`iam`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`memorydb`: Doc only update for changes to deletion API. * api-change:`rds`: This release adds support for specifying optional MinACU parameter in CreateDBShardGroup and ModifyDBShardGroup API. DBShardGroup response will contain MinACU if specified. * api-change:`sagemaker`: This release adds support for Amazon EMR Serverless applications in SageMaker Studio for running data processing jobs. * api-change:`ssm-quicksetup`: This release adds API support for the QuickSetup feature of AWS Systems Manager * api-change:`support`: Doc only updates to CaseDetails * from version 1.33.33 * api-change:`appstream`: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0 * api-change:`autoscaling`: Increase the length limit for VPCZoneIdentifier from 2047 to 5000 * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements. * api-change:`elasticache`: Doc only update for changes to deletion API. * api-change:`elb`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`events`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`lexv2-models`: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base. * api-change:`logs`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`rolesanywhere`: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile. * api-change:`tnb`: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation. * api-change:`workspaces`: Removing multi-session as it isn't supported for pools * bugfix:`s3`: Disable usage of mb command with S3 Express directory buckets. * from version 1.33.32 * api-change:`elasticache`: Renaming full service name as it appears in developer documentation. * api-change:`memorydb`: Renaming full service name as it appears in developer documentation. * from version 1.33.31 * api-change:`application-autoscaling`: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics. * api-change:`application-signals`: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability. * api-change:`bedrock-runtime`: Provides ServiceUnavailableException error message * api-change:`codecommit`: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository. * api-change:`datazone`: Introduces GetEnvironmentCredentials operation to SDK * api-change:`ec2`: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types. * api-change:`ecr`: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template. * api-change:`eks`: This release adds support for EKS cluster to manage extended support. * api-change:`elbv2`: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager. * api-change:`network-firewall`: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging. * api-change:`outposts`: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses * api-change:`stepfunctions`: This release adds support to customer managed KMS key encryption in AWS Step Functions. * from version 1.33.30 * api-change:`cleanrooms`: Three enhancements to the AWS Clean Rooms: Disallowed Output Columns, Flexible Result Receivers, SQL as a Seed * api-change:`dynamodb`: DynamoDB doc only update for July * api-change:`iotsitewise`: Adds support for creating SiteWise Edge gateways that run on a Siemens Industrial Edge Device. * api-change:`mediapackagev2`: This release adds support for Irdeto DRM encryption in DASH manifests. * api-change:`medical-imaging`: CopyImageSet API adds copying selected instances between image sets, and overriding inconsistent metadata with a force parameter. UpdateImageSetMetadata API enables reverting to prior versions; updates to Study, Series, and SOP Instance UIDs; and updates to private elements, with a force parameter. * api-change:`pinpoint-sms-voice-v2`: Update for rebrand to AWS End User Messaging SMS and Voice. * from version 1.33.29 * api-change:`appsync`: Adding support for paginators in AppSync list APIs * api-change:`cleanrooms`: This release adds AWS Entity Resolution integration to associate ID namespaces & ID mapping workflow resources as part of ID namespace association and ID mapping table in AWS Clean Rooms. It also introduces a new ID_MAPPING_TABLE analysis rule to manage the protection on ID mapping table. * api-change:`cleanroomsml`: Adds SQL query as the source of seed audience for audience generation job. * api-change:`connect`: Added PostContactSummary segment type on ListRealTimeContactAnalysisSegmentsV2 API * api-change:`connect-contact-lens`: Added PostContactSummary segment type on ListRealTimeContactAnalysisSegments API * api-change:`datazone`: This release removes the deprecated dataProductItem field from Search API output. * api-change:`entityresolution`: Support First Party ID Mapping * from version 1.33.28 * api-change:`datazone`: This release adds 1/ support of register S3 locations of assets in AWS Lake Formation hybrid access mode for DefaultDataLake blueprint. 2/ support of CRUD operations for Asset Filters. * api-change:`ivs`: Documentation update for IVS Low Latency API Reference. * api-change:`neptune-graph`: Amazon Neptune Analytics provides new options for customers to start with smaller graphs at a lower cost. CreateGraph, CreaateGraphImportTask, UpdateGraph and StartImportTask APIs will now allow 32 and 64 for `provisioned-memory` * api-change:`redshift-serverless`: Adds dualstack support for Redshift Serverless workgroup. * from version 1.33.27 * api-change:`acm-pca`: Fix broken waiters for the acm-pca client. Waiters broke in version * from version 1.13.144 of the Boto3 SDK. * api-change:`connect`: Amazon Connect expands search API coverage for additional resources. Search for hierarchy groups by name, ID, tag, or other criteria (new endpoint). Search for agent statuses by name, ID, tag, or other criteria (new endpoint). Search for users by their assigned proficiencies (enhanced endpoint) * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports Bring- Your-Own-IP (BYOIP) for IP addresses registered with any Internet Registry. This feature uses DNS TXT records to validate ownership of a public IP address range. * api-change:`firehose`: This release 1) Add configurable buffering hints for Snowflake as destination. 2) Add ReadFromTimestamp for MSK As Source. Firehose will start reading data from MSK Cluster using offset associated with this timestamp. 3) Gated public beta release to add Apache Iceberg tables as destination. * api-change:`ivschat`: Documentation update for IVS Chat API Reference. * api-change:`medialive`: AWS Elemental MediaLive now supports the SRT protocol via the new SRT Caller input type. * api-change:`rds`: Updates Amazon RDS documentation to specify an eventual consistency model for DescribePendingMaintenanceActions. * api-change:`sagemaker`: SageMaker Training supports R5, T3 and R5D instances family. And SageMaker Processing supports G5 and R5D instances family. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`taxsettings`: Set default endpoint for aws partition. Requests from all regions in aws partition will be forward to us-east-1 endpoint. * api-change:`timestream-query`: Doc-only update for TimestreamQuery. Added guidance about the accepted valid value for the QueryPricingModel parameter. * api-change:`workspaces-thin-client`: Documentation update for WorkSpaces Thin Client. * Update to 1.33.26 * api-change:`acm-pca`: Minor refactoring of C2J model for AWS Private CA * api-change:`arc-zonal-shift`: Adds the option to subscribe to get notifications when a zonal autoshift occurs in a region. * api-change:`globalaccelerator`: This feature adds exceptions to the Customer API to avoid throwing Internal Service errors * api-change:`pinpoint`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`quicksight`: Vega ally control options and Support for Reviewed Answers in Topics * from version 1.33.25 * api-change:`batch`: This feature allows AWS Batch Jobs with EKS container orchestration type to be run as Multi-Node Parallel Jobs. * api-change:`bedrock`: Add support for contextual grounding check for Guardrails for Amazon Bedrock. * api-change:`bedrock-agent`: Introduces new data sources and chunking strategies for Knowledge bases, advanced parsing logic using FMs, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources. * api-change:`bedrock-agent-runtime`: Introduces query decomposition, enhanced Agents integration with Knowledge bases, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources for end-to-end solutions. * api-change:`bedrock-runtime`: Add support for contextual grounding check and ApplyGuardrail API for Guardrails for Amazon Bedrock. * api-change:`ec2`: Add parameters to enable provisioning IPAM BYOIPv4 space at a Local Zone Network Border Group level * api-change:`glue`: Add recipe step support for recipe node * api-change:`groundstation`: Documentation update specifying OEM ephemeris units of measurement * api-change:`license-manager-linux-subscriptions`: Add support for third party subscription providers, starting with RHEL subscriptions through Red Hat Subscription Manager (RHSM). Additionally, add support for tagging subscription provider resources, and detect when an instance has more than one Linux subscription and notify the customer. * api-change:`mediaconnect`: AWS Elemental MediaConnect introduces the ability to disable outputs. Disabling an output allows you to keep the output attached to the flow, but stop streaming to the output destination. A disabled output does not incur data transfer costs. * from version 1.33.24 * api-change:`datazone`: This release deprecates dataProductItem field from SearchInventoryResultItem, along with some unused DataProduct shapes * api-change:`fsx`: Adds support for FSx for NetApp ONTAP 2nd Generation file systems, and FSx for OpenZFS Single AZ HA file systems. * api-change:`opensearch`: This release adds support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains, and provides visibility into the current state of the setup or tear-down. * api-change:`sagemaker`: This release 1/ enables optimization jobs that allows customers to perform Ahead-of-time compilation and quantization. 2/ allows customers to control access to Amazon Q integration in SageMaker Studio. 3/ enables AdditionalModelDataSources for CreateModel action. * from version 1.33.23 * api-change:`codedeploy`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`devicefarm`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`dms`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`elasticbeanstalk`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`es`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`firehose`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`gamelift`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`qapps`: This is a general availability (GA) release of Amazon Q Apps, a capability of Amazon Q Business. Q Apps leverages data sources your company has provided to enable users to build, share, and customize apps within your organization. * api-change:`route53resolver`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`ses`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.22 * api-change:`acm`: Documentation updates, including fixes for xml formatting, broken links, and ListCertificates description. * api-change:`ecr`: This release for Amazon ECR makes change to bring the SDK into sync with the API. * api-change:`payment-cryptography-data`: Added further restrictions on logging of potentially sensitive inputs and outputs. * api-change:`qbusiness`: Add personalization to Q Applications. Customers can enable or disable personalization when creating or updating a Q application with the personalization configuration. * from version 1.33.21 * api-change:`application-autoscaling`: Doc only update for Application Auto Scaling that fixes resource name. * api-change:`directconnect`: This update includes documentation for support of new native 400 GBps ports for Direct Connect. * api-change:`organizations`: Added a new reason under ConstraintViolationException in RegisterDelegatedAdministrator API to prevent registering suspended accounts as delegated administrator of a service. * api-change:`rekognition`: This release adds support for tagging projects and datasets with the CreateProject and CreateDataset APIs. * api-change:`workspaces`: Fix create workspace bundle RootStorage/UserStorage to accept non null values * Update to 1.33.20 * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`fms`: Increases Customer API's ManagedServiceData length * api-change:`s3`: Added response overrides to Head Object requests. * from version 1.33.19 * api-change:`apigateway`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`cognito-identity`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`connect`: Authentication profiles are Amazon Connect resources (in gated preview) that allow you to configure authentication settings for users in your contact center. This release adds support for new ListAuthenticationProfiles, DescribeAuthenticationProfile and UpdateAuthenticationProfile APIs. * api-change:`docdb`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`eks`: Updates EKS managed node groups to support EC2 Capacity Blocks for ML * api-change:`payment-cryptography`: Added further restrictions on logging of potentially sensitive inputs and outputs. * api-change:`payment-cryptography-data`: Adding support for dynamic keys for encrypt, decrypt, re-encrypt and translate pin functions. With this change, customers can use one-time TR-31 keys directly in dataplane operations without the need to first import them into the service. * api-change:`stepfunctions`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`swf`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`wafv2`: JSON body inspection: Update documentation to clarify that JSON parsing doesn't include full validation. * from version 1.33.18 * api-change:`acm-pca`: Added CCPC_LEVEL_1_OR_HIGHER KeyStorageSecurityStandard and SM2 KeyAlgorithm and SM3WITHSM2 SigningAlgorithm for China regions. * api-change:`cloudhsmv2`: Added 3 new APIs to support backup sharing: GetResourcePolicy, PutResourcePolicy, and DeleteResourcePolicy. Added BackupArn to the output of the DescribeBackups API. Added support for BackupArn in the CreateCluster API. * api-change:`connect`: This release supports showing PreferredAgentRouting step via DescribeContact API. * api-change:`emr`: This release provides the support for new allocation strategies i.e. CAPACITY_OPTIMIZED_PRIORITIZED for Spot and PRIORITIZED for On-Demand by taking input of priority value for each instance type for instance fleet clusters. * api-change:`glue`: Added AttributesToGet parameter to Glue GetDatabases, allowing caller to limit output to include only the database name. * api-change:`kinesisanalyticsv2`: Support for Flink 1.19 in Managed Service for Apache Flink * api-change:`opensearch`: This release removes support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains. * api-change:`pi`: Noting that the filter db.sql.db_id isn't available for RDS for SQL Server DB instances. * api-change:`workspaces`: Added support for Red Hat Enterprise Linux 8 on Amazon WorkSpaces Personal. * from version 1.33.17 * api-change:`application-autoscaling`: Amazon WorkSpaces customers can now use Application Auto Scaling to automatically scale the number of virtual desktops in a WorkSpaces pool. * api-change:`chime-sdk-media-pipelines`: Added Amazon Transcribe multi language identification to Chime SDK call analytics. Enabling customers sending single stream audio to generate call recordings using Chime SDK call analytics * api-change:`cloudfront`: Doc only update for CloudFront that fixes customer- reported issue * api-change:`datazone`: This release supports the data lineage feature of business data catalog in Amazon DataZone. * api-change:`elasticache`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`mq`: This release makes the EngineVersion field optional for both broker and configuration and uses the latest available version by default. The AutoMinorVersionUpgrade field is also now optional for broker creation and defaults to 'true'. * api-change:`qconnect`: Adds CreateContentAssociation, ListContentAssociations, GetContentAssociation, and DeleteContentAssociation APIs. * api-change:`quicksight`: Adding support for Repeating Sections, Nested Filters * api-change:`rds`: Updates Amazon RDS documentation for TAZ export to S3. * api-change:`sagemaker`: Add capability for Admins to customize Studio experience for the user by showing or hiding Apps and MLTools. * api-change:`workspaces`: Added support for WorkSpaces Pools. * from version 1.33.16 * api-change:`controltower`: Added ListLandingZoneOperations API. * api-change:`eks`: Added support for disabling unmanaged addons during cluster creation. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to upload public keys for customer vended participant tokens. * api-change:`kinesisanalyticsv2`: This release adds support for new ListApplicationOperations and DescribeApplicationOperation APIs. It adds a new configuration to enable system rollbacks, adds field ApplicationVersionCreateTimestamp for clarity and improves support for pagination for APIs. * api-change:`opensearch`: This release adds support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains, and provides visibility into the current state of the setup or tear-down. * from version 1.33.15 * api-change:`autoscaling`: Doc only update for Auto Scaling's TargetTrackingMetricDataQuery * api-change:`ec2`: This release is for the launch of the new u7ib-12tb.224xlarge, R8g, c7gn.metal and mac2-m1ultra.metal instance types * api-change:`networkmanager`: This is model changes & documentation update for the Asynchronous Error Reporting feature for AWS Cloud WAN. This feature allows customers to view errors that occur while their resources are being provisioned, enabling customers to fix their resources without needing external support. * api-change:`workspaces-thin-client`: This release adds the deviceCreationTags field to CreateEnvironment API input, UpdateEnvironment API input and GetEnvironment API output. * from version 1.33.14 * api-change:`bedrock-runtime`: Increases Converse API's document name length * api-change:`customer-profiles`: This release includes changes to ProfileObjectType APIs, adds functionality top set and get capacity for profile object types. * api-change:`ec2`: Fix EC2 multi-protocol info in models. * api-change:`qbusiness`: Allow enable/disable Q Apps when creating/updating a Q application; Return the Q Apps enablement information when getting a Q application. * api-change:`ssm`: Add sensitive trait to SSM IPAddress property for CloudTrail redaction * api-change:`workspaces-web`: Added ability to enable DeepLinking functionality on a Portal via UserSettings as well as added support for IdentityProvider resource tagging. * from version 1.33.13 * api-change:`bedrock-runtime`: This release adds document support to Converse and ConverseStream APIs * api-change:`codeartifact`: Add support for the Cargo package format. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon RDS MySQL and RDS PostgreSQL. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon RDS MySQL and RDS PostgreSQL. * api-change:`dynamodb`: Doc-only update for DynamoDB. Fixed Important note in 6 Global table APIs - CreateGlobalTable, DescribeGlobalTable, DescribeGlobalTableSettings, ListGlobalTables, UpdateGlobalTable, and UpdateGlobalTableSettings. * api-change:`glue`: Fix Glue paginators for Jobs, JobRuns, Triggers, Blueprints and Workflows. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to record individual stage participants to S3. * api-change:`sagemaker`: Adds support for model references in Hub service, and adds support for cross-account access of Hubs * api-change:`securityhub`: Documentation updates for Security Hub * from version 1.33.12 * api-change:`artifact`: This release adds an acceptanceType field to the ReportSummary structure (used in the ListReports API response). * api-change:`athena`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`cur`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`directconnect`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`elastictranscoder`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`opensearch`: This release enables customers to use JSON Web Tokens (JWT) for authentication on their Amazon OpenSearch Service domains. * from version 1.33.11 * api-change:`bedrock-runtime`: This release adds support for using Guardrails with the Converse and ConverseStream APIs. * api-change:`cloudtrail`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`config`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`eks`: This release adds support to surface async fargate customer errors from async path to customer through describe-fargate-profile API response. * api-change:`lightsail`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`polly`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`rekognition`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`sagemaker`: Launched a new feature in SageMaker to provide managed MLflow Tracking Servers for customers to track ML experiments. This release also adds a new capability of attaching additional storage to SageMaker HyperPod cluster instances. * api-change:`shield`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`snowball`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.10 * api-change:`acm-pca`: Doc-only update that adds name constraints as an allowed extension for ImportCertificateAuthorityCertificate. * api-change:`batch`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`codebuild`: AWS CodeBuild now supports global and organization GitHub webhooks * api-change:`cognito-idp`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`ds`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`efs`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`glue`: This release introduces a new feature, Usage profiles. Usage profiles allow the AWS Glue admin to create different profiles for various classes of users within the account, enforcing limits and defaults for jobs and sessions. * api-change:`mediaconvert`: This release includes support for creating I-frame only video segments for DASH trick play. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`waf`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.9 * api-change:`datazone`: This release introduces a new default service blueprint for custom environment creation. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`macie2`: This release adds support for managing the status of automated sensitive data discovery for individual accounts in an organization, and determining whether individual S3 buckets are included in the scope of the analyses. * api-change:`mediaconvert`: This release adds the ability to search for historical job records within the management console using a search box and/or via the SDK/CLI with partial string matching search on input file name. * api-change:`route53domains`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.8 * api-change:`cloudhsmv2`: Added support for hsm type hsm2m.medium. Added supported for creating a cluster in FIPS or NON_FIPS mode. * api-change:`glue`: This release adds support for configuration of evaluation method for composite rules in Glue Data Quality rulesets. * api-change:`iotwireless`: Add RoamingDeviceSNR and RoamingDeviceRSSI to Customer Metrics. * api-change:`kms`: This feature allows customers to use their keys stored in KMS to derive a shared secret which can then be used to establish a secured channel for communication, provide proof of possession, or establish trust with other parties. * api-change:`mediapackagev2`: This release adds support for CMAF ingest (DASH-IF live media ingest protocol interface 1) * from version 1.33.7 * api-change:`apptest`: AWS Mainframe Modernization Application Testing is an AWS Mainframe Modernization service feature that automates functional equivalence testing for mainframe application modernization and migration to AWS, and regression testing. * api-change:`ec2`: Tagging support for Traffic Mirroring FilterRule resource * api-change:`osis`: SDK changes for self-managed vpc endpoint to OpenSearch ingestion pipelines. * api-change:`redshift`: Updates to remove DC1 and DS2 node types. * api-change:`secretsmanager`: Introducing RotationToken parameter for PutSecretValue API * api-change:`securitylake`: This release updates request validation regex to account for non-commercial aws partitions. * api-change:`sesv2`: This release adds support for Amazon EventBridge as an email sending events destination. * from version 1.33.6 * api-change:`accessanalyzer`: IAM Access Analyzer now provides policy recommendations to help resolve unused permissions for IAM roles and users. Additionally, IAM Access Analyzer now extends its custom policy checks to detect when IAM policies grant public access or access to critical resources ahead of deployments. * api-change:`guardduty`: Added API support for GuardDuty Malware Protection for S3. * api-change:`networkmanager`: This is model changes & documentation update for Service Insertion feature for AWS Cloud WAN. This feature allows insertion of AWS/3rd party security services on Cloud WAN. This allows to steer inter/intra segment traffic via security appliances and provide visibility to the route updates. * api-change:`pca-connector-scep`: Connector for SCEP allows you to use a managed, cloud CA to enroll mobile devices and networking gear. SCEP is a widely-adopted protocol used by mobile device management (MDM) solutions for enrolling mobile devices. With the connector, you can use AWS Private CA with popular MDM solutions. * api-change:`sagemaker`: Introduced Scope and AuthenticationRequestExtraParams to SageMaker Workforce OIDC configuration; this allows customers to modify these options for their private Workforce IdP integration. Model Registry Cross-account model package groups are discoverable. * from version 1.33.5 * api-change:`application-signals`: This is the initial SDK release for Amazon CloudWatch Application Signals. Amazon CloudWatch Application Signals provides curated application performance monitoring for developers to monitor and troubleshoot application health using pre-built dashboards and Service Level Objectives. * api-change:`ecs`: This release introduces a new cluster configuration to support the customer-managed keys for ECS managed storage encryption. * api-change:`imagebuilder`: This release updates the regex pattern for Image Builder ARNs. * Update to 1.33.4 * api-change:`auditmanager`: New feature: common controls. When creating custom controls, you can now use pre-grouped AWS data sources based on common compliance themes. Also, the awsServices parameter is deprecated because we now manage services in scope for you. If used, the input is ignored and an empty list is returned. * api-change:`b2bi`: Added exceptions to B2Bi List operations and ConflictException to B2Bi StartTransformerJob operation. Also made capabilities field explicitly required when creating a Partnership. * api-change:`codepipeline`: CodePipeline now supports overriding S3 Source Object Key during StartPipelineExecution, as part of Source Overrides. * api-change:`sagemaker`: This release introduces a new optional parameter: InferenceAmiVersion, in ProductionVariant. * api-change:`verifiedpermissions`: This release adds OpenIdConnect (OIDC) configuration support for IdentitySources, allowing for external IDPs to be used in authorization requests. * from version 1.33.3 * api-change:`account`: This release adds 3 new APIs (AcceptPrimaryEmailUpdate, GetPrimaryEmail, and StartPrimaryEmailUpdate) used to centrally manage the root user email address of member accounts within an AWS organization. * api-change:`firehose`: Adds integration with Secrets Manager for Redshift, Splunk, HttpEndpoint, and Snowflake destinations * api-change:`fsx`: This release adds support to increase metadata performance on FSx for Lustre file systems beyond the default level provisioned when a file system is created. This can be done by specifying MetadataConfiguration during the creation of Persistent_2 file systems or by updating it on demand. * api-change:`glue`: This release adds support for creating and updating Glue Data Catalog Views. * api-change:`iotwireless`: Adds support for wireless device to be in Conflict FUOTA Device Status due to a FUOTA Task, so it couldn't be attached to a new one. * api-change:`location`: Added two new APIs, VerifyDevicePosition and ForecastGeofenceEvents. Added support for putting larger geofences up to 100,000 vertices with Geobuf fields. * api-change:`sns`: Doc-only update for SNS. These changes include customer- reported issues and TXC3 updates. * api-change:`sqs`: Doc only updates for SQS. These updates include customer- reported issues and TCX3 modifications. * api-change:`storagegateway`: Adds SoftwareUpdatePreferences to DescribeMaintenanceStartTime and UpdateMaintenanceStartTime, a structure which contains AutomaticUpdatePolicy. * from version 1.33.2 * api-change:`globalaccelerator`: This release contains a new optional ip- addresses input field for the update accelerator and update custom routing accelerator apis. This input enables consumers to replace IPv4 addresses on existing accelerators with addresses provided in the input. * api-change:`glue`: AWS Glue now supports native SaaS connectivity: Salesforce connector available now * api-change:`s3`: Added new params copySource and key to copyObject API for supporting S3 Access Grants plugin. These changes will not change any of the existing S3 API functionality. * bugfix:emr customization: Update the EC2 service principal when creating the trust policy for EMR default roles to always be ec2.amazonaws.com. * from version 1.33.1 * api-change:`ec2`: U7i instances with up to 32 TiB of DDR5 memory and 896 vCPUs are now available. C7i-flex instances are launched and are lower- priced variants of the Amazon EC2 C7i instances that offer a baseline level of CPU performance with the ability to scale up to the full compute performance 95% of the time. * api-change:`pipes`: This release adds Timestream for LiveAnalytics as a supported target in EventBridge Pipes * api-change:`sagemaker`: Extend DescribeClusterNode response with private DNS hostname and IP address, and placement information about availability zone and availability zone ID. * api-change:`taxsettings`: Initial release of AWS Tax Settings API * from version 1.33.0 * api-change:`amplify`: This doc-only update identifies fields that are specific to Gen 1 and Gen 2 applications. * api-change:`batch`: This release adds support for the AWS Batch GetJobQueueSnapshot API operation. * api-change:`eks`: Adds support for EKS add-ons pod identity associations integration * api-change:`iottwinmaker`: Support RESET_VALUE UpdateType for PropertyUpdates to reset property value to default or null * feature:logs start-live-tail: Adds support for starting a live tail streaming session for one or more log groups. * from version 1.32.117 * api-change:`codebuild`: AWS CodeBuild now supports Self-hosted GitHub Actions runners for Github Enterprise * api-change:`codeguru-security`: This release includes minor model updates and documentation updates. * api-change:`elasticache`: Update to attributes of TestFailover and minor revisions. * api-change:`launch-wizard`: This release adds support for describing workload deployment specifications, deploying additional workload types, and managing tags for Launch Wizard resources with API operations. * from version 1.32.116 * api-change:`acm`: add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`bedrock-agent`: With this release, Knowledge bases for Bedrock adds support for Titan Text Embedding v2. * api-change:`bedrock-runtime`: This release adds Converse and ConverseStream APIs to Bedrock Runtime * api-change:`cloudtrail`: CloudTrail Lake returns PartitionKeys in the GetEventDataStore API response. Events are grouped into partitions based on these keys for better query performance. For example, the calendarday key groups events by day, while combining the calendarday key with the hour key groups them by day and hour. * api-change:`connect`: Adding associatedQueueIds as a SearchCriteria and response field to the SearchRoutingProfiles API * api-change:`emr-serverless`: The release adds support for spark structured streaming. * api-change:`rds`: Updates Amazon RDS documentation for Aurora Postgres DBname. * api-change:`sagemaker`: Adds Model Card information as a new component to Model Package. Autopilot launches algorithm selection for TimeSeries modality to generate AutoML candidates per algorithm. * bugfix:`ssm start-session`: Only provide profile name to session-manager- plugin if provided using --profile flag * from version 1.32.115 * api-change:`athena`: Throwing validation errors on CreateNotebook with Name containing `/`,`:`,`\` * api-change:`codebuild`: AWS CodeBuild now supports manually creating GitHub webhooks * api-change:`connect`: This release includes changes to DescribeContact API's response by including ConnectedToSystemTimestamp, RoutingCriteria, Customer, Campaign, AnsweringMachineDetectionStatus, CustomerVoiceActivity, QualityMetrics, DisconnectDetails, and SegmentAttributes information from a contact in Amazon Connect. * api-change:`glue`: Add optional field JobMode to CreateJob and UpdateJob APIs. * api-change:`securityhub`: Add ROOT type for TargetType model * from version 1.32.114 * api-change:`dynamodb`: Doc-only update for DynamoDB. Specified the IAM actions needed to authorize a user to create a table with a resource-based policy. * api-change:`ec2`: Providing support to accept BgpAsnExtended attribute * api-change:`kafka`: Adds ControllerNodeInfo in ListNodes response to support Raft mode for MSK * api-change:`swf`: This release adds new APIs for deleting activity type and workflow type resources. * from version 1.32.113 * api-change:`dynamodb`: Documentation only updates for DynamoDB. * api-change:`iotfleetwise`: AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter. * api-change:`managedblockchain`: This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks. * from version 1.32.112 * api-change:`emr-serverless`: This release adds the capability to run interactive workloads using Apache Livy Endpoint. * api-change:`opsworks`: Documentation-only update for OpsWorks Stacks. * from version 1.32.111 * api-change:`chatbot`: This change adds support for tagging Chatbot configurations. * api-change:`cloudformation`: Added DeletionMode FORCE_DELETE_STACK for deleting a stack that is stuck in DELETE_FAILED state due to resource deletion failure. * api-change:`kms`: This release includes feature to import customer's asymmetric (RSA, ECC and SM2) and HMAC keys into KMS in China. * api-change:`opensearch`: This release adds support for enabling or disabling a data source configured as part of Zero-ETL integration with Amazon S3, by setting its status. * api-change:`wafv2`: You can now use Security Lake to collect web ACL traffic data. * from version 1.32.110 * api-change:`cloudfront`: Model update; no change to SDK functionality. * api-change:`glue`: Add Maintenance window to CreateJob and UpdateJob APIs and JobRun response. Add a new Job Run State for EXPIRED. * api-change:`lightsail`: This release adds support for Amazon Lightsail instances to switch between dual-stack or IPv4 only and IPv6-only public IP address types. * api-change:`mailmanager`: This release includes a new Amazon SES feature called Mail Manager, which is a set of email gateway capabilities designed to help customers strengthen their organization's email infrastructure, simplify email workflow management, and streamline email compliance control. * api-change:`pi`: Performance Insights added a new input parameter called AuthorizedActions to support the fine-grained access feature. Performance Insights also restricted the acceptable input characters. * api-change:`rds`: Updates Amazon RDS documentation for Db2 license through AWS Marketplace. * api-change:`storagegateway`: Added new SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode enforces encryption and disables AES 128-bit algorithums. * from version 1.32.109 * api-change:`bedrock-agent`: This release adds support for using Guardrails with Bedrock Agents. * api-change:`bedrock-agent-runtime`: This release adds support for using Guardrails with Bedrock Agents. * api-change:`controltower`: Added ListControlOperations API and filtering support for ListEnabledControls API. Updates also includes added metadata for enabled controls and control operations. * api-change:`osis`: Add support for creating an OpenSearch Ingestion pipeline that is attached to a provided VPC. Add information about the destinations of an OpenSearch Ingestion pipeline to the GetPipeline and ListPipelines APIs. * api-change:`rds`: This release adds support for EngineLifecycleSupport on DBInstances, DBClusters, and GlobalClusters. * api-change:`secretsmanager`: add v2 smoke tests and smithy smokeTests trait for SDK testing * from version 1.32.108 * api-change:`application-autoscaling`: add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`codebuild`: Aws CodeBuild now supports 36 hours build timeout * api-change:`elbv2`: This release adds dualstack-without-public-ipv4 IP address type for ALB. * api-change:`lakeformation`: Introduces a new API, GetDataLakePrincipal, that returns the identity of the invoking principal * api-change:`transfer`: Enable use of CloudFormation traits in Smithy model to improve generated CloudFormation schema from the Smithy API model. * from version 1.32.107 * api-change:`acm-pca`: This release adds support for waiters to fail on AccessDeniedException when having insufficient permissions * api-change:`connect`: Adding Contact Flow metrics to the GetMetricDataV2 API * api-change:`kafka`: AWS MSK support for Broker Removal. * api-change:`mwaa`: Amazon MWAA now supports Airflow web server auto scaling to automatically handle increased demand from REST APIs, Command Line Interface (CLI), or more Airflow User Interface (UI) users. Customers can specify maximum and minimum web server instances during environment creation and update workflow. * api-change:`quicksight`: This release adds DescribeKeyRegistration and UpdateKeyRegistration APIs to manage QuickSight Customer Managed Keys (CMK). * api-change:`sagemaker`: Introduced WorkerAccessConfiguration to SageMaker Workteam. This allows customers to configure resource access for workers in a workteam. * api-change:`secretsmanager`: Documentation updates for AWS Secrets Manager * from version 1.32.106 * api-change:`bedrock-agent-runtime`: Updating Bedrock Knowledge Base Metadata & Filters feature with two new filters listContains and stringContains * api-change:`codebuild`: CodeBuild Reserved Capacity VPC Support * api-change:`datasync`: Task executions now display a CANCELLING status when an execution is in the process of being cancelled. * api-change:`grafana`: This release adds new ServiceAccount and ServiceAccountToken APIs. * api-change:`medical-imaging`: Added support for importing medical imaging data from Amazon S3 buckets across accounts and regions. * api-change:`securityhub`: Documentation-only update for AWS Security Hub * Update to 1.32.105 * api-change:`connect`: Amazon Connect provides enhanced search capabilities for flows & flow modules on the Connect admin website and programmatically using APIs. You can search for flows and flow modules by name, description, type, status, and tags, to filter and identify a specific flow in your Connect instances. * api-change:`s3`: Updated a few x-id in the http uri traits * from version 1.32.104 * api-change:`events`: Amazon EventBridge introduces KMS customer-managed key (CMK) encryption support for custom and partner events published on EventBridge Event Bus (including default bus) and UpdateEventBus API. * api-change:`vpc-lattice`: This release adds TLS Passthrough support. It also increases max number of target group per rule to 10. * from version 1.32.103 * api-change:`discovery`: add v2 smoke tests and smithy smokeTests trait for SDK testing * api-change:`greengrassv2`: Mark ComponentVersion in ComponentDeploymentSpecification as required. * api-change:`sagemaker`: Introduced support for G6 instance types on Sagemaker Notebook Instances and on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sso-oidc`: Updated request parameters for PKCE support. * from version 1.32.102 * api-change:`bedrock-agent-runtime`: This release adds support to provide guardrail configuration and modify inference parameters that are then used in RetrieveAndGenerate API in Agents for Amazon Bedrock. * api-change:`pinpoint`: This release adds support for specifying email message headers for Email Templates, Campaigns, Journeys and Send Messages. * api-change:`route53resolver`: Update the DNS Firewall settings to correct a spelling issue. * api-change:`ssm-sap`: Added support for application-aware start/stop of SAP applications running on EC2 instances, with SSM for SAP * api-change:`verifiedpermissions`: Adds policy effect and actions fields to Policy API's. * from version 1.32.101 * api-change:`cognito-idp`: Add EXTERNAL_PROVIDER enum value to UserStatusType. * api-change:`ec2`: Adding Precision Hardware Clock (PHC) to public API DescribeInstanceTypes * api-change:`ecr`: This release adds pull through cache rules support for GitLab container registry in Amazon ECR. * api-change:`fms`: The policy scope resource tag is always a string value, either a non-empty string or an empty string. * api-change:`polly`: Add new engine - generative - that builds the most expressive conversational voices. * api-change:`sqs`: This release adds MessageSystemAttributeNames to ReceiveMessageRequest to replace AttributeNames. * from version 1.32.100 * api-change:`b2bi`: Documentation update to clarify the MappingTemplate definition. * api-change:`budgets`: This release adds tag support for budgets and budget actions. * api-change:`resiliencehub`: AWS Resilience Hub has expanded its drift detection capabilities by introducing a new type of drift detection - application resource drift. This new enhancement detects changes, such as the addition or deletion of resources within the application's input sources. * api-change:`route53profiles`: Doc only update for Route 53 profiles that fixes some link issues * from version 1.32.99 * api-change:`medialive`: AWS Elemental MediaLive now supports configuring how SCTE 35 passthrough triggers segment breaks in HLS and MediaPackage output groups. Previously, messages triggered breaks in all these output groups. The new option is to trigger segment breaks only in groups that have SCTE 35 passthrough enabled. * from version 1.32.98 * api-change:`bedrock-agent`: This release adds support for using Provisioned Throughput with Bedrock Agents. * api-change:`connect`: This release adds 5 new APIs for managing attachments: StartAttachedFileUpload, CompleteAttachedFileUpload, GetAttachedFile, BatchGetAttachedFileMetadata, DeleteAttachedFile. These APIs can be used to programmatically upload and download attachments to Connect resources, like cases. * api-change:`connectcases`: This feature supports the release of Files related items * api-change:`datasync`: Updated guidance on using private or self-signed certificate authorities (CAs) with AWS DataSync object storage locations. * api-change:`inspector2`: This release adds CSV format to GetCisScanReport for Inspector v2 * api-change:`sagemaker`: Amazon SageMaker Inference now supports m6i, c6i, r6i, m7i, c7i, r7i and g5 instance types for Batch Transform Jobs * api-change:`sesv2`: Adds support for specifying replacement headers per BulkEmailEntry in SendBulkEmail in SESv2. * from version 1.32.97 * api-change:`dynamodb`: This release adds support to specify an optional, maximum OnDemandThroughput for DynamoDB tables and global secondary indexes in the CreateTable or UpdateTable APIs. You can also override the OnDemandThroughput settings by calling the ImportTable, RestoreFromPointInTime, or RestoreFromBackup APIs. * api-change:`ec2`: This release includes a new API for retrieving the public endorsement key of the EC2 instance's Nitro Trusted Platform Module (NitroTPM). * api-change:`personalize`: This releases ability to delete users and their data, including their metadata and interactions data, from a dataset group. * api-change:`redshift-serverless`: Update Redshift Serverless List Scheduled Actions Output Response to include Namespace Name. * from version 1.32.96 * api-change:`bedrock-agent`: This release adds support for using MongoDB Atlas as a vector store when creating a knowledge base. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`personalize-runtime`: This release adds support for a Reason attribute for predicted items generated by User-Personalization-v2. * api-change:`securityhub`: Updated CreateMembers API request with limits. * api-change:`sesv2`: Fixes ListContacts and ListImportJobs APIs to use POST instead of GET. * from version 1.32.95 * api-change:`chime-sdk-voice`: Due to changes made by the Amazon Alexa service, GetSipMediaApplicationAlexaSkillConfiguration and PutSipMediaApplicationAlexaSkillConfiguration APIs are no longer available for use. For more information, refer to the Alexa Smart Properties page. * api-change:`codeartifact`: Add support for the Ruby package format. * api-change:`fms`: AWS Firewall Manager now supports the network firewall service stream exception policy feature for accounts within your organization. * api-change:`omics`: Add support for workflow sharing and dynamic run storage * api-change:`opensearch`: This release enables customers to create Route53 A and AAAA alias record types to point custom endpoint domain to OpenSearch domain's dualstack search endpoint. * api-change:`pinpoint-sms-voice-v2`: Amazon Pinpoint has added two new features Multimedia services (MMS) and protect configurations. Use the three new MMS APIs to send media messages to a mobile phone which includes image, audio, text, or video files. Use the ten new protect configurations APIs to block messages to specific countries. * api-change:`qbusiness`: This is a general availability (GA) release of Amazon Q Business. Q Business enables employees in an enterprise to get comprehensive answers to complex questions and take actions through a unified, intuitive web-based chat experience - using an enterprise's existing content, data, and systems. * api-change:`quicksight`: New Q embedding supporting Generative Q&A * api-change:`route53resolver`: Release of FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall Rule. This allows customers to configure a DNS Firewall rule to inspect all the domains in the DNS redirection chain (default) , such as CNAME, ALIAS, DNAME, etc., or just the first domain and trust the rest. * api-change:`sagemaker`: Amazon SageMaker Training now supports the use of attribute-based access control (ABAC) roles for training job execution roles. Amazon SageMaker Inference now supports G6 instance types. * api-change:`signer`: Documentation updates for AWS Signer. Adds cross- account signing constraint and definitions for cross-account actions. * from version 1.32.94 * api-change:`amplify`: Updating max results limit for listing any resources (Job, Artifacts, Branch, BackendResources, DomainAssociation) to 50 with the exception of list apps that where max results can be up to 100. * api-change:`connectcases`: This feature releases DeleteField, DeletedLayout, and DeleteTemplate API's * api-change:`inspector2`: Update Inspector2 to include new Agentless API parameters. * api-change:`timestream-query`: This change allows users to update and describe account settings associated with their accounts. * api-change:`transcribe`: This update provides error messaging for generative call summarization in Transcribe Call Analytics * api-change:`trustedadvisor`: This release adds the BatchUpdateRecommendationResourceExclusion API to support batch updates of Recommendation Resource exclusion statuses and introduces a new exclusion status filter to the ListRecommendationResources and ListOrganizationRecommendationResources APIs. * from version 1.32.93 * api-change:`codepipeline`: Add ability to manually and automatically roll back a pipeline stage to a previously successful execution. * api-change:`cognito-idp`: Add LimitExceededException to SignUp errors * api-change:`connectcampaigns`: This release adds support for specifying if Answering Machine should wait for prompt sound. * api-change:`marketplace-entitlement`: Releasing minor endpoint updates. * api-change:`oam`: This release introduces support for Source Accounts to define which Metrics and Logs to share with the Monitoring Account * api-change:`rds`: SupportsLimitlessDatabase field added to describe-db- engine-versions to indicate whether the DB engine version supports Aurora Limitless Database. * api-change:`support`: Releasing minor endpoint updates. * enhancement:dependency: Bump upper bound of colorama to <0.4.7; fixes `#7086 <https://github.com/aws/aws-cli/issues/7086>`__ * from version 1.32.92 * api-change:`appsync`: UpdateGraphQLAPI documentation update and datasource introspection secret arn update * api-change:`fms`: AWS Firewall Manager adds support for network ACL policies to manage Amazon Virtual Private Cloud (VPC) network access control lists (ACLs) for accounts in your organization. * api-change:`ivs`: Bug Fix: IVS does not support arns with the `svs` prefix * api-change:`ivs-realtime`: Bug Fix: IVS Real Time does not support ARNs using the `svs` prefix. * api-change:`rds`: Updates Amazon RDS documentation for setting local time zones for RDS for Db2 DB instances. * api-change:`stepfunctions`: Add new ValidateStateMachineDefinition operation, which performs syntax checking on the definition of a Amazon States Language (ASL) state machine. * from version 1.32.91 * api-change:`datasync`: This change allows users to disable and enable the schedules associated with their tasks. * api-change:`ec2`: Launching capability for customers to enable or disable automatic assignment of public IPv4 addresses to their network interface * api-change:`emr-containers`: EMRonEKS Service support for SecurityConfiguration enforcement for Spark Jobs. * api-change:`entityresolution`: Support Batch Unique IDs Deletion. * api-change:`gamelift`: Amazon GameLift releases container fleets support for public preview. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`ssm`: Add SSM DescribeInstanceProperties API to public AWS SDK. * from version 1.32.90 * api-change:`bedrock`: This release introduces Model Evaluation and Guardrails for Amazon Bedrock. * api-change:`bedrock-agent`: Introducing the ability to create multiple data sources per knowledge base, specify S3 buckets as data sources from external accounts, and exposing levers to define the deletion behavior of the underlying vector store data. * api-change:`bedrock-agent-runtime`: This release introduces zero-setup file upload support for the RetrieveAndGenerate API. This allows you to chat with your data without setting up a Knowledge Base. * api-change:`bedrock-runtime`: This release introduces Guardrails for Amazon Bedrock. * api-change:`ce`: Added additional metadata that might be applicable to your reservation recommendations. * api-change:`ec2`: This release introduces EC2 AMI Deregistration Protection, a new AMI property that can be enabled by customers to protect an AMI against an unintended deregistration. This release also enables the AMI owners to view the AMI 'LastLaunchedTime' in DescribeImages API. * api-change:`pi`: Clarifies how aggregation works for GetResourceMetrics in the Performance Insights API. * api-change:`rds`: Fix the example ARN for ModifyActivityStreamRequest * api-change:`workspaces-web`: Added InstanceType and MaxConcurrentSessions parameters on CreatePortal and UpdatePortal Operations as well as the ability to read Customer Managed Key & Additional Encryption Context parameters on supported resources (Portal, BrowserSettings, UserSettings, IPAccessSettings) * from version 1.32.89 * api-change:`bedrock-agent`: Releasing the support for simplified configuration and return of control * api-change:`bedrock-agent-runtime`: Releasing the support for simplified configuration and return of control * api-change:`payment-cryptography`: Adding support to TR-31/TR-34 exports for optional headers, allowing customers to add additional metadata (such as key version and KSN) when exporting keys from the service. * api-change:`redshift-serverless`: Updates description of schedule field for scheduled actions. * api-change:`route53profiles`: Route 53 Profiles allows you to apply a central DNS configuration across many VPCs regardless of account. * api-change:`sagemaker`: This release adds support for Real-Time Collaboration and Shared Space for JupyterLab App on SageMaker Studio. * api-change:`servicediscovery`: This release adds examples to several Cloud Map actions. * api-change:`transfer`: Adding new API to support remote directory listing using SFTP connector * from version 1.32.88 * api-change:`glue`: Adding RowFilter in the response for GetUnfilteredTableMetadata API * api-change:`internetmonitor`: This update introduces the GetInternetEvent and ListInternetEvents APIs, which provide access to internet events displayed on the Amazon CloudWatch Internet Weather Map. * api-change:`personalize`: This releases auto training capability while creating a solution and automatically syncing latest solution versions when creating/updating a campaign * from version 1.32.87 * api-change:`drs`: Outpost ARN added to Source Server and Recovery Instance * api-change:`emr-serverless`: This release adds the capability to publish detailed Spark engine metrics to Amazon Managed Service for Prometheus (AMP) for enhanced monitoring for Spark jobs. * api-change:`guardduty`: Added IPv6Address fields for local and remote IP addresses * api-change:`quicksight`: This release adds support for the Cross Sheet Filter and Control features, and support for warnings in asset imports for any permitted errors encountered during execution * api-change:`rolesanywhere`: This release introduces the PutAttributeMapping and DeleteAttributeMapping APIs. IAM Roles Anywhere now provides the capability to define a set of mapping rules, allowing customers to specify which data is extracted from their X.509 end-entity certificates. * api-change:`sagemaker`: Removed deprecated enum values and updated API documentation. * api-change:`workspaces`: Adds new APIs for managing and sharing WorkSpaces BYOL configuration across accounts. * from version 1.32.86 * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`qbusiness`: This release adds support for IAM Identity Center (IDC) as the identity gateway for Q Business. It also allows users to provide an explicit intent for Q Business to identify how the Chat request should be handled. * from version 1.32.85 * api-change:`bedrock-agent`: For Create Agent API, the agentResourceRoleArn parameter is no longer required. * api-change:`emr-serverless`: This release adds support for shuffle optimized disks that allow larger disk sizes and higher IOPS to efficiently run shuffle heavy workloads. * api-change:`entityresolution`: Cross Account Resource Support . * api-change:`iotwireless`: Add PublicGateways in the GetWirelessStatistics call response, indicating the LoRaWAN public network accessed by the device. * api-change:`lakeformation`: This release adds Lake Formation managed RAM support for the 4 APIs * "DescribeLakeFormationIdentityCenterConfiguration", "CreateLakeFormationIdentityCenterConfiguration", "DescribeLakeFormationIdentityCenterConfiguration", and "DeleteLakeFormationIdentityCenterConfiguration" * api-change:`m2`: Adding new ListBatchJobRestartPoints API and support for restart batch job. * api-change:`mediapackagev2`: Dash v2 is a MediaPackage V2 feature to support egressing on DASH manifest format. * api-change:`outposts`: This release adds new APIs to allow customers to configure their Outpost capacity at order-time. * api-change:`wellarchitected`: AWS Well-Architected now has a Connector for Jira to allow customers to efficiently track workload risks and improvement efforts and create closed-loop mechanisms. * from version 1.32.84 * api-change:`cloudformation`: Adding support for the new parameter "IncludePropertyValues" in the CloudFormation DescribeChangeSet API. When this parameter is included, the DescribeChangeSet response will include more detailed information such as before and after values for the resource properties that will change. * api-change:`config`: Updates documentation for AWS Config * api-change:`glue`: Modifying request for GetUnfilteredTableMetadata for view-related fields. * api-change:`healthlake`: Added new CREATE_FAILED status for data stores. Added new errorCause to DescribeFHIRDatastore API and ListFHIRDatastores API response for additional insights into data store creation and deletion workflows. * api-change:`iotfleethub`: Documentation updates for AWS IoT Fleet Hub to clarify that Fleet Hub supports organization instance of IAM Identity Center. * api-change:`kms`: This feature supports the ability to specify a custom rotation period for automatic key rotations, the ability to perform on- demand key rotations, and visibility into your key material rotations. * api-change:`mediatailor`: Added InsertionMode to PlaybackConfigurations. This setting controls whether players can use stitched or guided ad insertion. The default for players that do not specify an insertion mode is stitched. * api-change:`neptune-graph`: Update to API documentation to resolve customer reported issues. * api-change:`outposts`: This release adds EXPEDITORS as a valid shipment carrier. * api-change:`redshift`: Adds support for Amazon Redshift DescribeClusterSnapshots API to include Snapshot ARN response field. * api-change:`transfer`: This change releases support for importing self signed certificates to the Transfer Family for sending outbound file transfers over TLS/HTTPS. * from version 1.32.83 * api-change:`batch`: This release adds the task properties field to attempt details and the name field on EKS container detail. * api-change:`cloudfront`: CloudFront origin access control extends support to AWS Lambda function URLs and AWS Elemental MediaPackage v2 origins. * api-change:`cloudwatch`: This release adds support for Metric Characteristics for CloudWatch Anomaly Detection. Anomaly Detector now takes Metric Characteristics object with Periodic Spikes boolean field that tells Anomaly Detection that spikes that repeat at the same time every week are part of the expected pattern. * api-change:`codebuild`: Support access tokens for Bitbucket sources * api-change:`iam`: For CreateOpenIDConnectProvider API, the ThumbprintList parameter is no longer required. * api-change:`medialive`: AWS Elemental MediaLive introduces workflow monitor, a new feature that enables the visualization and monitoring of your media workflows. Create signal maps of your existing workflows and monitor them by creating notification and monitoring template groups. * api-change:`omics`: This release adds support for retrieval of S3 direct access metadata on sequence stores and read sets, and adds support for SHA256up and SHA512up HealthOmics ETags. * api-change:`pipes`: LogConfiguration ARN validation fixes * api-change:`rds`: Updates Amazon RDS documentation for Standard Edition 2 support in RDS Custom for Oracle. * api-change:`s3control`: Documentation updates for Amazon S3-control. * from version 1.32.82 * api-change:`cleanrooms`: AWS Clean Rooms Differential Privacy is now fully available. Differential privacy protects against user-identification attempts. * api-change:`connect`: This release adds new Submit Auto Evaluation Action for Amazon Connect Rules. * api-change:`networkmonitor`: Examples were added to CloudWatch Network Monitor commands. * api-change:`qconnect`: This release adds a new QiC public API updateSession and updates an existing QiC public API createSession * api-change:`rekognition`: Added support for ContentType to content moderation detections. * api-change:`supplychain`: This release includes API SendDataIntegrationEvent for AWS Supply Chain * api-change:`workspaces-thin-client`: Adding tags field to SoftwareSet. Removing tags fields from Summary objects. Changing the list of exceptions in tagging APIs. Fixing an issue where the SDK returns empty tags in Get APIs. * from version 1.32.81 * api-change:`codebuild`: Add new webhook filter types for GitHub webhooks * api-change:`mediaconvert`: This release includes support for bringing your own fonts to use for burn-in or DVB-Sub captioning workflows. * api-change:`pinpoint`: The OrchestrationSendingRoleArn has been added to the email channel and is used to send emails from campaigns or journeys. * api-change:`rds`: This release adds support for specifying the CA certificate to use for the new db instance when restoring from db snapshot, restoring from s3, restoring to point in time, and creating a db instance read replica. * from version 1.32.80 * api-change:`controlcatalog`: This is the initial SDK release for AWS Control Catalog, a central catalog for AWS managed controls. This release includes 3 new APIs - ListDomains, ListObjectives, and ListCommonControls - that vend high-level data to categorize controls across the AWS platform. * api-change:`mgn`: Added USE_SOURCE as default option to LaunchConfigurationTemplate bootMode parameter. * api-change:`networkmonitor`: Updated the allowed monitorName length for CloudWatch Network Monitor. * from version 1.32.79 * api-change:`quicksight`: Adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription * api-change:`resource-groups`: Added a new QueryErrorCode RESOURCE_TYPE_NOT_SUPPORTED that is returned by the ListGroupResources operation if the group query contains unsupported resource types. * api-change:`verifiedpermissions`: Adding BatchIsAuthorizedWithToken API which supports multiple authorization requests against a PolicyStore given a bearer token. * from version 1.32.78 * api-change:`b2bi`: Adding support for X12 5010 HIPAA EDI version and associated transaction sets. * api-change:`cleanrooms`: Feature: New schemaStatusDetails field to the existing Schema object that displays a status on Schema API responses to show whether a schema is queryable or not. New BatchGetSchemaAnalysisRule API to retrieve multiple schemaAnalysisRules using a single API call. * api-change:`ec2`: Amazon EC2 G6 instances powered by NVIDIA L4 Tensor Core GPUs can be used for a wide range of graphics-intensive and machine learning use cases. Gr6 instances also feature NVIDIA L4 GPUs and can be used for graphics workloads with higher memory requirements. * api-change:`emr-containers`: This release adds support for integration with EKS AccessEntry APIs to enable automatic Cluster Access for EMR on EKS. * api-change:`ivs`: API update to include an SRT ingest endpoint and passphrase for all channels. * api-change:`verifiedpermissions`: Adds GroupConfiguration field to Identity Source API's * from version 1.32.77 * api-change:`cleanroomsml`: The release includes a public SDK for AWS Clean Rooms ML APIs, making them globally available to developers worldwide. * api-change:`cloudformation`: This release would return a new field - PolicyAction in cloudformation's existed DescribeChangeSetResponse, showing actions we are going to apply on the physical resource (e.g., Delete, Retain) according to the user's template * api-change:`datazone`: This release supports the feature of dataQuality to enrich asset with dataQualityResult in Amazon DataZone. * api-change:`docdb`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`groundstation`: This release adds visibilityStartTime and visibilityEndTime to DescribeContact and ListContacts responses. * api-change:`lambda`: Add Ruby 3.3 (ruby3.3) support to AWS Lambda * api-change:`medialive`: Cmaf Ingest outputs are now supported in Media Live * api-change:`medical-imaging`: SearchImageSets API now supports following enhancements - Additional support for searching on UpdatedAt and SeriesInstanceUID - Support for searching existing filters between dates/times - Support for sorting the search result by Ascending/Descending - Additional parameters returned in the response * api-change:`transfer`: Add ability to specify Security Policies for SFTP Connectors * from version 1.32.76 * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`glue`: Adding View related fields to responses of read-only Table APIs. * api-change:`ivschat`: Doc-only update. Changed "Resources" to "Key Concepts" in docs and updated text. * api-change:`rolesanywhere`: This release increases the limit on the roleArns request parameter for the *Profile APIs that support it. This parameter can now take up to 250 role ARNs. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.32.75 * api-change:`cloudwatch`: This release adds support for CloudWatch Anomaly Detection on cross-account metrics. SingleMetricAnomalyDetector and MetricDataQuery inputs to Anomaly Detection APIs now take an optional AccountId field. * api-change:`datazone`: This release supports the feature of AI recommendations for descriptions to enrich the business data catalog in Amazon DataZone. * api-change:`deadline`: AWS Deadline Cloud is a new fully managed service that helps customers set up, deploy, and scale rendering projects in minutes, so they can improve the efficiency of their rendering pipelines and take on more projects. * api-change:`emr`: This release fixes a broken link in the documentation. * api-change:`lightsail`: This release adds support to upgrade the TLS version of the distribution. * from version 1.32.74 * api-change:`b2bi`: Supporting new EDI X12 transaction sets for X12 versions 4010, 4030, and 5010. * api-change:`codebuild`: Add new fleet status code for Reserved Capacity. * api-change:`codeconnections`: Duplicating the CodeStar Connections service into the new, rebranded AWS CodeConnections service. * api-change:`internetmonitor`: This release adds support to allow customers to track cross account monitors through ListMonitor, GetMonitor, ListHealthEvents, GetHealthEvent, StartQuery APIs. * api-change:`iotwireless`: Add support for retrieving key historical and live metrics for LoRaWAN devices and gateways * api-change:`marketplace-catalog`: This release enhances the ListEntities API to support ResaleAuthorizationId filter and sort for OfferEntity in the request and the addition of a ResaleAuthorizationId field in the response of OfferSummary. * api-change:`neptune-graph`: Add the new API Start-Import-Task for Amazon Neptune Analytics. * api-change:`sagemaker`: This release adds support for custom images for the CodeEditor App on SageMaker Studio * enhancement:`s3`: Add parameter to validate source and destination S3 URIs to the `mv` command. * from version 1.32.73 * api-change:`codecatalyst`: This release adds support for understanding pending changes to subscriptions by including two new response parameters for the GetSubscription API for Amazon CodeCatalyst. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate recommendations with a new customization preference, Memory Utilization. * api-change:`ec2`: Amazon EC2 C7gd, M7gd and R7gd metal instances with up to 3.8 TB of local NVMe-based SSD block-level storage have up to 45% improved real-time NVMe storage performance than comparable Graviton2-based instances. * api-change:`eks`: Add multiple customer error code to handle customer caused failure when managing EKS node groups * api-change:`guardduty`: Add EC2 support for GuardDuty Runtime Monitoring auto management. * api-change:`neptune-graph`: Update ImportTaskCancelled waiter to evaluate task state correctly and minor documentation changes. * api-change:`oam`: This release adds support for sharing AWS::InternetMonitor::Monitor resources. * api-change:`quicksight`: Amazon QuickSight: Adds support for setting up VPC Endpoint restrictions for accessing QuickSight Website. * from version 1.32.72 * api-change:`batch`: This feature allows AWS Batch to support configuration of imagePullSecrets and allowPrivilegeEscalation for jobs running on EKS * api-change:`bedrock-agent`: This changes introduces metadata documents statistics and also updates the documentation for bedrock agent. * api-change:`bedrock-agent-runtime`: This release introduces filtering support on Retrieve and RetrieveAndGenerate APIs. * api-change:`elasticache`: Added minimum capacity to Amazon ElastiCache Serverless. This feature allows customer to ensure minimum capacity even without current load * api-change:`secretsmanager`: Documentation updates for Secrets Manager * from version 1.32.71 * api-change:`bedrock-agent-runtime`: This release adds support to customize prompts sent through the RetrieveAndGenerate API in Agents for Amazon Bedrock. * api-change:`ce`: Adds support for backfill of cost allocation tags, with new StartCostAllocationTagBackfill and ListCostAllocationTagBackfillHistory API. * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`ecs`: This is a documentation update for Amazon ECS. * api-change:`finspace`: Add new operation delete-kx-cluster-node and add status parameter to list-kx-cluster-node operation. * from version 1.32.70 * api-change:`codebuild`: Supporting GitLab and GitLab Self Managed as source types in AWS CodeBuild. * api-change:`ec2`: Added support for ModifyInstanceMetadataDefaults and GetInstanceMetadataDefaults to set Instance Metadata Service account defaults * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`emr-containers`: This release increases the number of supported job template parameters from 20 to 100. * api-change:`globalaccelerator`: AWS Global Accelerator now supports cross- account sharing for bring your own IP addresses. * api-change:`medialive`: Exposing TileMedia H265 options * api-change:`sagemaker`: Introduced support for the following new instance types on SageMaker Studio for JupyterLab and CodeEditor applications: m6i, m6id, m7i, c6i, c6id, c7i, r6i, r6id, r7i, and p5 * from version 1.32.69 * api-change:`firehose`: Updates Amazon Firehose documentation for message regarding Enforcing Tags IAM Policy. * api-change:`kendra`: Documentation update, March 2024. Corrects some docs for Amazon Kendra. * api-change:`pricing`: Add ResourceNotFoundException to ListPriceLists and GetPriceListFileUrl APIs * api-change:`rolesanywhere`: This release relaxes constraints on the durationSeconds request parameter for the *Profile APIs that support it. This parameter can now take on values that go up to 43200. * api-change:`securityhub`: Added new resource detail object to ASFF, including resource for LastKnownExploitAt * from version 1.32.68 * api-change:`codeartifact`: This release adds Package groups to CodeArtifact so you can more conveniently configure package origin controls for multiple packages. * from version 1.32.67 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for DynamoDB tables and streams. IAM Access Analyzer helps you author functional and secure resource-based policies and identify cross-account access. Updated service API, documentation, and paginators. * api-change:`codebuild`: This release adds support for new webhook events (RELEASED and PRERELEASED) and filter types (TAG_NAME and RELEASE_NAME). * api-change:`connect`: This release updates the *InstanceStorageConfig APIs to support a new ResourceType: REAL_TIME_CONTACT_ANALYSIS_CHAT_SEGMENTS. Use this resource type to enable streaming for real-time analysis of chat contacts and to associate a Kinesis stream where real-time analysis chat segments will be published. * api-change:`dynamodb`: This release introduces 3 new APIs ('GetResourcePolicy', 'PutResourcePolicy' and 'DeleteResourcePolicy') and modifies the existing 'CreateTable' API for the resource-based policy support. It also modifies several APIs to accept a 'TableArn' for the 'TableName' parameter. * api-change:`managedblockchain-query`: AMB Query: update GetTransaction to include transactionId as input * api-change:`savingsplans`: Introducing the Savings Plans Return feature enabling customers to return their Savings Plans within 7 days of purchase. * from version 1.32.66 * api-change:`cloudformation`: Documentation update, March 2024. Corrects some formatting. * api-change:`ec2`: This release adds the new DescribeMacHosts API operation for getting information about EC2 Mac Dedicated Hosts. Users can now see the latest macOS versions that their underlying Apple Mac can support without needing to be updated. * api-change:`finspace`: Adding new attributes readWrite and onDemand to dataview models for Database Maintenance operations. * api-change:`logs`: Update LogSamples field in Anomaly model to be a list of LogEvent * api-change:`managedblockchain-query`: Introduces a new API for Amazon Managed Blockchain Query: ListFilteredTransactionEvents. * from version 1.32.65 * api-change:`cloudformation`: This release supports for a new API ListStackSetAutoDeploymentTargets, which provider auto-deployment configuration as a describable resource. Customers can now view the specific combinations of regions and OUs that are being auto-deployed. * api-change:`kms`: Adds the ability to use the default policy name by omitting the policyName parameter in calls to PutKeyPolicy and GetKeyPolicy * api-change:`mediatailor`: This release adds support to allow customers to show different content within a channel depending on metadata associated with the viewer. * api-change:`rds`: This release launches the ModifyIntegration API and support for data filtering for zero-ETL Integrations. * api-change:`s3`: Fix two issues with response root node names. * api-change:`timestream-query`: Documentation updates, March 2024 * from version 1.32.64 * api-change:`backup`: This release introduces a boolean attribute ManagedByAWSBackupOnly as part of ListRecoveryPointsByResource api to filter the recovery points based on ownership. This attribute can be used to filter out the recovery points protected by AWSBackup. * api-change:`codebuild`: AWS CodeBuild now supports overflow behavior on Reserved Capacity. * api-change:`connect`: This release adds Hierarchy based Access Control fields to Security Profile public APIs and adds support for UserAttributeFilter to SearchUsers API. * api-change:`ec2`: Add media accelerator and neuron device information on the describe instance types API. * api-change:`kinesisanalyticsv2`: Support for Flink 1.18 in Managed Service for Apache Flink * api-change:`s3`: Documentation updates for Amazon S3. * api-change:`sagemaker`: Adds m6i, m6id, m7i, c6i, c6id, c7i, r6i r6id, r7i, p5 instance type support to Sagemaker Notebook Instances and miscellaneous wording fixes for previous Sagemaker documentation. * api-change:`workspaces-thin-client`: Removed unused parameter kmsKeyArn from UpdateDeviceRequest * from version 1.32.63 * api-change:`amplify`: Documentation updates for Amplify. Identifies the APIs available only to apps created using Amplify Gen 1. * api-change:`ec2-instance-connect`: This release includes a new exception type "SerialConsoleSessionUnsupportedException" for SendSerialConsoleSSHPublicKey API. * api-change:`elbv2`: This release allows you to configure HTTP client keep- alive duration for communication between clients and Application Load Balancers. * api-change:`fis`: This release adds support for previewing target resources before running a FIS experiment. It also adds resource ARNs for actions, experiments, and experiment templates to API responses. * api-change:`rds`: Updates Amazon RDS documentation for EBCDIC collation for RDS for Db2. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`timestream-influxdb`: This is the initial SDK release for Amazon Timestream for InfluxDB. Amazon Timestream for InfluxDB is a new time-series database engine that makes it easy for application developers and DevOps teams to run InfluxDB databases on AWS for near real-time time-series applications using open source APIs. * from version 1.32.62 * api-change:`ivs-realtime`: adds support for multiple new composition layout configuration options (grid, pip) * api-change:`kinesisanalyticsv2`: Support new RuntimeEnvironmentUpdate parameter within UpdateApplication API allowing callers to change the Flink version upon which their application runs. * api-change:`s3`: This release makes the default option for S3 on Outposts request signing to use the SigV4A algorithm when using AWS Common Runtime (CRT). * from version 1.32.61 * api-change:`cloudformation`: CloudFormation documentation update for March, 2024 * api-change:`connect`: This release increases MaxResults limit to 500 in request for SearchUsers, SearchQueues and SearchRoutingProfiles APIs of Amazon Connect. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`kafka`: Added support for specifying the starting position of topic replication in MSK-Replicator. * api-change:`ssm`: March 2024 doc-only updates for Systems Manager. * from version 1.32.60 * api-change:`codestar-connections`: Added a sync configuration enum to disable publishing of deployment status to source providers (PublishDeploymentStatus). Added a sync configuration enum (TriggerStackUpdateOn) to only trigger changes. * api-change:`elasticache`: Revisions to API text that are now to be carried over to SDK text, changing usages of "SFO" in code examples to "us-west-1", and some other typos. * api-change:`mediapackagev2`: This release enables customers to safely update their MediaPackage v2 channel groups, channels and origin endpoints using entity tags. * from version 1.32.59 * api-change:`batch`: This release adds JobStateTimeLimitActions setting to the Job Queue API. It allows you to configure an action Batch can take for a blocking job in front of the queue after the defined period of time. The new parameter applies for ECS, EKS, and FARGATE Job Queues. * api-change:`bedrock-agent-runtime`: Documentation update for Bedrock Runtime Agent * api-change:`cloudtrail`: Added exceptions to CreateTrail, DescribeTrails, and ListImportFailures APIs. * api-change:`codebuild`: This release adds support for a new webhook event: PULL_REQUEST_CLOSED. * api-change:`cognito-idp`: Add ConcurrentModificationException to SetUserPoolMfaConfig * api-change:`guardduty`: Add RDS Provisioned and Serverless Usage types * api-change:`transfer`: Added DES_EDE3_CBC to the list of supported encryption algorithms for messages sent with an AS2 connector. * from version 1.32.58 * api-change:`appconfig`: AWS AppConfig now supports dynamic parameters, which enhance the functionality of AppConfig Extensions by allowing you to provide parameter values to your Extensions at the time you deploy your configuration. * api-change:`ec2`: This release adds an optional parameter to RegisterImage and CopyImage APIs to support tagging AMIs at the time of creation. * api-change:`grafana`: Adds support for the new GrafanaToken as part of the Amazon Managed Grafana Enterprise plugins upgrade to associate your AWS account with a Grafana Labs account. * api-change:`lambda`: Documentation updates for AWS Lambda * api-change:`payment-cryptography-data`: AWS Payment Cryptography EMV Decrypt Feature Release * api-change:`rds`: Updates Amazon RDS documentation for io2 storage for Multi-AZ DB clusters * api-change:`snowball`: Doc-only update for change to EKS-Anywhere ordering. * api-change:`wafv2`: You can increase the max request body inspection size for some regional resources. The size setting is in the web ACL association config. Also, the AWSManagedRulesBotControlRuleSet EnableMachineLearning setting now takes a Boolean instead of a primitive boolean type, for languages like Java. * api-change:`workspaces`: Added note for user decoupling * from version 1.32.57 * api-change:`dynamodb`: Doc only updates for DynamoDB documentation * api-change:`imagebuilder`: Add PENDING status to Lifecycle Execution resource status. Add StartTime and EndTime to ListLifecycleExecutionResource API response. * api-change:`mwaa`: Amazon MWAA adds support for Apache Airflow v2.8.1. * api-change:`rds`: Updated the input of CreateDBCluster and ModifyDBCluster to support setting CA certificates. Updated the output of DescribeDBCluster to show current CA certificate setting value. * api-change:`redshift`: Update for documentation only. Covers port ranges, definition updates for data sharing, and definition updates to cluster- snapshot documentation. * api-change:`verifiedpermissions`: Deprecating details in favor of configuration for GetIdentitySource and ListIdentitySources APIs. * from version 1.32.56 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`chatbot`: Minor update to documentation. * api-change:`organizations`: This release contains an endpoint addition * api-change:`sesv2`: Adds support for providing custom headers within SendEmail and SendBulkEmail for SESv2. * from version 1.32.55 * api-change:`cloudformation`: Add DetailedStatus field to DescribeStackEvents and DescribeStacks APIs * api-change:`fsx`: Added support for creating FSx for NetApp ONTAP file systems with up to 12 HA pairs, delivering up to 72 GB/s of read throughput and 12 GB/s of write throughput. * api-change:`organizations`: Documentation update for AWS Organizations * from version 1.32.54 * api-change:`accessanalyzer`: Fixed a typo in description field. * api-change:`autoscaling`: With this release, Amazon EC2 Auto Scaling groups, EC2 Fleet, and Spot Fleet improve the default price protection behavior of attribute-based instance type selection of Spot Instances, to consistently select from a wide range of instance types. * api-change:`ec2`: With this release, Amazon EC2 Auto Scaling groups, EC2 Fleet, and Spot Fleet improve the default price protection behavior of attribute-based instance type selection of Spot Instances, to consistently select from a wide range of instance types. * from version 1.32.53 * api-change:`docdb-elastic`: Launched Elastic Clusters Readable Secondaries, Start/Stop, Configurable Shard Instance count, Automatic Backups and Snapshot Copying * api-change:`eks`: Added support for new AL2023 AMIs to the supported AMITypes. * api-change:`lexv2-models`: This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users. * api-change:`migrationhuborchestrator`: Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs. * api-change:`quicksight`: TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update * api-change:`sagemaker`: Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration. * api-change:`securitylake`: Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason. * from version 1.32.52 * api-change:`batch`: This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs. * api-change:`bedrock-agent-runtime`: This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents * api-change:`ce`: This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity. * api-change:`ec2`: This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000. * api-change:`iot`: This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL. * api-change:`wafv2`: AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes. * from version 1.32.51 * api-change:`amplifyuibuilder`: We have added the ability to tag resources after they are created * from version 1.32.50 * api-change:`apigateway`: Documentation updates for Amazon API Gateway. * api-change:`drs`: Added volume status to DescribeSourceServer replicated volumes. * api-change:`kafkaconnect`: Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API. * api-change:`rds`: This release adds support for gp3 data volumes for Multi- AZ DB Clusters. * from version 1.32.49 * api-change:`appsync`: Documentation only updates for AppSync * api-change:`qldb`: Clarify possible values for KmsKeyArn and EncryptionDescription. * api-change:`rds`: Add pattern and length based validations for DBShardGroupIdentifier * api-change:`rum`: Doc-only update for new RUM metrics that were added * from version 1.32.48 * api-change:`internetmonitor`: This release adds IPv4 prefixes to health events * api-change:`kinesisvideo`: Increasing NextToken parameter length restriction for List APIs from 512 to 1024. * from version 1.32.47 * api-change:`iotevents`: Increase the maximum length of descriptions for Inputs, Detector Models, and Alarm Models * api-change:`lookoutequipment`: This release adds a field exposing model quality to read APIs for models. It also adds a model quality field to the API response when creating an inference scheduler. * api-change:`medialive`: MediaLive now supports the ability to restart pipelines in a running channel. * api-change:`ssm`: This release adds support for sharing Systems Manager parameters with other AWS accounts. * from version 1.32.46 * api-change:`dynamodb`: Publishing quick fix for doc only update. * api-change:`firehose`: This release updates a few Firehose related APIs. * api-change:`lambda`: Add .NET 8 (dotnet8) Runtime support to AWS Lambda. * from version 1.32.45 * api-change:`amplify`: This release contains API changes that enable users to configure their Amplify domains with their own custom SSL/TLS certificate. * api-change:`chatbot`: This release adds support for AWS Chatbot. You can now monitor, operate, and troubleshoot your AWS resources with interactive ChatOps using the AWS SDK. * api-change:`config`: Documentation updates for the AWS Config CLI * api-change:`ivs`: Changed description for latencyMode in Create/UpdateChannel and Channel/ChannelSummary. * api-change:`keyspaces`: Documentation updates for Amazon Keyspaces * api-change:`mediatailor`: MediaTailor: marking #AdBreak.OffsetMillis as required. * from version 1.32.44 * api-change:`connectparticipant`: Doc only update to GetTranscript API reference guide to inform users about presence of events in the chat transcript. * api-change:`emr`: adds fine grained control over Unhealthy Node Replacement to Amazon ElasticMapReduce * api-change:`firehose`: This release adds support for Data Message Extraction for decompressed CloudWatch logs, and to use a custom file extension or time zone for S3 destinations. * api-change:`lambda`: Documentation-only updates for Lambda to clarify a number of existing actions and properties. * api-change:`rds`: Doc only update for a valid option in DB parameter group * api-change:`sns`: This release marks phone numbers as sensitive inputs. * from version 1.32.43 * api-change:`artifact`: This is the initial SDK release for AWS Artifact. AWS Artifact provides on-demand access to compliance and third-party compliance reports. This release includes access to List and Get reports, along with their metadata. This release also includes access to AWS Artifact notifications settings. * api-change:`codepipeline`: Add ability to override timeout on action level. * api-change:`detective`: Doc only updates for content enhancement * api-change:`guardduty`: Marked fields IpAddressV4, PrivateIpAddress, Email as Sensitive. * api-change:`healthlake`: This release adds a new response parameter, JobProgressReport, to the DescribeFHIRImportJob and ListFHIRImportJobs API operation. JobProgressReport provides details on the progress of the import job on the server. * api-change:`opensearch`: Adds additional supported instance types. * api-change:`polly`: Amazon Polly adds 1 new voice - Burcu (tr-TR) * api-change:`sagemaker`: This release adds a new API UpdateClusterSoftware for SageMaker HyperPod. This API allows users to patch HyperPod clusters with latest platform softwares. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.42 * api-change:`controltower`: Adds support for new Baseline and EnabledBaseline APIs for automating multi-account governance. * api-change:`lookoutequipment`: This feature allows customers to see pointwise model diagnostics results for their models. * api-change:`qbusiness`: This release adds the metadata-boosting feature, which allows customers to easily fine-tune the underlying ranking of retrieved RAG passages in order to optimize Q&A answer relevance. It also adds new feedback reasons for the PutFeedback API. * from version 1.32.41 * api-change:`lightsail`: This release adds support to upgrade the major version of a database. * api-change:`marketplace-catalog`: AWS Marketplace Catalog API now supports setting intent on requests * api-change:`resource-explorer-2`: Resource Explorer now uses newly supported IPv4 'amazonaws.com' endpoints by default. * api-change:`securitylake`: Documentation updates for Security Lake * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.40 * api-change:`appsync`: Adds support for new options on GraphqlAPIs, Resolvers and Data Sources for emitting Amazon CloudWatch metrics for enhanced monitoring of AppSync APIs. * api-change:`cloudwatch`: Update cloudwatch command to latest version * api-change:`neptune-graph`: Adding a new option "parameters" for data plane api ExecuteQuery to support running parameterized query via SDK. * api-change:`route53domains`: This release adds bill contact support for RegisterDomain, TransferDomain, UpdateDomainContact and GetDomainDetail API. * from version 1.32.39 * api-change:`amp`: Overall documentation updates. * api-change:`batch`: This feature allows Batch to support configuration of repository credentials for jobs running on ECS * api-change:`braket`: Creating a job will result in DeviceOfflineException when using an offline device, and DeviceRetiredException when using a retired device. * api-change:`cost-optimization-hub`: Adding includeMemberAccounts field to the response of ListEnrollmentStatuses API. * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`iot`: This release allows AWS IoT Core users to enable Online Certificate Status Protocol (OCSP) Stapling for TLS X.509 Server Certificates when creating and updating AWS IoT Domain Configurations with Custom Domain. * api-change:`pricing`: Add Throttling Exception to all APIs. * from version 1.32.38 * api-change:`codepipeline`: Add ability to execute pipelines with new parallel & queued execution modes and add support for triggers with filtering on branches and file paths. * api-change:`quicksight`: General Interactions for Visuals; Waterfall Chart Color Configuration; Documentation Update * api-change:`workspaces`: This release introduces User-Decoupling feature. This feature allows Workspaces Core customers to provision workspaces without providing users. CreateWorkspaces and DescribeWorkspaces APIs will now take a new optional parameter "WorkspaceName". * from version 1.32.37 * api-change:`datasync`: AWS DataSync now supports manifests for specifying files or objects to transfer. * api-change:`lexv2-models`: Update lexv2-models command to latest version * api-change:`redshift`: LisRecommendations API to fetch Amazon Redshift Advisor recommendations. * from version 1.32.36 * api-change:`appsync`: Support for environment variables in AppSync GraphQL APIs * api-change:`ecs`: This release is a documentation only update to address customer issues. * api-change:`es`: This release adds clear visibility to the customers on the changes that they make on the domain. * api-change:`logs`: This release adds a new field, logGroupArn, to the response of the logs:DescribeLogGroups action. * api-change:`opensearch`: This release adds clear visibility to the customers on the changes that they make on the domain. * api-change:`wafv2`: You can now delete an API key that you've created for use with your CAPTCHA JavaScript integration API. * from version 1.32.35 * api-change:`glue`: Introduce Catalog Encryption Role within Glue Data Catalog Settings. Introduce SASL/PLAIN as an authentication method for Glue Kafka connections * api-change:`workspaces`: Added definitions of various WorkSpace states * from version 1.32.34 * api-change:`dynamodb`: Any number of users can execute up to 50 concurrent restores (any type of restore) in a given account. * api-change:`sagemaker`: Amazon SageMaker Canvas adds GenerativeAiSettings support for CanvasAppSettings. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.33 * api-change:`cognito-idp`: Added CreateIdentityProvider and UpdateIdentityProvider details for new SAML IdP features * api-change:`ivs`: This release introduces a new resource Playback Restriction Policy which can be used to geo-restrict or domain-restrict channel stream playback when associated with a channel. New APIs to support this resource were introduced in the form of Create/Delete/Get/Update/List. * api-change:`managedblockchain-query`: This release adds support for transactions that have not reached finality. It also removes support for the status property from the response of the GetTransaction operation. You can use the confirmationStatus and executionStatus properties to determine the status of the transaction. * api-change:`mediaconvert`: This release includes support for broadcast-mixed audio description tracks. * api-change:`neptune-graph`: Adding new APIs in SDK for Amazon Neptune Analytics. These APIs include operations to execute, cancel, list queries and get the graph summary. * from version 1.32.32 * api-change:`cloudformation`: CloudFormation IaC generator allows you to scan existing resources in your account and select resources to generate a template for a new or existing CloudFormation stack. * api-change:`elbv2`: Update elbv2 command to latest version * api-change:`glue`: Update page size limits for GetJobRuns and GetTriggers APIs. * api-change:`ssm`: This release adds an optional Duration parameter to StateManager Associations. This allows customers to specify how long an apply-only-on-cron association execution should run. Once the specified Duration is out all the ongoing cancellable commands or automations are cancelled. * Switch to Python 3.11 build in SLE 15 SP4 and openSUSE Leap 15.4 and later (jsc#PCT-371) * Switch to wheel build * Update to version 1.32.31 * api-change:`datazone`: Add new skipDeletionCheck to DeleteDomain. Add new skipDeletionCheck to DeleteProject which also automatically deletes dependent objects * api-change:`route53`: Update the SDKs for text changes in the APIs. * From 1.32.30 * api-change:`autoscaling`: EC2 Auto Scaling customers who use attribute based instance-type selection can now intuitively define their Spot instances price protection limit as a percentage of the lowest priced On-Demand instance type. * api-change:`comprehend`: Comprehend PII analysis now supports Spanish input documents. * api-change:`ec2`: EC2 Fleet customers who use attribute based instance-type selection can now intuitively define their Spot instances price protection limit as a percentage of the lowest priced On-Demand instance type. * api-change:`mwaa`: This release adds MAINTENANCE environment status for Amazon MWAA environments. * api-change:`rds`: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS RestoreDBClusterFromSnapshot and RestoreDBClusterToPointInTime API methods. This provides enhanced error handling, ensuring a more robust experience. * api-change:`snowball`: Modified description of createaddress to include direction to add path when providing a JSON file. * From 1.32.29 * api-change:`connect`: Update list and string length limits for predefined attributes. * api-change:`inspector2`: This release adds ECR container image scanning based on their lastRecordedPullTime. * api-change:`sagemaker`: Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs. * From 1.32.28 * api-change:`acm-pca`: AWS Private CA now supports an option to omit the CDP extension from issued certificates, when CRL revocation is enabled. * api-change:`lightsail`: This release adds support for IPv6-only instance plans. * From 1.32.27 * api-change:`ec2`: Introduced a new clientToken request parameter on CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter allows idempotent operations on the APIs. * api-change:`ecs`: Documentation updates for Amazon ECS. * api-change:`outposts`: DeviceSerialNumber parameter is now optional in StartConnection API * api-change:`rds`: This release adds support for Aurora Limitless Database. * api-change:`storagegateway`: Add DeprecationDate and SoftwareVersion to response of ListGateways. * From 1.32.26 * api-change:`inspector2`: This release adds support for CIS scans on EC2 instances. * From 1.32.25 * bugfix:`s3 sync`: Disable S3 Express support for s3 sync command * From 1.32.24 * api-change:`appconfigdata`: Fix FIPS Endpoints in aws-us-gov. * api-change:`cloud9`: Doc-only update around removing AL1 from list of available AMIs for Cloud9 * api-change:`cloudfront-keyvaluestore`: This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore. * api-change:`connectcases`: This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`ecs`: This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services. * api-change:`finspace`: Allow customer to set zip default through command line arguments. * api-change:`organizations`: Doc only update for quota increase change * api-change:`rds`: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.23 * api-change:`athena`: Introducing new NotebookS3LocationUri parameter to Athena ImportNotebook API. Payload is no longer required and either Payload or NotebookS3LocationUri needs to be provided (not both) for a successful ImportNotebook API call. If both are provided, an InvalidRequestException will be thrown. * api-change:`codebuild`: Release CodeBuild Reserved Capacity feature * api-change:`dynamodb`: This release adds support for including ApproximateCreationDateTimePrecision configurations in EnableKinesisStreamingDestination API, adds the same as an optional field in the response of DescribeKinesisStreamingDestination, and adds support for a new UpdateKinesisStreamingDestination API. * api-change:`qconnect`: Increased Quick Response name max length to 100 * From 1.32.22 * api-change:`b2bi`: Increasing TestMapping inputFileContent file size limit to 5MB and adding file size limit 250KB for TestParsing input file. This release also includes exposing InternalServerException for Tag APIs. * api-change:`cloudtrail`: This release adds a new API ListInsightsMetricData to retrieve metric data from CloudTrail Insights. * api-change:`connect`: GetMetricDataV2 now supports 3 groupings * api-change:`drs`: Removed invalid and unnecessary default values. * api-change:`firehose`: Allow support for Snowflake as a Kinesis Data Firehose delivery destination. * api-change:`sagemaker-featurestore-runtime`: Increase BatchGetRecord limits from 10 items to 100 items * From 1.32.21 * api-change:`dynamodb`: Updating note for enabling streams for UpdateTable. * api-change:`keyspaces`: This release adds support for Multi-Region Replication with provisioned tables, and Keyspaces auto scaling APIs * From 1.32.20 * api-change:`iot`: Revert release of LogTargetTypes * api-change:`iotfleetwise`: Updated APIs: SignalNodeType query parameter has been added to ListSignalCatalogNodesRequest and ListVehiclesResponse has been extended with attributes field. * api-change:`macie2`: This release adds support for analyzing Amazon S3 objects that are encrypted using dual-layer server-side encryption with AWS KMS keys (DSSE-KMS). It also adds support for reporting DSSE-KMS details in statistics and metadata about encryption settings for S3 buckets and objects. * api-change:`payment-cryptography`: Provide an additional option for key exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and ExportKey operations. Added new key usage (type) TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane operations with ISO9797 Algorithm 1 MAC calculations. * api-change:`personalize-runtime`: Documentation updates for Amazon Personalize * api-change:`personalize`: Documentation updates for Amazon Personalize. * api-change:`rekognition`: This release adds ContentType and TaxonomyLevel attributes to DetectModerationLabels and GetMediaAnalysisJob API responses. * api-change:`securityhub`: Documentation updates for AWS Security Hub * From 1.32.19 * api-change:`sagemaker`: This release will have ValidationException thrown if certain invalid app types are provided. The release will also throw ValidationException if more than 10 account ids are provided in VpcOnlyTrustedAccounts. * From 1.32.18 * api-change:`connect`: Supervisor Barge for Chat is now supported through the MonitorContact API. * api-change:`connectparticipant`: Introduce new Supervisor participant role * api-change:`location`: Location SDK documentation update. Added missing fonts to the MapConfiguration data type. Updated note for the SubMunicipality property in the place data type. * api-change:`mwaa`: This Amazon MWAA feature release includes new fields in CreateWebLoginToken response model. The new fields IamIdentity and AirflowIdentity will let you match identifications, as the Airflow identity length is currently hashed to 64 characters. * api-change:`s3control`: S3 On Outposts team adds dualstack endpoints support for S3Control and S3Outposts API calls. * api-change:`supplychain`: This release includes APIs CreateBillOfMaterialsImportJob and GetBillOfMaterialsImportJob. * api-change:`transfer`: AWS Transfer Family now supports static IP addresses for SFTP & AS2 connectors and for async MDNs on AS2 servers. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.17 * api-change:`ec2`: This release adds support for adding an ElasticBlockStorage volume configurations in ECS RunTask/StartTask/CreateService/UpdateService APIs. The configuration allows for attaching EBS volumes to ECS Tasks. * api-change:`ecs`: This release adds support for adding an ElasticBlockStorage volume configurations in ECS RunTask/StartTask/CreateService/UpdateService APIs. The configuration allows for attaching EBS volumes to ECS Tasks. * api-change:`events`: Update events command to latest version * api-change:`iot`: Add ConflictException to Update APIs of AWS IoT Software Package Catalog * api-change:`iotfleetwise`: The following dataTypes have been removed: CUSTOMER_DECODED_INTERFACE in NetworkInterfaceType; CUSTOMER_DECODED_SIGNAL_INFO_IS_NULL in SignalDecoderFailureReason; CUSTOMER_DECODED_SIGNAL_NETWORK_INTERFACE_INFO_IS_NULL in NetworkInterfaceFailureReason; CUSTOMER_DECODED_SIGNAL in SignalDecoderType * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`workspaces`: Added AWS Workspaces RebootWorkspaces API - Extended Reboot documentation update * From 1.32.16 * api-change:`connectcampaigns`: Minor pattern updates for Campaign and Dial Request API fields. * api-change:`location`: This release adds API support for custom layers for the maps service APIs: CreateMap, UpdateMap, DescribeMap. * api-change:`logs`: Add support for account level subscription filter policies to PutAccountPolicy, DescribeAccountPolicies, and DeleteAccountPolicy APIs. Additionally, PutAccountPolicy has been modified with new optional "selectionCriteria" parameter for resource selection. * api-change:`qconnect`: QueryAssistant and GetRecommendations will be discontinued starting June 1, 2024. To receive generative responses after March 1, 2024 you will need to create a new Assistant in the Connect console and integrate the Amazon Q in Connect JavaScript library (amazon-q- connectjs) into your applications. * api-change:`redshift-serverless`: Updates to ConfigParameter for RSS workgroup, removal of use_fips_ssl * api-change:`route53`: Route53 now supports geoproximity routing in AWS regions * api-change:`wisdom`: QueryAssistant and GetRecommendations will be discontinued starting June 1, 2024. To receive generative responses after March 1, 2024 you will need to create a new Assistant in the Connect console and integrate the Amazon Q in Connect JavaScript library (amazon-q- connectjs) into your applications. * From 1.32.15 * api-change:`codebuild`: Aws CodeBuild now supports new compute type BUILD_GENERAL1_XLARGE * api-change:`ec2`: Amazon EC2 R7iz bare metal instances are powered by custom 4th generation Intel Xeon Scalable processors. * api-change:`route53resolver`: This release adds support for query type configuration on firewall rules that enables customers for granular action (ALLOW, ALERT, BLOCK) by DNS query type. * From 1.32.14 * api-change:`connect`: Minor trait updates for User APIs * api-change:`kms`: Documentation updates for AWS Key Management Service (KMS). * api-change:`redshift-serverless`: use_fips_ssl and require_ssl parameter support for Workgroup, UpdateWorkgroup, and CreateWorkgroup * From 1.32.13 * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config in November and December 2023. * api-change:`docdb`: Adding PerformanceInsightsEnabled and PerformanceInsightsKMSKeyId fields to DescribeDBInstances Response. * api-change:`ecs`: This release adds support for managed instance draining which facilitates graceful termination of Amazon ECS instances. * api-change:`es`: This release adds support for new or existing Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward secrecy cipher suites for domain endpoints. * api-change:`lightsail`: This release adds support to set up an HTTPS endpoint on an instance. * api-change:`opensearch`: This release adds support for new or existing Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward secrecy cipher suites for domain endpoints. * api-change:`sagemaker`: Adding support for provisioned throughput mode for SageMaker Feature Groups * api-change:`servicecatalog`: Added Idempotency token support to Service Catalog AssociateServiceActionWithProvisioningArtifact, DisassociateServiceActionFromProvisioningArtifact, DeleteServiceAction API * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.12 * api-change:`connect`: Amazon Connect, Contact Lens Evaluation API increase evaluation notes max length to 3072. * api-change:`mediaconvert`: This release includes video engine updates including HEVC improvements, support for ingesting VP9 encoded video in MP4 containers, and support for user-specified 3D LUTs. * From 1.32.11 * api-change:`apprunner`: AWS App Runner adds Python 3.11 and Node.js 18 runtimes. * api-change:`location`: This release introduces a new parameter to bypasses an API key's expiry conditions and delete the key. * api-change:`quicksight`: Add LinkEntityArn support for different partitions; Add UnsupportedUserEditionException in UpdateDashboardLinks API; Add support for New Reader Experience Topics * From 1.32.10 * api-change:`codestar-connections`: New integration with the GitLab self- managed provider type. * api-change:`kinesis-video-archived-media`: NoDataRetentionException thrown when GetImages requested for a Stream that does not retain data (that is, has a DataRetentionInHours of 0). * api-change:`sagemaker`: Amazon SageMaker Studio now supports Docker access from within app container * From 1.32.9 * api-change:`emr`: Update emr command to latest version * From 1.32.8 * api-change:`iam`: Documentation updates for AWS Identity and Access Management (IAM). * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.7 * api-change:`bedrock-agent`: Adding Claude 2.1 support to Bedrock Agents * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: This release adds additional configurations for Query Session Context on the following APIs: GetUnfilteredTableMetadata, GetUnfilteredPartitionMetadata, GetUnfilteredPartitionsMetadata. * api-change:`lakeformation`: This release adds additional configurations on GetTemporaryGlueTableCredentials for Query Session Context. * api-change:`mediaconnect`: This release adds the DescribeSourceMetadata API. This API can be used to view the stream information of the flow's source. * api-change:`networkmonitor`: CloudWatch Network Monitor is a new service within CloudWatch that will help network administrators and operators continuously monitor network performance metrics such as round-trip-time and packet loss between their AWS-hosted applications and their on-premises locations. * api-change:`omics`: Provides minor corrections and an updated description of APIs. * api-change:`secretsmanager`: Update endpoint rules and examples. * From 1.32.6 * api-change:`amp`: This release updates Amazon Managed Service for Prometheus APIs to support customer managed KMS keys. * api-change:`appintegrations`: The Amazon AppIntegrations service adds DeleteApplication API for deleting applications, and updates APIs to support third party applications reacting to workspace events and make data requests to Amazon Connect for agent and contact events. * api-change:`bedrock-agent`: This release introduces Amazon Aurora as a vector store on Knowledge Bases for Amazon Bedrock * api-change:`codecommit`: AWS CodeCommit now supports customer managed keys from AWS Key Management Service. UpdateRepositoryEncryptionKey is added for updating the key configuration. CreateRepository, GetRepository, BatchGetRepositories are updated with new input or output parameters. * api-change:`connect`: Adds APIs to manage User Proficiencies and Predefined Attributes. Enhances StartOutboundVoiceContact API input. Introduces SearchContacts API. Enhances DescribeContact API. Adds an API to update Routing Attributes in QueuePriority and QueueTimeAdjustmentSeconds. * api-change:`medialive`: MediaLive now supports the ability to configure the audio that an AWS Elemental Link UHD device produces, when the device is configured as the source for a flow in AWS Elemental MediaConnect. * api-change:`neptune-graph`: Adds Waiters for successful creation and deletion of Graph, Graph Snapshot, Import Task and Private Endpoints for Neptune Analytics * api-change:`rds-data`: This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. * api-change:`rds`: This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. * api-change:`sagemaker`: Amazon SageMaker Training now provides model training container access for debugging purposes. Amazon SageMaker Search now provides the ability to use visibility conditions to limit resource access to a single domain or multiple domains. * From 1.32.5 * api-change:`appstream`: This release introduces configurable clipboard, allowing admins to specify the maximum length of text that can be copied by the users from their device to the remote session and vice-versa. * api-change:`eks`: Add support for cluster insights, new EKS capability that surfaces potentially upgrade impacting issues. * api-change:`guardduty`: This release 1) introduces a new API: GetOrganizationStatistics , and 2) adds a new UsageStatisticType TOP_ACCOUNTS_BY_FEATURE for GetUsageStatistics API * api-change:`managedblockchain-query`: Adding Confirmation Status and Execution Status to GetTransaction Response. * api-change:`mediatailor`: Adds the ability to configure time shifting on MediaTailor channels using the TimeShiftConfiguration field * api-change:`route53`: Amazon Route 53 now supports the Canada West (Calgary) Region (ca-west-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.4 * api-change:`appsync`: This release adds additional configurations on GraphQL APIs for limits on query depth, resolver count, and introspection * api-change:`chime-sdk-meetings`: Add meeting features to specify a maximum camera resolution, a maximum content sharing resolution, and a maximum number of attendees for a given meeting. * api-change:`ec2`: Provision BYOIPv4 address ranges and advertise them by specifying the network border groups option in Los Angeles, Phoenix and Dallas AWS Local Zones. * api-change:`fsx`: Added support for FSx for OpenZFS on-demand data replication across AWS accounts and/or regions.Added the IncludeShared attribute for DescribeSnapshots.Added the CopyStrategy attribute for OpenZFSVolumeConfiguration. * api-change:`marketplace-catalog`: AWS Marketplace now supports a new API, BatchDescribeEntities, which returns metadata and content for multiple entities. * api-change:`rds`: RDS - The release adds two new APIs: DescribeDBRecommendations and ModifyDBRecommendation * From 1.32.3 * api-change:`cognito-idp`: Amazon Cognito now supports trigger versions that define the fields in the request sent to pre token generation Lambda triggers. * api-change:`eks`: Add support for EKS Cluster Access Management. * api-change:`quicksight`: A docs-only release to add missing entities to the API reference. * api-change:`route53resolver`: Add DOH protocols in resolver endpoints. * From 1.32.2 * enhancement:`cloudformation package`: Add support for intrinsic Fn:ForEach (fixes `#8075 <https://github.com/aws/aws-cli/issues/8075>`__) * api-change:`cloud9`: Updated Cloud9 API documentation for AL2023 release * api-change:`connect`: Adds relatedContactId field to StartOutboundVoiceContact API input. Introduces PauseContact API and ResumeContact API for Task contacts. Adds pause duration, number of pauses, timestamps for last paused and resumed events to DescribeContact API response. Adds new Rule type and new Rule action. * api-change:`connectcases`: Increase number of fields that can be included in CaseEventIncludedData from 50 to 200 * api-change:`kms`: Documentation updates for AWS Key Management Service * api-change:`rds`: Updates Amazon RDS documentation by adding code examples * api-change:`sagemaker`: This release 1) introduces a new API: DeleteCompilationJob , and 2) adds InfraCheckConfig for Create/Describe training job API * From 1.32.1 * api-change:`appstream`: This release includes support for images of Windows Server 2022 platform. * api-change:`b2bi`: Documentation updates for AWS B2B Data Interchange * api-change:`billingconductor`: Billing Conductor is releasing a new API, GetBillingGroupCostReport, which provides the ability to retrieve/view the Billing Group Cost Report broken down by attributes for a specific billing group. * api-change:`connect`: This release adds support for more granular billing using tags (key:value pairs) * api-change:`controltower`: Documentation updates for AWS Control Tower. * api-change:`firehose`: This release, 1) adds configurable buffering hints for the Splunk destination, and 2) reduces the minimum configurable buffering interval for supported destinations * api-change:`gamelift`: Amazon GameLift adds the ability to add and update the game properties of active game sessions. * api-change:`iot`: This release adds the ability to self-manage certificate signing in AWS IoT Core fleet provisioning using the new certificate provider resource. * api-change:`neptune-graph`: This is the initial SDK release for Amazon Neptune Analytics * api-change:`opensearch`: Updating documentation for Amazon OpenSearch Service support for new zero-ETL integration with Amazon S3. * api-change:`quicksight`: Update Dashboard Links support; SingleAxisOptions support; Scatterplot Query limit support. * api-change:`workspaces`: Updated note to ensure customers understand running modes. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.0 * feature:Python: End of support for Python 3.7 * api-change:`drs`: Adding AgentVersion to SourceServer and RecoveryInstance structures * feature:Python: End of support for Python 3.7 * From 1.31.13 * api-change:`imagebuilder`: This release adds the Image Workflows feature to give more flexibility and control over the image building and testing process. * api-change:`location`: This release 1) adds sub-municipality field in Places API for searching and getting places information, and 2) allows optimizing route calculation based on expected arrival time. * api-change:`logs`: This release introduces the StartLiveTail API to tail ingested logs in near real time. * From 1.31.12 * api-change:`neptune`: This release adds a new parameter configuration setting to the Neptune cluster related APIs that can be leveraged to switch between the underlying supported storage modes. * api-change:`pinpoint`: This release includes Amazon Pinpoint API documentation updates pertaining to campaign message sending rate limits. * api-change:`securityhub`: Added new resource detail objects to ASFF, including resources for AwsDynamoDbTable, AwsEc2ClientVpnEndpoint, AwsMskCluster, AwsS3AccessPoint, AwsS3Bucket * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * Update in SLE-15 (bsc#1209255, jsc#PED-3780) * Update in SLE-15 (bsc#1204537, jsc#PED-2333) Changes in python-s3transfer: * Update to version 0.19.0 * feature:`s3`: Update multi-part copy logic to match single-part behavior for TaggingDirective and AnnotationDirective * enhancement:`s3`: Warn when Metadata or Tagging is supplied to a copy without the corresponding directive set to REPLACE, in which case the supplied value is silently ignored. This matches the CopyObject behavior. * from version 0.18.0 * feature:Copy: By default, preserve source object metadata during multipart copies to match single CopyObject behavior. * Update to version 0.17.0 * feature:Python: End of support for Python 3.9 * from version 0.16.1 * enhancement:`TransferManager`: Add support for customer-provided full-object checksums using the SHA512, MD5, XXHASH3, XXHASH64, and XXHASH128 algorithms. * Update to version 0.16.0 * feature:`awscrt`: `CRTTransferManager` now supports the following `TransferConfig` options - `multipart_threshold`, `multipart_chunksize`, `max_request_concurrency` * Update to version 0.15.0 * feature:`CopyPartTask`: Validate ETag of stored object during multipart copies * Update to version 0.14.0 * feature:download: Validate requested range matches content range in response for multipart downloads * Update to version 0.13.1 * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * Update to version 0.13.0 * feature:`GetObjectTask`: Validate ETag of stored object during multipart downloads * Update to version 0.12.0 * feature:Python: End of support for Python 3.8 * Update to version 0.11.4 * enhancement:Dependencies: Update the floor version of botocore to 1.37.4 to match imports. * enhancement:Tasks: Pass Botocore context from parent to child threads. * from version 0.11.3 * bugfix:`awscrt`: Fix urlencoding issues for request signing with the awscrt. * Update BuildRequires and Requires from setup.py * Update to version 0.11.2 * bugfix:upload: Only set a default checksum if the `request_checksum_calculation` config is set to `when_supported`. Fixes (boto/s3transfer#327). * Update to version 0.11.1 * bugfix:Dependencies: Update the floor version of botocore to 1.36.0 to match imports. * from version 0.11.0 * feature:manager: Use CRC32 by default and support user provided full-object checksums. * Update to version 0.10.4 * enhancement:`s3`: Added Multi-Region Access Points support to CRT transfers Changes in python-boto3: * Update to 1.43.36 * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.43.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.43.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.43.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.43.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.43.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.43.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.43.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.43.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * from version 1.43.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.43.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.43.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.43.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.43.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.43.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.43.21 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.43.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.43.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.43.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * from version 1.43.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.43.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update BuildRequires and Requires from setup.py * Update to 1.43.15 * api-change:`backup`: [`botocore`] Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: [`botocore`] Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: [`botocore`] AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: [`botocore`] Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: [`botocore`] Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: [`botocore`] The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.43.14 * api-change:`datazone`: [`botocore`] Add support for VPC connection * api-change:`ec2`: [`botocore`] The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: [`botocore`] Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: [`botocore`] Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: [`botocore`] Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: [`botocore`] Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per- policy details for each Bedrock Converse call * api-change:`securityagent`: [`botocore`] Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:`s3`: [`botocore`] Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucket * from version 1.43.13 * api-change:`batch`: [`botocore`] Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: [`botocore`] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: [`botocore`] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: [`botocore`] A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: [`botocore`] Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: [`botocore`] Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: [`botocore`] Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.43.12 * api-change:`bedrock-runtime`: [`botocore`] Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: [`botocore`] Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: [`botocore`] AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: [`botocore`] Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: [`botocore`] GenerateAuthRequestCryptogram API launch. * Update BuildRequires and Requires from setup.py * Update to 1.43.11 * api-change:`bedrock-agentcore`: [`botocore`] Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: [`botocore`] Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: [`botocore`] Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: [`botocore`] Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: [`botocore`] This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: [`botocore`] Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.43.10 * api-change:`accessanalyzer`: [`botocore`] Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: [`botocore`] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: [`botocore`] Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: [`botocore`] Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: [`botocore`] Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: [`botocore`] Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: [`botocore`] Support for dataset enrichment and geo spatial in new data preparation experience From 1.43.9 * api-change:`logs`: [`botocore`] Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: [`botocore`] This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: [`botocore`] Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.43.8 * api-change:`bedrock`: [`botocore`] Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: [`botocore`] Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: [`botocore`] Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: [`botocore`] Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: [`botocore`] Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: [`botocore`] Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: [`botocore`] Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: [`botocore`] ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.43.7 * api-change:`arc-region-switch`: [`botocore`] Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: [`botocore`] Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for read- only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: [`botocore`] Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: [`botocore`] This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: [`botocore`] This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: [`botocore`] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: [`botocore`] Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: [`botocore`] Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: [`botocore`] AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: [`botocore`] Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: [`botocore`] Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: [`botocore`] Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: [`botocore`] Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: [`botocore`] Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: [`botocore`] Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: [`botocore`] Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: [`botocore`] Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: [`botocore`] Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: [`botocore`] Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: [`botocore`] Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. * Update to 1.43.6 * api-change:`bcm-data-exports`: [`botocore`] With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: [`botocore`] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: [`botocore`] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: [`botocore`] DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: [`botocore`] This is a documentation update * api-change:`invoicing`: [`botocore`] Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: [`botocore`] Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. * from version 1.43.5 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for bring- your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: [`botocore`] The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: [`botocore`] Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: [`botocore`] Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: [`botocore`] Validate outpost access point resource name * api-change:`sagemaker`: [`botocore`] Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: [`botocore`] Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. * from version 1.43.4 * api-change:`cleanroomsml`: [`botocore`] Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: [`botocore`] Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: [`botocore`] With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: [`botocore`] Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: [`botocore`] Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: [`botocore`] This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: [`botocore`] Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us- east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). * from version 1.43.3 * api-change:`bedrock-agentcore-control`: [`botocore`] Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: [`botocore`] This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: [`botocore`] Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: [`botocore`] Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: [`botocore`] Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: [`botocore`] Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: [`botocore`] AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: [`botocore`] Amazon VPC Lattice now supports privately resolvable DNS resources * from version 1.43.2 * api-change:`appstream`: [`botocore`] Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: [`botocore`] This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: [`botocore`] Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: [`botocore`] Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: [`botocore`] AWS IoT HTTP rule actions now support cross- topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: [`botocore`] Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: [`botocore`] Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: [`botocore`] Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross- region identity context. Story,scenario in CreateCustomCapability API. * from version 1.43.1 * api-change:`bedrock-agentcore`: [`botocore`] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: [`botocore`] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: [`botocore`] Adds support for asynchronous notebook runs * api-change:`eks`: [`botocore`] Vended logs update param for capability vended logs feature * api-change:`kafka`: [`botocore`] Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: [`botocore`] Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: [`botocore`] Adds support for resource- based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: [`botocore`] Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: [`botocore`] Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: [`botocore`] Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API * from version 1.43.0 * api-change:`account`: [`botocore`] Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: [`botocore`] Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: [`botocore`] Adds configuration bundles for versioned, immutable agent configuration snapshots with branch- based lineage * api-change:`cloudfront`: [`botocore`] Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: [`botocore`] Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: [`botocore`] Removes support for registry policy V1 * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: [`botocore`] This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: [`botocore`] This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: [`botocore`] Allow admins to configure IPv6 ranges on IP Access Settings. * enhancement:awscrt: [`botocore`] Update awscrt version to 0.32.2 * feature:Python: [`botocore`] End of support for Python 3.9 * feature:Python: End of support for Python 3.9 * from version 1.42.97 * api-change:`application-signals`: [`botocore`] Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: [`botocore`] Add support for Passthrough pricing plan * api-change:`gameliftstreams`: [`botocore`] Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: [`botocore`] Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: [`botocore`] Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: [`botocore`] KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: [`botocore`] Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: [`botocore`] Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: [`botocore`] Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: [`botocore`] Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: [`botocore`] Added support for Protocol as modified resource and added update failure as modification state * from version 1.42.96 * api-change:`bedrock-agentcore-control`: [`botocore`] Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: [`botocore`] Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: [`botocore`] Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: [`botocore`] EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: [`botocore`] Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: [`botocore`] AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * from version 1.42.95 * api-change:`datazone`: [`botocore`] Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: [`botocore`] Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: [`botocore`] Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: [`botocore`] This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: [`botocore`] Alias `get_o_tel_enrichment`, `start_o_tel_enrichment`, and `stop_o_tel_enrichment` botocore methods to use `otel` instead of `o_tel`. * from version 1.42.94 * api-change:`batch`: [`botocore`] Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: [`botocore`] Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: [`botocore`] Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: [`botocore`] GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: [`botocore`] This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iotwireless`: [`botocore`] Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: [`botocore`] Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: [`botocore`] Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: [`botocore`] Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: [`botocore`] Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: [`botocore`] This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: [`botocore`] This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * from version 1.42.93 * api-change:`cognito-idp`: [`botocore`] Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: [`botocore`] Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: [`botocore`] SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * from version 1.42.92 * api-change:`application-signals`: [`botocore`] Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: [`botocore`] Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: [`botocore`] Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: [`botocore`] Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: [`botocore`] Expanded support for new suppression rule fields. * api-change:`kafka`: [`botocore`] Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: [`botocore`] This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: [`botocore`] Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. * from version 1.42.91 * api-change:`cleanrooms`: [`botocore`] This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: [`botocore`] Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: [`botocore`] This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: [`botocore`] Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: [`botocore`] ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: [`botocore`] Improving Documentation for Neptune * api-change:`quicksight`: [`botocore`] Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: [`botocore`] Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: [`botocore`] The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. * from version 1.42.90 * api-change:`appstream`: [`botocore`] Add content redirection to Update Stack * api-change:`autoscaling`: [`botocore`] This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: [`botocore`] Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: [`botocore`] Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: [`botocore`] Adds support for passkey-based multi- factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: [`botocore`] This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: [`botocore`] Added error handling for service quota limits * api-change:`customer-profiles`: [`botocore`] Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: [`botocore`] Launching SMUS IAM domain SDK support * api-change:`devops-agent`: [`botocore`] Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: [`botocore`] Updating regex for identification of AWS Regions. * api-change:`logs`: [`botocore`] Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: [`botocore`] Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: [`botocore`] Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. * bugfix:signing: [`botocore`] Fix bug so that configured auth scheme preference is used when auth scheme is resolved from endpoints rulesets, or from operation-level auth trait. Auth scheme preference can be configured using the existing `auth_scheme_preference` client config option, the `auth_scheme_preference` shared config setting, or the existing `AWS_AUTH_SCHEME_PREFERENCE` environment variable. * from version 1.42.89 * api-change:`customer-profiles`: [`botocore`] This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: [`botocore`] Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key-value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: [`botocore`] Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high- speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: [`botocore`] This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: [`botocore`] Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. * from version 1.42.88 * api-change:`connect`: [`botocore`] Conversational Analytics for Email * api-change:`devops-agent`: [`botocore`] Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: [`botocore`] Minor updates to exceptions for completeness * api-change:`imagebuilder`: [`botocore`] Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: [`botocore`] Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: [`botocore`] Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: [`botocore`] Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * from version 1.42.87 * api-change:`bcm-dashboards`: [`botocore`] Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: [`botocore`] Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: [`botocore`] Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: [`botocore`] Adds support for MediaLive Channel- type Router Inputs. * api-change:`redshift-data`: [`botocore`] The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: [`botocore`] Release support for g7e instance types for SageMaker HyperPod * from version 1.42.86 * api-change:`backup`: [`botocore`] Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: [`botocore`] This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: [`botocore`] Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`ivs-realtime`: [`botocore`] Adds support for Amazon IVS real- time streaming redundant ingest. * api-change:`marketplace-discovery`: [`botocore`] AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: [`botocore`] MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: [`botocore`] Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * from version 1.42.85 * api-change:`accessanalyzer`: [`botocore`] Revert previous additions of API changes. * api-change:`bedrock-agentcore`: [`botocore`] This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: [`botocore`] Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: [`botocore`] The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: [`botocore`] Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: [`botocore`] Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: [`botocore`] EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: [`botocore`] This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: [`botocore`] EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`lambda`: [`botocore`] Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: [`botocore`] This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: [`botocore`] AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: [`botocore`] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: [`botocore`] Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. * bugfix:auth: [`botocore`] Fix `sigv4a_signing_region_set` config being ignored when SigV4a is selected via `auth_scheme_preference`. The configured region set is now correctly applied to the signing context regardless of how SigV4a is resolved. * from version 1.42.84 * api-change:`accessanalyzer`: [`botocore`] Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: [`botocore`] Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: [`botocore`] This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: [`botocore`] This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: [`botocore`] Migrated to Smithy. No functional changes * api-change:`lightsail`: [`botocore`] This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: [`botocore`] This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: [`botocore`] Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: [`botocore`] AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. * from version 1.42.83 * api-change:`bedrock`: [`botocore`] Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: [`botocore`] Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: [`botocore`] Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: [`botocore`] Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: [`botocore`] Add support for tagging of Alarm resource type * api-change:`logs`: [`botocore`] Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: [`botocore`] Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: [`botocore`] Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions * from version 1.42.82 * api-change:`appstream`: [`botocore`] Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for three- legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: [`botocore`] Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain- specific terminology shared across projects * api-change:`bedrock-runtime`: [`botocore`] Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: [`botocore`] CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: [`botocore`] Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: [`botocore`] This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: [`botocore`] We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: [`botocore`] This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. * from version 1.42.81 * api-change:`bedrock`: [`botocore`] Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: [`botocore`] Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: [`botocore`] Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: [`botocore`] Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: [`botocore`] This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: [`botocore`] Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: [`botocore`] Adding Policy-Min- TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * from version 1.42.80 * api-change:`acm`: [`botocore`] Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: [`botocore`] This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: [`botocore`] Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: [`botocore`] Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: [`botocore`] AWS DevOps Agent service General Availability release. * api-change:`dms`: [`botocore`] To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: [`botocore`] This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-maps`: [`botocore`] This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: [`botocore`] Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: [`botocore`] Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: [`botocore`] This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: [`botocore`] This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: [`botocore`] Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: [`botocore`] Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: [`botocore`] Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: [`botocore`] Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: [`botocore`] Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: [`botocore`] Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: [`botocore`] Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: [`botocore`] S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: [`botocore`] AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: [`botocore`] This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * from version 1.42.79 * api-change:`appstream`: [`botocore`] Add support for URL Redirection * api-change:`autoscaling`: [`botocore`] Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: [`botocore`] Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: [`botocore`] AWS DevOps Agent General Availability. * api-change:`ecs`: [`botocore`] Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Update CreateScript API documentation. * api-change:`lakeformation`: [`botocore`] Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: [`botocore`] Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: [`botocore`] Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: [`botocore`] KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re-verification without requiring manual intervention from support teams. * api-change:`sagemaker`: [`botocore`] Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: [`botocore`] Added support for opting out of Amazon S3 Express session authentication via the new `disable_s3_express_session_auth` S3 client configuration setting, or the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. * from version 1.42.78 * api-change:`bedrock-agentcore`: [`botocore`] Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: [`botocore`] Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: [`botocore`] AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. * from version 1.42.77 * api-change:`bcm-data-exports`: [`botocore`] With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: [`botocore`] Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: [`botocore`] This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: [`botocore`] Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: [`botocore`] Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * from version 1.42.76 * api-change:`apigatewayv2`: [`botocore`] Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: [`botocore`] This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: [`botocore`] Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`marketplace-agreement`: [`botocore`] The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: [`botocore`] Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: [`botocore`] GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. * from version 1.42.75 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: [`botocore`] Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: [`botocore`] Adds support for updating the vector options field for existing collections. * api-change:`pcs`: [`botocore`] This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: [`botocore`] Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. * from version 1.42.74 * api-change:`batch`: [`botocore`] AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: [`botocore`] You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: [`botocore`] Add support for tagging of ContactMethod resource type * api-change:`omics`: [`botocore`] Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. * from version 1.42.73 * api-change:`backup`: [`botocore`] Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: [`botocore`] Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`opensearch`: [`botocore`] Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: [`botocore`] Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. * bugfix:s3: [`botocore`] Fix aws-chunked requests with non-seekable streams sending both `Content-Length` and `Transfer-Encoding: chunked`, which violated HTTP/1.1 (RFC 7230) and caused `SignatureDoesNotMatch` errors. * from version 1.42.72 * api-change:`batch`: [`botocore`] AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: [`botocore`] This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: [`botocore`] Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: [`botocore`] Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. * from version 1.42.71 * api-change:`ec2`: [`botocore`] The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: [`botocore`] This update adds additional bitrate options for Dolby AC-4 audio outputs. * Update BuildRequires and Requires from setup.py * Update to 1.42.70 * api-change:`bedrock-agentcore-control`: [`botocore`] Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: [`botocore`] Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: [`botocore`] Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * from version 1.42.69 * api-change:`bedrock`: [`botocore`] You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: [`botocore`] Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: [`botocore`] Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: [`botocore`] Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. * from version 1.42.68 * api-change:`apigateway`: [`botocore`] API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: [`botocore`] Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: [`botocore`] Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: [`botocore`] Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: [`botocore`] Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: [`botocore`] Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: [`botocore`] This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: [`botocore`] Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: [`botocore`] Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: [`botocore`] The change adds a new capability named ManageSharedFolders in Custom Permissions * from version 1.42.67 * api-change:`datasync`: [`botocore`] DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: [`botocore`] Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: [`botocore`] Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`sso-oidc`: [`botocore`] Fixed missing error messages in SSO OIDC error responses by mapping OAuth2 error_description field to the standard Message field. Issue was raised in `#2216 <https://github.com/boto/botocore/issues/2216>`__. * from version 1.42.66 * api-change:`customer-profiles`: [`botocore`] Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: [`botocore`] Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`polly`: [`botocore`] Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: [`botocore`] SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: [`botocore`] Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: [`botocore`] Added WINDOWS SERVER 2025 OperatingSystemName. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: [`botocore`] Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: [`botocore`] Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: [`botocore`] Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kafka`: [`botocore`] Add dual stack endpoint to SDK * api-change:`lexv2-models`: [`botocore`] This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. * from version 1.42.64 * api-change:`iam`: [`botocore`] Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: [`botocore`] Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: [`botocore`] This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: [`botocore`] Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. * from version 1.42.63 * api-change:`appintegrations`: [`botocore`] This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: [`botocore`] Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: [`botocore`] Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: [`botocore`] Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gameliftstreams`: [`botocore`] Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost- optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: [`botocore`] Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. * from version 1.42.62 * api-change:`connecthealth`: [`botocore`] Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: [`botocore`] Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: [`botocore`] Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: [`botocore`] Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: [`botocore`] Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * enhancement:S3 redirect: [`botocore`] Validate new region name when redirecting. * Update BuildRequires and Requires from setup.py * Update to 1.4.61 * api-change:`connect`: [`botocore`] Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: [`botocore`] As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: [`botocore`] Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: [`botocore`] Adding support for DeploymentStrategyOptions * api-change:`quicksight`: [`botocore`] Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * enhancement:auth: [`botocore`] Exclude additional hop-by-hop headers from SigV4 signing to prevent signature mismatches when intermediaries mutate transport headers (connection, keep-alive, proxy-authenticate, proxy- authorization, TE, trailer, upgrade). * from version 1.42.60 * api-change:`bedrock-agentcore-control`: [`botocore`] Support for AgentCore Policy GA * api-change:`datazone`: [`botocore`] Adding QueryGraph operation to DataZone SDK * api-change:`logs`: [`botocore`] CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: [`botocore`] Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: [`botocore`] This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.42.59 * api-change:`arc-region-switch`: [`botocore`] Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: [`botocore`] This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: [`botocore`] Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: [`botocore`] Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: [`botocore`] Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: [`botocore`] This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: [`botocore`] Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: [`botocore`] Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: [`botocore`] ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: [`botocore`] Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.42.58 * api-change:`backup-gateway`: [`botocore`] This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: [`botocore`] Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: [`botocore`] Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: [`botocore`] Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: [`botocore`] Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: [`botocore`] Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.42.57 * api-change:`batch`: [`botocore`] AWS Batch documentation update for service job capacity units. * api-change:`ec2`: [`botocore`] Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: [`botocore`] Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: [`botocore`] Neptune global clusters now supports tags * api-change:`wafv2`: [`botocore`] AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.42.56 * api-change:`cloudwatch`: [`botocore`] This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: [`botocore`] Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: [`botocore`] Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: [`botocore`] Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: [`botocore`] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: [`botocore`] Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.42.55 * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: [`botocore`] SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: [`botocore`] Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: [`botocore`] Add workflow properties support to connections APIs * api-change:`dynamodb`: [`botocore`] This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`mediatailor`: [`botocore`] Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: [`botocore`] Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: [`botocore`] AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.42.54 * api-change:`appstream`: [`botocore`] Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: [`botocore`] Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`sagemaker-runtime`: [`botocore`] Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: [`botocore`] This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: [`botocore`] Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: [`botocore`] Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * from version 1.42.53 * api-change:`bcm-dashboards`: [`botocore`] The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: [`botocore`] Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: [`botocore`] AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * enhancement:`checksums`: [`botocore`] Added support for the SHA512 checksum algorithm. When the optional AWS CRT (`awscrt`) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation). * from version 1.42.52 * api-change:`cleanrooms`: [`botocore`] This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: [`botocore`] Correcting in-app notifications API documentation. * from version 1.42.51 * api-change:`ec2`: [`botocore`] Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`evidently`: [`botocore`] The evidently client has been removed following the deprecation of the service. * api-change:`grafana`: [`botocore`] This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`iotanalytics`: [`botocore`] The iotanalytics client has been removed following the deprecation of the service. * api-change:`rds`: [`botocore`] Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: [`botocore`] Adds support for branding customization without requiring a custom wallpaper. * from version 1.42.50 * api-change:`arc-region-switch`: [`botocore`] Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: [`botocore`] Documentation updates for EC2 Secondary Networks * api-change:`ecr`: [`botocore`] Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: [`botocore`] Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual- stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: [`botocore`] Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: [`botocore`] Update MessageType enum to include missing types. * from version 1.42.49 * api-change:`cloudwatch`: [`botocore`] Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: [`botocore`] API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: [`botocore`] This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: [`botocore`] Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: [`botocore`] Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.31.2 * from version 1.42.48 * api-change:`ec2`: [`botocore`] Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * from version 1.42.47 * api-change:`batch`: [`botocore`] Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: [`botocore`] R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: [`botocore`] This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: [`botocore`] Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: [`botocore`] S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * from version 1.42.46 * api-change:`bedrock-agentcore`: [`botocore`] Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: [`botocore`] Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: [`botocore`] Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: [`botocore`] Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: [`botocore`] This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.42.45 * api-change:`connectcampaignsv2`: [`botocore`] Add the missing event type for WhatsApp * api-change:`ec2`: [`botocore`] Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: [`botocore`] Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: [`botocore`] Allow cross account v5 in put data lake settings * api-change:`neptunedata`: [`botocore`] Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: [`botocore`] Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: [`botocore`] This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.42.44 * api-change:`bedrock-data-automation-runtime`: [`botocore`] Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: [`botocore`] Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: [`botocore`] Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: [`botocore`] Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: [`botocore`] Adding g7e instance support in Sagemaker Training * from version 1.42.43 * api-change:`arc-region-switch`: [`botocore`] Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: [`botocore`] Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: [`botocore`] Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: [`botocore`] Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: [`botocore`] This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: [`botocore`] Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: [`botocore`] Minor neptune-graph documentation changes * api-change:`ram`: [`botocore`] Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: [`botocore`] Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: [`botocore`] Added support for 12 new graphics- optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * enhancement:HTTP session: [`botocore`] Set blocksize from default 16KB to 128KB if urllib3 v2 is installed * from version 1.42.42 * api-change:`bedrock-runtime`: [`botocore`] Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: [`botocore`] Amazon Connect Cases now supports larger, multi-line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: [`botocore`] Update delete cluster description * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: [`botocore`] We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: [`botocore`] Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * enhancement:Validation: [`botocore`] Updated list validation to add fast- path for list members that only require basic type checking. * from version 1.42.41 * api-change:`batch`: [`botocore`] AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: [`botocore`] This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-maps`: [`botocore`] Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: [`botocore`] Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: [`botocore`] Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: [`botocore`] Updated the CloseAccount description. * api-change:`sso-admin`: [`botocore`] Added new Region management APIs to support multi-Region replication in IAM Identity Center. * from version 1.42.40 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: [`botocore`] Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: [`botocore`] Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.42.39 * api-change:`connect`: [`botocore`] This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: [`botocore`] Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.42.38 * api-change:`ec2`: [`botocore`] G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.42.37 * api-change:`cognito-idp`: [`botocore`] This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: [`botocore`] Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: [`botocore`] SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: [`botocore`] We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: [`botocore`] This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: [`botocore`] This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests. * api-change:`s3`: [`botocore`] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: [`botocore`] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.42.36 * api-change:`connect`: [`botocore`] Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: [`botocore`] Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: [`botocore`] Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * from version 1.42.35 * api-change:`connectcases`: [`botocore`] Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: [`botocore`] DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: [`botocore`] Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: [`botocore`] Adds support for AWS Ground Station Telemetry. * from version 1.42.34 * api-change:`connect`: [`botocore`] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: [`botocore`] Added api for deleting data export configuration for a domain * api-change:`qconnect`: [`botocore`] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.42.33 * api-change:`autoscaling`: [`botocore`] This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: [`botocore`] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: [`botocore`] Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: [`botocore`] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: [`botocore`] Adding new enum value for ScanStatusReason * api-change:`health`: [`botocore`] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: [`botocore`] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: [`botocore`] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.42.32 * api-change:`bedrock-agentcore`: [`botocore`] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: [`botocore`] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: [`botocore`] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: [`botocore`] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.42.31 * api-change:`autoscaling`: [`botocore`] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: [`botocore`] Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: [`botocore`] Adds support for managing table pre- warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: [`botocore`] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: [`botocore`] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.42.30 * api-change:`connect`: [`botocore`] Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: [`botocore`] This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: [`botocore`] Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: [`botocore`] Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: [`botocore`] Added ViewName to View- related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: [`botocore`] Adding security consideration comments for lcc accessing execution role under root access * from version 1.42.29 * api-change:`cleanrooms`: [`botocore`] This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: [`botocore`] This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: [`botocore`] Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: [`botocore`] A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: [`botocore`] API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: [`botocore`] Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: [`botocore`] Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * enhancement:config: [`botocore`] Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variable * from version 1.42.28 * api-change:`ce`: [`botocore`] Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: [`botocore`] Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: [`botocore`] Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: [`botocore`] no feature changes. model migrated to Smithy * api-change:`redshift`: [`botocore`] Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: [`botocore`] Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: [`botocore`] This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update BuildRequires and Requires from setup.py * Update to 1.42.27 * api-change:`bedrock`: [`botocore`] This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: [`botocore`] Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.42.26 * api-change:`billing`: [`botocore`] Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: [`botocore`] This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: [`botocore`] Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * from version 1.42.25 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: [`botocore`] Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: [`botocore`] Adding MaterializedViews task run APIs * api-change:`medialive`: [`botocore`] MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: [`botocore`] Adds waiters to Amazon Transcribe. * from version 1.42.24 * api-change:`workspaces`: [`botocore`] Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.42.23 * api-change:`ce`: [`botocore`] This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: [`botocore`] Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.42.22 * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.42.21 * bugfix:`s3`: [`botocore`] Clarify `payload_signing_enabled` documentation to cover interaction with `request_checksum_calculation` * from version 1.42.20 * api-change:`cleanrooms`: [`botocore`] Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: [`botocore`] This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.42.19 * api-change:`connect`: [`botocore`] Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kafkaconnect`: [`botocore`] This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect-fips as the service name. This is done to match the Kafka endpoints. * from version 1.42.18 * api-change:`connect`: [`botocore`] Changes for Contact for Global Search * api-change:`elastictranscoder`: [`botocore`] The elastictranscoder client has been removed following the deprecation of the service. * api-change:`quicksight`: [`botocore`] This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.42.17 * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.42.16 * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-places`: [`botocore`] Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: [`botocore`] Add additional validation to Outpost bucket names. * from version 1.42.15 * api-change:`config`: [`botocore`] Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: [`botocore`] Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: [`botocore`] Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: [`botocore`] Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.42.14 * api-change:`arc-region-switch`: [`botocore`] Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: [`botocore`] Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: [`botocore`] Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iot`: [`botocore`] This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: [`botocore`] It is a internal bug fix for region expansion * api-change:`wickr`: [`botocore`] AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: [`botocore`] Add support for WebAuthn under user settings. * from version 1.42.13 * api-change:`appstream`: [`botocore`] Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: [`botocore`] New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: [`botocore`] Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: [`botocore`] Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: [`botocore`] Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: [`botocore`] Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: [`botocore`] Adds support for ECR Create On Push * api-change:`ecs`: [`botocore`] Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iot`: [`botocore`] This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: [`botocore`] Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: [`botocore`] Added "Stopping" for the HANA Database Status. * from version 1.42.12 * api-change:`gameliftstreams`: [`botocore`] Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: [`botocore`] Add support for dbiResourceId in finding. * api-change:`inspector-scan`: [`botocore`] Adds an additional OutputFormat * api-change:`kafkaconnect`: [`botocore`] Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: [`botocore`] Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: [`botocore`] This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: [`botocore`] Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: [`botocore`] Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: [`botocore`] Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.42.11 * api-change:`iot`: [`botocore`] Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: [`botocore`] This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.42.10 * api-change:`bedrock-agentcore-control`: [`botocore`] This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: [`botocore`] Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: [`botocore`] EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`entityresolution`: [`botocore`] Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: [`botocore`] Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: [`botocore`] Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: [`botocore`] This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: [`botocore`] Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: [`botocore`] Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: [`botocore`] This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: [`botocore`] Add support for SQ Dashboard Api * from version 1.42.9 * api-change:`bcm-recommended-actions`: [`botocore`] Added new freetier action types to RecommendedAction.type. * api-change:`connect`: [`botocore`] Amazon Connect now offers automated post- chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: [`botocore`] Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: [`botocore`] Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.42.8 * api-change:`lambda`: [`botocore`] Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: [`botocore`] Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: [`botocore`] This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: [`botocore`] Add SortBy parameter to ListSecrets * api-change:`sesv2`: [`botocore`] Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.42.7 * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: [`botocore`] Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: [`botocore`] This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: [`botocore`] The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: [`botocore`] The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: [`botocore`] Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: [`botocore`] Adds support for Signer GetRevocationStatus with updated endpoints * from version 1.42.6 * api-change:`account`: [`botocore`] This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: [`botocore`] Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: [`botocore`] Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: [`botocore`] Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * Update BuildRequires and Requires from setup.py * Update to 1.42.5 * api-change:`ce`: [`botocore`] Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: [`botocore`] Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: [`botocore`] Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: [`botocore`] Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: [`botocore`] Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: [`botocore`] Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: [`botocore`] Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: [`botocore`] Update Mail Manager Archive ARN validation * enhancement:ContainerProvider: [`botocore`] The ContainerProvider now works with arbitray HTTPS URLs for `AWS_CONTAINER_CREDENTIALS_FULL_URI`. * from version 1.42.4 * api-change:`ecs`: [`botocore`] Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: [`botocore`] Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: [`botocore`] This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: [`botocore`] Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: [`botocore`] Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.29.2 * from version 1.42.3 * api-change:`lambda`: [`botocore`] Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.42.2 * api-change:`bedrock`: [`botocore`] Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: [`botocore`] Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.42.1 * api-change:`bedrock`: [`botocore`] Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: [`botocore`] Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: [`botocore`] Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: [`botocore`] Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: [`botocore`] This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: [`botocore`] Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: [`botocore`] Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: [`botocore`] Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: [`botocore`] CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: [`botocore`] Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to- value, and ease of implementation at scale. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: [`botocore`] GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: [`botocore`] GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: [`botocore`] RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: [`botocore`] New S3 Storage Class FSX_ONTAP * api-change:`s3control`: [`botocore`] Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: [`botocore`] Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: [`botocore`] Added support for Amazon Database Savings Plans * api-change:`securityhub`: [`botocore`] ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.42.0 * api-change:`appintegrations`: [`botocore`] This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: [`botocore`] Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: [`botocore`] Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: [`botocore`] AWS Clean Rooms now supports privacy- enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: [`botocore`] This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: [`botocore`] This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: [`botocore`] Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: [`botocore`] This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: [`botocore`] This release adds support for EKS Capabilities * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: [`botocore`] Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: [`botocore`] Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: [`botocore`] This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: [`botocore`] This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi-product solutions. * api-change:`partnercentral-account`: [`botocore`] Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: [`botocore`] Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: [`botocore`] New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: [`botocore`] This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: [`botocore`] New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: [`botocore`] Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.29.1 * enhancement:`s3`: Adds partial `TransferConfig` support for CRT transfer managers. * feature:`s3`: Added `crt` mode to `preferred_transfer_client` parameter in `TransferConfig` to enable CRT transfer client in all environments. * from version 1.41.5 * api-change:`bedrock-runtime`: [`botocore`] Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: [`botocore`] Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: [`botocore`] This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.41.4 * api-change:`ec2`: [`botocore`] This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: [`botocore`] Network Firewall release of the Proxy feature. * api-change:`organizations`: [`botocore`] Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: [`botocore`] Adds support for new route53 feature: accelerated recovery. * Update BuildRequires and Requires from setup.py * Update to 1.41.3 * api-change:`cloudfront`: [`botocore`] Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: [`botocore`] New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * enhancement:awscrt: [`botocore`] Update awscrt version to 0.29.0 * from version 1.41.2 * api-change:`apigateway`: [`botocore`] API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: [`botocore`] Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: [`botocore`] Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: [`botocore`] Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: [`botocore`] Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: [`botocore`] Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: [`botocore`] Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: [`botocore`] Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: [`botocore`] New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: [`botocore`] The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: [`botocore`] This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: [`botocore`] Add support for ECR managed signing * api-change:`eks`: [`botocore`] Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: [`botocore`] This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`invoicing`: [`botocore`] Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: [`botocore`] This release adds support for Tiered Storage * api-change:`kms`: [`botocore`] Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: [`botocore`] Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: [`botocore`] Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: [`botocore`] Add support for resources in the aws- eusc partition. * api-change:`marketplace-entitlement`: [`botocore`] Endpoint update for new region * api-change:`mediapackagev2`: [`botocore`] Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: [`botocore`] Endpoint update for new region * api-change:`odb`: [`botocore`] Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: [`botocore`] Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: [`botocore`] This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: [`botocore`] Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: [`botocore`] Add support for Upgrade Rollout Order * api-change:`redshift`: [`botocore`] Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: [`botocore`] Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: [`botocore`] Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On- Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: [`botocore`] Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: [`botocore`] Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: [`botocore`] Adds support for creating Webapps accessible from a VPC. * from version 1.41.1 * api-change:`application-signals`: [`botocore`] Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large-scale distributed applications. * api-change:`autoscaling`: [`botocore`] This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: [`botocore`] Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: [`botocore`] Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: [`botocore`] Bedrock Data Automation Runtime Sync API * api-change:`braket`: [`botocore`] Add support for Braket spending limits. * api-change:`budgets`: [`botocore`] Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: [`botocore`] This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: [`botocore`] AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: [`botocore`] Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: [`botocore`] The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: [`botocore`] Add support for environment variables and an IAM execution role. * api-change:`dms`: [`botocore`] Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: [`botocore`] Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: [`botocore`] This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: [`botocore`] Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: [`botocore`] This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: [`botocore`] Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: [`botocore`] Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: [`botocore`] Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: [`botocore`] Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross- account resource discovery in commercial regions. * api-change:`networkmanager`: [`botocore`] This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: [`botocore`] Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: [`botocore`] Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: [`botocore`] Add support for EBS volume in Recycle Bin * api-change:`rds`: [`botocore`] Add support for VPC Encryption Controls. * api-change:`redshift-data`: [`botocore`] Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: [`botocore`] Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: [`botocore`] Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: [`botocore`] Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time- series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.41.0 * api-change:`apigateway`: [`botocore`] API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: [`botocore`] Support for API Gateway portals and portal products. * api-change:`backup`: [`botocore`] Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: [`botocore`] Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: [`botocore`] This release includes support for Search Results. * api-change:`billing`: [`botocore`] Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: [`botocore`] This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: [`botocore`] Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: [`botocore`] AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: [`botocore`] This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: [`botocore`] Release ListEfficiencyMetrics API * api-change:`datazone`: [`botocore`] Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: [`botocore`] Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: [`botocore`] This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: [`botocore`] Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: [`botocore`] Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: [`botocore`] Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: [`botocore`] Add support for scanning and viewing scan results for backup resource types * api-change:`health`: [`botocore`] Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: [`botocore`] Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: [`botocore`] This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: [`botocore`] Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: [`botocore`] Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: [`botocore`] Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: [`botocore`] This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: [`botocore`] MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: [`botocore`] Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: [`botocore`] Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: [`botocore`] Initial GA launch of Partner Central Channel * api-change:`route53`: [`botocore`] Add dual-stack endpoint support for Route53 * api-change:`rum`: [`botocore`] CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: [`botocore`] Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: [`botocore`] Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: [`botocore`] Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: [`botocore`] AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: [`botocore`] Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: [`botocore`] IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: [`botocore`] Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.40.76 * api-change:`autoscaling`: [`botocore`] This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: [`botocore`] AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: [`botocore`] Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: [`botocore`] New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: [`botocore`] This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low- bandwidth sites connections through a single attachment, simplifying multi- site connectivity for distributed enterprises. * api-change:`iam`: [`botocore`] Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: [`botocore`] Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: [`botocore`] CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: [`botocore`] Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: [`botocore`] Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: [`botocore`] AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.40.75 * api-change:`appstream`: [`botocore`] Adding support for additional instances and extended storage * api-change:`backup`: [`botocore`] AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: [`botocore`] This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: [`botocore`] This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: [`botocore`] This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: [`botocore`] Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: [`botocore`] Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: [`botocore`] Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: [`botocore`] Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: [`botocore`] Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: [`botocore`] This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: [`botocore`] Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: [`botocore`] Adding DICTIONARY_DGA to dns- threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.40.74 * api-change:`datazone`: [`botocore`] Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: [`botocore`] Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.28.4 * from version 1.40.73 * api-change:`cloudformation`: [`botocore`] CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: [`botocore`] Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: [`botocore`] Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: [`botocore`] Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: [`botocore`] QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iotwireless`: [`botocore`] Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: [`botocore`] Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: [`botocore`] Updated endpoint and service metadata * api-change:`sagemaker`: [`botocore`] Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: [`botocore`] Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.40.72 * api-change:`amp`: [`botocore`] Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: [`botocore`] Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: [`botocore`] Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: [`botocore`] Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: [`botocore`] This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: [`botocore`] Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: [`botocore`] Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: [`botocore`] Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.40.71 * api-change:`batch`: [`botocore`] Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: [`botocore`] Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`medical-imaging`: [`botocore`] Added new fields in existing APIs. * api-change:`rtbfabric`: [`botocore`] Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: [`botocore`] Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.40.70 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports ML-DSA key algorithms. * api-change:`appstream`: [`botocore`] AWS Appstream support for IPv6 * api-change:`backup`: [`botocore`] AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: [`botocore`] Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: [`botocore`] Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: [`botocore`] Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: [`botocore`] Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: [`botocore`] Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: [`botocore`] Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: [`botocore`] Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: [`botocore`] Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: [`botocore`] AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.40.69 * api-change:`controltower`: [`botocore`] Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: [`botocore`] Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: [`botocore`] Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: [`botocore`] This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: [`botocore`] Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.40.68 * api-change:`accessanalyzer`: [`botocore`] New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: [`botocore`] AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: [`botocore`] Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: [`botocore`] Add Amazon EC2 R8a instance types * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: [`botocore`] IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: [`botocore`] Support for New Data Prep Experience * api-change:`s3tables`: [`botocore`] Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: [`botocore`] Provides NoLongerSupportedException error message * from version 1.40.67 * api-change:`cloudfront`: [`botocore`] This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross- account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: [`botocore`] Added support for Project Resource Tags * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: [`botocore`] Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: [`botocore`] Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: [`botocore`] Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.40.66 * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.40.65 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: [`botocore`] Fix the AWS Budgets endpoint for the aws- eusc partition. * api-change:`ec2`: [`botocore`] Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: [`botocore`] Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kinesis`: [`botocore`] Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.40.64 * api-change:`connectcases`: [`botocore`] Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: [`botocore`] Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`fsx`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`health`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediaconvert`: [`botocore`] Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: [`botocore`] Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: [`botocore`] Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: [`botocore`] Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`textract`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`waf`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.63 * api-change:`amp`: [`botocore`] Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appconfig`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appflow`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appmesh`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appsync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`artifact`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`auditmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: [`botocore`] Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cleanrooms`: [`botocore`] Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`clouddirectory`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudsearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudwatch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codecatalyst`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codecommit`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codedeploy`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-sync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connectcases`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`deadline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`devops-guru`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`docdb`: [`botocore`] Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: [`botocore`] Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elasticache`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`emr-serverless`: [`botocore`] This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`firehose`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`frauddetector`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`geo-places`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`glue`: [`botocore`] This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotevents-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: [`botocore`] Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kms`: [`botocore`] Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptune`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] RTB Fabric documentation update. * api-change:`s3outposts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`schemas`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`servicecatalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sts`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.62 * api-change:`bedrock-runtime`: [`botocore`] Add support for system tool and web citation response. * from version 1.40.61 * api-change:`apigatewayv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-signals`: [`botocore`] Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: [`botocore`] Update endpoint ruleset parameters casing * api-change:clients: [`botocore`] The following clients have been removed per deprecation of the services - qldb, qldb-session, robomaker, lookoutmetrics, lookoutvision, iotfleethub, apptest * api-change:`cloud9`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeconnections`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguru-security`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`detective`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: [`botocore`] Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`emr-containers`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gameliftstreams`: [`botocore`] Add stream group expiration date and expired status * api-change:`glacier`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`groundstation`: [`botocore`] Enable use of AzEl ephemerides * api-change:`inspector-scan`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kendra`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`notifications`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`opensearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`organizations`: [`botocore`] Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pipes`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ram`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resource-groups`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`s3`: [`botocore`] Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`security-ir`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sqs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`support-app`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`taxsettings`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces`: [`botocore`] Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`xray`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.60 * api-change:`accessanalyzer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`aiops`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`athena`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`backup-gateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`braket`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ce`: [`botocore`] Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeartifact`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-idp`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`comprehend`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`controltower`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dax`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`entityresolution`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`forecast`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`greengrass`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iam`: [`botocore`] Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis`: [`botocore`] Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lex-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`managedblockchain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mturk`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptune-graph`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`outposts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rbin`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rds-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rekognition`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`repostspace`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53profiles`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53resolver`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`s3vectors`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`scheduler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`secretsmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ses`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`shield`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`socialmessaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-sap`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso-admin`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`stepfunctions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`waf-regional`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.59 * api-change:`acm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-signals`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`billing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`budgets`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudtrail`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codepipeline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datapipeline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datazone`: [`botocore`] This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`eks`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`evs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`fis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: [`botocore`] Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: [`botocore`] Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotwireless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`location`: [`botocore`] Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackage`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediastore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediastore-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mq`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`panorama`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qbusiness`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`robomaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53domains`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] Add support for custom rate limits. * api-change:`s3tables`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Added inference components model data caching feature * api-change:`sagemaker-metrics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`securityhub`: [`botocore`] Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`snow-device-management`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso-oidc`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`supplychain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`translate`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`wisdom`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.58 * api-change:`account`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: [`botocore`] Fixing the service documentation name * api-change:`bedrock-agentcore-control`: [`botocore`] Fixing the service documentation name * api-change:`chime-sdk-voice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codebuild`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codestar-connections`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cur`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`discovery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`drs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dsql`: [`botocore`] Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ecr`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ecr-public`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`healthlake`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`internetmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotevents`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediatailor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mgh`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mgn`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mpa`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptunedata`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`odb`: [`botocore`] Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize-events`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resiliencehub`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rum`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`savingsplans`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`securitylake`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sesv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`storagegateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`synthetics`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.57 * api-change:`appfabric`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`autoscaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`b2bi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ce`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chatbot`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudformation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudhsm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-identity`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connect`: [`botocore`] This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: [`botocore`] Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`devicefarm`: [`botocore`] This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ds-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`forecastquery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iam`: [`botocore`] Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotsitewise`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivschat`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lexv2-models`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mailmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`medialive`: [`botocore`] Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`oam`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pcs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`redshift-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sns`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workdocs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workmail`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.56 * api-change:`dynamodb`: [`botocore`] Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: [`botocore`] Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`mediaconvert`: [`botocore`] This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: [`botocore`] Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * from version 1.40.55 * api-change:`amp`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplifybackend`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appconfigdata`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appintegrations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-insights`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudfront`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`controlcatalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datasync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ds`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dsql`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`events`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`evidently`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`finspace`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`finspace-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: [`botocore`] Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: [`botocore`] Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lakeformation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`license-manager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: [`botocore`] The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`network-firewall`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`organizations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qapps`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`signer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`swf`: [`botocore`] Releasing minor endpoint updates. * api-change:`timestream-write`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`tnb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`wellarchitected`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.54 * api-change:`acm-pca`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplify`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apprunner`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apptest`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: [`botocore`] Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`billingconductor`: [`botocore`] New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`databrew`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dataexchange`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dlm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`freetier`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gamelift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`geo-routes`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`grafana`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`identitystore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kafka`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`keyspaces`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lex-models`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`m2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`machinelearning`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`medical-imaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`memorydb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`osis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`polly`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pricing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qldb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qldb-session`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`timestream-query`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`voice-id`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces-web`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.53 * api-change:`bedrock`: [`botocore`] Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: [`botocore`] Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: [`botocore`] Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: [`botocore`] This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: [`botocore`] Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: [`botocore`] Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: [`botocore`] This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.40.52 * api-change:`appstream`: [`botocore`] This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: [`botocore`] The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: [`botocore`] SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: [`botocore`] Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: [`botocore`] This release adds support for creating instant, point-in-time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: [`botocore`] Move UntagResource API body member to query parameter * api-change:`transfer`: [`botocore`] SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.40.51 * api-change:`bedrock-agentcore`: [`botocore`] Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: [`botocore`] Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: [`botocore`] Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update BuildRequires and Requires from setup.py * Update to 1.40.50 * api-change:`bedrock-agentcore`: [`botocore`] Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: [`botocore`] Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: [`botocore`] Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: [`botocore`] Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: [`botocore`] Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: [`botocore`] This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: [`botocore`] Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update BuildRequires and Requires from setup.py * Update to 1.40.49 * api-change:`quicksight`: [`botocore`] This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: [`botocore`] This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.40.48 * api-change:`bedrock-agentcore-control`: [`botocore`] Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: [`botocore`] Released support for IPv6 and dual-stack active directories * api-change:`outposts`: [`botocore`] This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: [`botocore`] introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.40.47 * api-change:`proton`: [`botocore`] Deprecating APIs in AWS Proton namespace. * from version 1.40.46 * api-change:`backup`: [`botocore`] Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: [`botocore`] Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: [`botocore`] Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: [`botocore`] Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: [`botocore`] Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: [`botocore`] Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: [`botocore`] Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: [`botocore`] Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: [`botocore`] Add new AWS Resource Explorer APIs * from version 1.40.45 * api-change:`cleanrooms`: [`botocore`] Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: [`botocore`] Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: [`botocore`] Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.40.44 * api-change:`cloudformation`: [`botocore`] Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: [`botocore`] New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: [`botocore`] Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: [`botocore`] Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.40.43 * api-change:`chime-sdk-meetings`: [`botocore`] Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: [`botocore`] This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: [`botocore`] This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: [`botocore`] This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: [`botocore`] This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: [`botocore`] Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.40.42 * api-change:`application-signals`: [`botocore`] Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: [`botocore`] Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: [`botocore`] Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: [`botocore`] This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: [`botocore`] This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: [`botocore`] Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: [`botocore`] This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: [`botocore`] AWS Directory service now supports IPv6-native and dual-stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: [`botocore`] This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: [`botocore`] Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: [`botocore`] Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: [`botocore`] added warnings to a few CLI pages * api-change:`rds`: [`botocore`] Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: [`botocore`] Add support for updating server identity provider type * from version 1.40.41 * api-change:`bedrock`: [`botocore`] Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: [`botocore`] New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: [`botocore`] This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: [`botocore`] Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.40.40 * api-change:`bedrock-agent-runtime`: [`botocore`] This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: [`botocore`] Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: [`botocore`] Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: [`botocore`] Support for payer account dimension and billing view health status. * api-change:`connect`: [`botocore`] Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: [`botocore`] Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: [`botocore`] This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`redshift`: [`botocore`] Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.40.39 * api-change:`glue`: [`botocore`] Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: [`botocore`] Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: [`botocore`] Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.40.38 * api-change:`appstream`: [`botocore`] G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: [`botocore`] Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: [`botocore`] This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kms`: [`botocore`] Documentation only updates for KMS. * api-change:`neptune`: [`botocore`] Doc-only update to address customer use. * from version 1.40.37 * api-change:`cleanrooms`: [`botocore`] Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: [`botocore`] Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: [`botocore`] Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: [`botocore`] Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: [`botocore`] Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: [`botocore`] This release includes exception definition and documentation updates. * from version 1.40.36 * api-change:`batch`: [`botocore`] Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: [`botocore`] Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: [`botocore`] Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build- version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.40.35 * api-change:`bedrock-agentcore-control`: [`botocore`] Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: [`botocore`] Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: [`botocore`] This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: [`botocore`] Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: [`botocore`] Added support for cross-account Active Directories. * api-change:`medialive`: [`botocore`] Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sms-voice`: [`botocore`] Updated the `sms-voice` client to the latest version. Note: this client is maintained only for backwards compatibility and should not be used for new development. We recommend using the `pinpoint-sms-voice` client for full support and ongoing updates. * api-change:`sqs`: [`botocore`] Update invalid character handling documentation for SQS SendMessage API * from version 1.40.34 * api-change:`bedrock`: [`botocore`] Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: [`botocore`] Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: [`botocore`] Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: [`botocore`] Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.40.33 * api-change:`ec2`: [`botocore`] Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: [`botocore`] Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: [`botocore`] Add support for Amazon EC2 Capacity Blocks for ML * Update BuildRequires and Requires from setup.py * UPdate to 1.40.32 * api-change:`budgets`: [`botocore`] Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: [`botocore`] IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: [`botocore`] Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: [`botocore`] Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.40.31 * api-change:`ce`: [`botocore`] Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: [`botocore`] Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: [`botocore`] Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * api-change:`sms`: [`botocore`] The sms client has been removed following the deprecation of the service. * from version 1.40.30 * api-change:`payment-cryptography`: [`botocore`] Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.40.29 * api-change:`amp`: [`botocore`] Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: [`botocore`] adding IAM principal id to IAM user profile details * api-change:`ecs`: [`botocore`] This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: [`botocore`] Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: [`botocore`] CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: [`botocore`] Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: [`botocore`] This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: [`botocore`] Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.40.28 * api-change:`networkflowmonitor`: [`botocore`] Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: [`botocore`] AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.40.27 * api-change:`autoscaling`: [`botocore`] Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: [`botocore`] Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: [`botocore`] SDK release for user defined predefined attributes. * api-change:`datazone`: [`botocore`] Adds support for custom blueprints * api-change:`mediapackagev2`: [`botocore`] Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: [`botocore`] Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: [`botocore`] Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.40.26 * api-change:`iotsitewise`: [`botocore`] Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: [`botocore`] This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: [`botocore`] This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * Update BuildRequires and Requires from setup.py * Update to 1.40.25 * api-change:`ecs`: [`botocore`] This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: [`botocore`] Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: [`botocore`] Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.40.24 * api-change:`cleanrooms`: [`botocore`] Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: [`botocore`] ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: [`botocore`] Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: [`botocore`] Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: [`botocore`] Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.40.23 * api-change:`cleanrooms`: [`botocore`] Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: [`botocore`] Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: [`botocore`] Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: [`botocore`] This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: [`botocore`] Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.40.22 * api-change:`ec2`: [`botocore`] MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: [`botocore`] Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: [`botocore`] Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: [`botocore`] Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.40.21 * api-change:`bedrock-runtime`: [`botocore`] Fixed stop sequence limit for converse API. * api-change:`ec2`: [`botocore`] Release shows new route types such as filtered and advertisement. * api-change:`xray`: [`botocore`] AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.40.20 * api-change:`applicationcostprofiler`: [`botocore`] Remove incorrect endpoint tests * api-change:`apprunner`: [`botocore`] Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloud9`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudhsmv2`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: [`botocore`] Remove incorrect endpoint tests * api-change:`codedeploy`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: [`botocore`] Remove incorrect endpoint tests * api-change:`connect`: [`botocore`] AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: [`botocore`] Remove incorrect endpoint tests * api-change:`dynamodb`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fis`: [`botocore`] Remove incorrect endpoint tests * api-change:`fms`: [`botocore`] Remove incorrect endpoint tests * api-change:`geo-maps`: [`botocore`] Remove incorrect endpoint tests * api-change:`glue`: [`botocore`] Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: [`botocore`] Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediastore-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`mturk`: [`botocore`] Remove incorrect endpoint tests * api-change:`omics`: [`botocore`] Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: [`botocore`] Remove incorrect endpoint tests * api-change:`rds`: [`botocore`] Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: [`botocore`] Remove incorrect endpoint tests * api-change:`savingsplans`: [`botocore`] Remove incorrect endpoint tests * api-change:`scheduler`: [`botocore`] Remove incorrect endpoint tests * api-change:`ses`: [`botocore`] Remove incorrect endpoint tests * api-change:`ssm-sap`: [`botocore`] Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-query`: [`botocore`] Remove incorrect endpoint tests * api-change:`waf`: [`botocore`] Remove incorrect endpoint tests * api-change:`workmailmessageflow`: [`botocore`] Remove incorrect endpoint tests * api-change:`xray`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.19 * api-change:`amplifybackend`: [`botocore`] Remove incorrect endpoint tests * api-change:`application-insights`: [`botocore`] Remove incorrect endpoint tests * api-change:`batch`: [`botocore`] Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguruprofiler`: [`botocore`] Remove incorrect endpoint tests * api-change:`datapipeline`: [`botocore`] Remove incorrect endpoint tests * api-change:`discovery`: [`botocore`] Remove incorrect endpoint tests * api-change:`ds`: [`botocore`] Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: [`botocore`] Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`evidently`: [`botocore`] Remove incorrect endpoint tests * api-change:`frauddetector`: [`botocore`] Remove incorrect endpoint tests * api-change:`inspector`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesisvideo`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-media`: [`botocore`] Remove incorrect endpoint tests * api-change:`lakeformation`: [`botocore`] Remove incorrect endpoint tests * api-change:`lex-models`: [`botocore`] Remove incorrect endpoint tests * api-change:`migrationhub-config`: [`botocore`] Remove incorrect endpoint tests * api-change:`neptune-graph`: [`botocore`] Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`opsworks`: [`botocore`] The opsworks client has been removed following the deprecation of the service. * api-change:`opsworkscm`: [`botocore`] The opsworkscm client has been removed following the deprecation of the service. * api-change:`personalize`: [`botocore`] Remove incorrect endpoint tests * api-change:`pi`: [`botocore`] Remove incorrect endpoint tests * api-change:`qldb-session`: [`botocore`] Remove incorrect endpoint tests * api-change:`redshift`: [`botocore`] Remove incorrect endpoint tests * api-change:`robomaker`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: [`botocore`] Remove incorrect endpoint tests * api-change:`snow-device-management`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-write`: [`botocore`] Remove incorrect endpoint tests * api-change:`voice-id`: [`botocore`] Remove incorrect endpoint tests * api-change:`workdocs`: [`botocore`] Remove incorrect endpoint tests * api-change:`workmail`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.18 * api-change:`apprunner`: [`botocore`] Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: [`botocore`] This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: [`botocore`] Remove incorrect endpoint tests * api-change:`codestar-connections`: [`botocore`] Remove incorrect endpoint tests * api-change:`comprehendmedical`: [`botocore`] Remove incorrect endpoint tests * api-change:`connectparticipant`: [`botocore`] Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`finspace`: [`botocore`] Remove incorrect endpoint tests * api-change:`geo-routes`: [`botocore`] Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: [`botocore`] Remove incorrect endpoint tests * api-change:`globalaccelerator`: [`botocore`] Remove incorrect endpoint tests * api-change:`greengrass`: [`botocore`] Remove incorrect endpoint tests * api-change:`identitystore`: [`botocore`] Remove incorrect endpoint tests * api-change:`imagebuilder`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: [`botocore`] Remove incorrect endpoint tests * api-change:`kafka`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutvision`: [`botocore`] Remove incorrect endpoint tests * api-change:`mgh`: [`botocore`] Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: [`botocore`] Remove incorrect endpoint tests * api-change:`mq`: [`botocore`] Remove incorrect endpoint tests * api-change:`personalize-events`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint`: [`botocore`] Remove incorrect endpoint tests * api-change:`ram`: [`botocore`] Remove incorrect endpoint tests * api-change:`rbin`: [`botocore`] Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: [`botocore`] Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: [`botocore`] Remove incorrect endpoint tests * api-change:`signer`: [`botocore`] Remove incorrect endpoint tests * api-change:`waf-regional`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.17 * api-change:`appflow`: [`botocore`] Remove incorrect endpoint tests * api-change:`b2bi`: [`botocore`] Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudsearch`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudtrail-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeartifact`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguru-security`: [`botocore`] Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: [`botocore`] Remove incorrect endpoint tests * api-change:`cur`: [`botocore`] Remove incorrect endpoint tests * api-change:`datazone`: [`botocore`] Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: [`botocore`] Remove incorrect endpoint tests * api-change:`devops-guru`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`finspace-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`forecast`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotfleethub`: [`botocore`] Remove incorrect endpoint tests * api-change:`kendra`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesisanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: [`botocore`] Remove incorrect endpoint tests * api-change:`lex-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutequipment`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediaconvert`: [`botocore`] This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediastore`: [`botocore`] Remove incorrect endpoint tests * api-change:`personalize-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`qbusiness`: [`botocore`] The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-edge`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`serverlessrepo`: [`botocore`] Remove incorrect endpoint tests * api-change:`shield`: [`botocore`] Remove incorrect endpoint tests * api-change:`snowball`: [`botocore`] Remove incorrect endpoint tests * api-change:`sqs`: [`botocore`] Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: [`botocore`] Remove incorrect endpoint tests * api-change:`support-app`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-influxdb`: [`botocore`] Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: [`botocore`] Remove incorrect endpoint tests * api-change:`wellarchitected`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.16 * api-change:`clouddirectory`: [`botocore`] Remove incorrect endpoint tests * api-change:`cognito-sync`: [`botocore`] Remove incorrect endpoint tests * api-change:`docdb`: [`botocore`] Remove incorrect endpoint tests * api-change:`elb`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`healthlake`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`macie2`: [`botocore`] Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: [`botocore`] Remove incorrect endpoint tests * api-change:`proton`: [`botocore`] Remove incorrect endpoint tests * api-change:`qconnect`: [`botocore`] Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: [`botocore`] Remove incorrect endpoint tests * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`simspaceweaver`: [`botocore`] Remove incorrect endpoint tests * api-change:`synthetics`: [`botocore`] Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: [`botocore`] test and verified, safe to release * from version 1.40.15 * api-change:`apigatewaymanagementapi`: [`botocore`] Remove incorrect endpoint tests * api-change:`appfabric`: [`botocore`] Remove incorrect endpoint tests * api-change:`backup-gateway`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudhsm`: [`botocore`] Remove incorrect endpoint tests * api-change:`cognito-identity`: [`botocore`] Remove incorrect endpoint tests * api-change:`comprehend`: [`botocore`] Remove incorrect endpoint tests * api-change:`ebs`: [`botocore`] Remove incorrect endpoint tests * api-change:`ecr-public`: [`botocore`] Remove incorrect endpoint tests * api-change:`ecs`: [`botocore`] This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Remove incorrect endpoint tests * api-change:`forecastquery`: [`botocore`] Remove incorrect endpoint tests * api-change:`gameliftstreams`: [`botocore`] The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: [`botocore`] Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: [`botocore`] Remove incorrect endpoint tests * api-change:`guardduty`: [`botocore`] Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotevents`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotevents-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotthingsgraph`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: [`botocore`] Remove incorrect endpoint tests * api-change:`lexv2-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutmetrics`: [`botocore`] Remove incorrect endpoint tests * api-change:`managedblockchain`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediapackage`: [`botocore`] Remove incorrect endpoint tests * api-change:`panorama`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint-email`: [`botocore`] Remove incorrect endpoint tests * api-change:`resource-groups`: [`botocore`] Remove incorrect endpoint tests * api-change:`s3outposts`: [`botocore`] Remove incorrect endpoint tests * api-change:`ssm-contacts`: [`botocore`] Doc-only updates for Incident Manager Contacts August 2025 * from version 1.40.14 * api-change:`bedrock-runtime`: [`botocore`] Launch CountTokens API to allow token counting * api-change:`billing`: [`botocore`] Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: [`botocore`] This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: [`botocore`] This release supports policy grant identifier for cloud formation integration * api-change:`detective`: [`botocore`] Remove incorrect endpoint tests * api-change:`dynamodb`: [`botocore`] Remove incorrect endpoint tests * api-change:`eks`: [`botocore`] EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kinesisanalyticsv2`: [`botocore`] Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.40.13 * api-change:`cleanrooms`: [`botocore`] Support error message configuration for analysis templates * api-change:`ec2`: [`botocore`] Add support for "warning" volume status. * api-change:`polly`: [`botocore`] Added support for new output format - Opus. * from version 1.40.12 * api-change:`batch`: [`botocore`] Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: [`botocore`] Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: [`botocore`] Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`s3control`: [`botocore`] Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: [`botocore`] Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.27.6 * from version 1.40.11 * api-change:`amp`: [`botocore`] Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: [`botocore`] This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: [`botocore`] AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.40.10 * api-change:`arc-region-switch`: [`botocore`] Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: [`botocore`] Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: [`botocore`] Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: [`botocore`] This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: [`botocore`] This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: [`botocore`] AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: [`botocore`] Added support for entity lists. * api-change:`medialive`: [`botocore`] CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: [`botocore`] Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: [`botocore`] Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: [`botocore`] Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: [`botocore`] New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.40.9 * api-change:`braket`: [`botocore`] Add support for Braket program sets. * api-change:`datazone`: [`botocore`] Adds support for account pools and project profile account decoupling * api-change:`fsx`: [`botocore`] Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: [`botocore`] Add Tagging Support for Opportunity resources * api-change:`sagemaker`: [`botocore`] This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: [`botocore`] Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * from version 1.40.8 * api-change:`backupsearch`: [`botocore`] Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: [`botocore`] Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: [`botocore`] This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: [`botocore`] IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: [`botocore`] AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.40.7 * api-change:`bedrock`: [`botocore`] This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: [`botocore`] Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: [`botocore`] Updating SearchUserHierarchyGroups API * api-change:`deadline`: [`botocore`] Adds support for Wait and Save feature in service-managed fleets * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: [`botocore`] Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: [`botocore`] Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: [`botocore`] Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: [`botocore`] Added support for managing user background session for applications * from version 1.40.6 * api-change:`connect`: [`botocore`] This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: [`botocore`] Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: [`botocore`] Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: [`botocore`] Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: [`botocore`] Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * bugfix:stub: [`botocore`] Fixes a bug which causes the stubber to begin failing for DynamoDB when SSO or AssumeRole credentials fail to load * from version 1.40.5 * api-change:`batch`: [`botocore`] This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: [`botocore`] Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports comment- based pull request control. * api-change:`gameliftstreams`: [`botocore`] Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: [`botocore`] AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: [`botocore`] Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.40.4 * api-change:`appstream`: [`botocore`] Added support for G6 instances * api-change:`budgets`: [`botocore`] Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: [`botocore`] Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: [`botocore`] Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.40.3 * api-change:`bedrock`: [`botocore`] This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: [`botocore`] This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: [`botocore`] Add support for deletion protection on EKS clusters * api-change:`rds`: [`botocore`] Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: [`botocore`] Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.40.2 * api-change:`bedrock-agentcore`: [`botocore`] Remove superfluous field from API * api-change:`codeconnections`: [`botocore`] New integration with Azure DevOps provider type. * api-change:`evs`: [`botocore`] TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: [`botocore`] Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: [`botocore`] This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.40.1 * api-change:`acm-pca`: [`botocore`] Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: [`botocore`] This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: [`botocore`] This is the initial SDK release for Region switch * api-change:`auditmanager`: [`botocore`] Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: [`botocore`] This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: [`botocore`] Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: [`botocore`] Release new resource detail type CodeRepository * api-change:`sns`: [`botocore`] Amazon SNS support for Amazon SQS fair queues * from version 1.40.0 * api-change:`customer-profiles`: [`botocore`] The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: [`botocore`] Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: [`botocore`] This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: [`botocore`] Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: [`botocore`] Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: [`botocore`] Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: [`botocore`] This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: [`botocore`] Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: [`botocore`] Added Impala connector support * api-change:`s3control`: [`botocore`] Add Tags field to CreateAccessPoint * api-change:`sesv2`: [`botocore`] This release introduces support for Multi- tenant management * api-change:`workspaces-web`: [`botocore`] Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: [`botocore`] Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.39.17 * api-change:`cloudfront`: [`botocore`] This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: [`botocore`] Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: [`botocore`] This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: [`botocore`] Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: [`botocore`] Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.39.16 * api-change:`batch`: [`botocore`] AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: [`botocore`] This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: [`botocore`] Adds support for tag management on monitors. * api-change:`location`: [`botocore`] This release 1) adds support for multi- polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real- world boundaries. * api-change:`opensearchserverless`: [`botocore`] This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.39.15 * api-change:`directconnect`: [`botocore`] Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: [`botocore`] Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: [`botocore`] Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * enhancement:`sso`: [`botocore`] Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. * from version 1.39.14 * api-change:`appintegrations`: [`botocore`] Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross-contact), and run background applications (service). * api-change:`budgets`: [`botocore`] Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: [`botocore`] Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: [`botocore`] Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: [`botocore`] Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: [`botocore`] This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: [`botocore`] This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: [`botocore`] Documentation updates for Amazon SQS fair queues feature. * from version 1.39.13 * api-change:`datazone`: [`botocore`] This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: [`botocore`] Add Git integration and README support for HealthOmics workflows * from version 1.39.12 * api-change:`ec2`: [`botocore`] Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: [`botocore`] AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: [`botocore`] Added the lastUserId parameter to the ListDevices and GetDevice API. * bugfix:`bedrock`: [`botocore`] Fixes an issue where bearer authentication was incorrectly applied to all services with the `bedrock` signing name. Bearer auth is now only applied if the service model also includes the `smithy.api#httpBearerAuth` trait. * from version 1.39.11 * api-change:`ecr`: [`botocore`] Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: [`botocore`] This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: [`botocore`] This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: [`botocore`] This release updates the supported regions for Neptune API to include current AWS regions. * from version 1.39.10 * api-change:`cloudfront`: [`botocore`] Add dualstack endpoint support * api-change:`deadline`: [`botocore`] Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: [`botocore`] This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: [`botocore`] This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: [`botocore`] Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * from version 1.39.9 * api-change:`auditmanager`: [`botocore`] Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: [`botocore`] CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: [`botocore`] This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: [`botocore`] Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: [`botocore`] Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: [`botocore`] July 2025 doc-only updates for Systems Manager. * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * enhancement:Python: [`botocore`] Added provisional support for the upcoming Python 3.14 release * from version 1.39.8 * api-change:`cleanroomsml`: [`botocore`] This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: [`botocore`] Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: [`botocore`] AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: [`botocore`] Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: [`botocore`] Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: [`botocore`] This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: [`botocore`] Align input with style guidelines. * api-change:`synthetics`: [`botocore`] This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.39.7 * api-change:`bedrock`: [`botocore`] This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: [`botocore`] Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: [`botocore`] Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: [`botocore`] document update to support on demand custom model. * api-change:`datasync`: [`botocore`] AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: [`botocore`] AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: [`botocore`] Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: [`botocore`] FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: [`botocore`] CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: [`botocore`] This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: [`botocore`] Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: [`botocore`] Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: [`botocore`] Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.39.6 * api-change:`ecs`: [`botocore`] This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.39.5 * api-change:`bedrock-agent`: [`botocore`] Add support for S3 Vectors as a vector store. * api-change:`datazone`: [`botocore`] Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: [`botocore`] Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: [`botocore`] This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: [`botocore`] Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: [`botocore`] Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: [`botocore`] AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: [`botocore`] This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: [`botocore`] Introduced custom instructions for topics. * api-change:`repostspace`: [`botocore`] This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: [`botocore`] Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: [`botocore`] Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.39.4 * api-change:`ec2`: [`botocore`] Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: [`botocore`] This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: [`botocore`] Removing content that refers to an S3 bucket that is no longer in use. * from version 1.39.3 * api-change:`customer-profiles`: [`botocore`] This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: [`botocore`] Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: [`botocore`] This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: [`botocore`] This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: [`botocore`] Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.39.2 * api-change:`connectcases`: [`botocore`] This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: [`botocore`] Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: [`botocore`] Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * Update BuildRequires and Requires from setup.py * Update to 1.39.1 * api-change:`cleanroomsml`: [`botocore`] This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: [`botocore`] Add support for the new optional domain- unit-id parameter in the UpdateProject API. * api-change:`ec2`: [`botocore`] Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: [`botocore`] This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: [`botocore`] New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: [`botocore`] Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: [`botocore`] Updated field validation requirements for InstanceGroups. * from version 1.39.0 * api-change:`arc-zonal-shift`: [`botocore`] Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: [`botocore`] Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: [`botocore`] Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: [`botocore`] Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: [`botocore`] Added support for UNKNOWN drift status. * api-change:`config`: [`botocore`] Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: [`botocore`] This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: [`botocore`] This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: [`botocore`] This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: [`botocore`] Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: [`botocore`] releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: [`botocore`] Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: [`botocore`] Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: [`botocore`] Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: [`botocore`] Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: [`botocore`] Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: [`botocore`] Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: [`botocore`] Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: [`botocore`] Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: [`botocore`] Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: [`botocore`] Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.38.46 * api-change:`config`: [`botocore`] Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: [`botocore`] This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: [`botocore`] AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: [`botocore`] Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: [`botocore`] Adding UnauthorizedException to public SDK * api-change:`rds`: [`botocore`] StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: [`botocore`] Added support for new SES regions * from version 1.38.45 * api-change:`deadline`: [`botocore`] Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: [`botocore`] This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: [`botocore`] Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: [`botocore`] This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: [`botocore`] This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: [`botocore`] This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: [`botocore`] Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: [`botocore`] Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.38.44 * api-change:`ecs`: [`botocore`] Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: [`botocore`] Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: [`botocore`] Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: [`botocore`] Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: [`botocore`] This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: [`botocore`] Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: [`botocore`] Remove Tags field from Get API responses * from version 1.38.43 * api-change:`aiops`: [`botocore`] Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: [`botocore`] Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: [`botocore`] We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: [`botocore`] This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: [`botocore`] Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: [`botocore`] Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real-time network latency for multiplayer games. * api-change:`license-manager`: [`botocore`] AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: [`botocore`] Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: [`botocore`] Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: [`botocore`] This Feature Adds Support for the "et- EE" Locale for Batch Operations * from version 1.38.42 * api-change:`glue`: [`botocore`] AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: [`botocore`] S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: [`botocore`] Added support for Amazon WorkSpaces Instances API * from version 1.38.41 * api-change:`bedrock`: [`botocore`] Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: [`botocore`] Add ECS support for Windows Server 2025 * api-change:`geo-places`: [`botocore`] Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: [`botocore`] AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: [`botocore`] This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.38.40 * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: [`botocore`] This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: [`botocore`] Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON- formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: [`botocore`] Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: [`botocore`] Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: [`botocore`] This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.38.39 * api-change:`aiops`: [`botocore`] This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: [`botocore`] Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: [`botocore`] Added paginators for `imagebuilder`. * api-change:`logs`: [`botocore`] Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: [`botocore`] Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: [`botocore`] Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.38.38 * api-change:`accessanalyzer`: [`botocore`] We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: [`botocore`] Adds support for Exportable Public Certificates * api-change:`backup`: [`botocore`] AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: [`botocore`] Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: [`botocore`] Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: [`botocore`] Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: [`botocore`] This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: [`botocore`] Release of Active Threat Defense in Network Firewall * api-change:`organizations`: [`botocore`] Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: [`botocore`] Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: [`botocore`] The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: [`botocore`] AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.38.37 * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: [`botocore`] The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: [`botocore`] You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: [`botocore`] This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.38.36 * api-change:`apigateway`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: [`botocore`] Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: [`botocore`] This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: [`botocore`] This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: [`botocore`] Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: [`botocore`] AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: [`botocore`] Fixed regex patterns for ARN fields. * from version 1.38.35 * api-change:`controlcatalog`: [`botocore`] Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: [`botocore`] Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: [`botocore`] Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: [`botocore`] Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: [`botocore`] WAF now provides two DDoS protection options: resource-level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * bugfix:Serialization: [`botocore`] Fixes a bug where instances of decimal.Decimal were unable to be passed into JSON serialization * from version 1.38.34 * api-change:`gameliftstreams`: [`botocore`] Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.38.33 * api-change:`appsync`: [`botocore`] Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: [`botocore`] Support dual-stack endpoints for ce api * api-change:`customer-profiles`: [`botocore`] This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: [`botocore`] Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: [`botocore`] The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: [`botocore`] Add ConflictException to UpdateEnvironment API * from version 1.38.32 * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: [`botocore`] Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: [`botocore`] Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: [`botocore`] Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: [`botocore`] S3 Tables now supports getting details about a table via its table ARN. * from version 1.38.31 * api-change:`bcm-pricing-calculator`: [`botocore`] Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: [`botocore`] Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: [`botocore`] AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: [`botocore`] AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.38.30 * api-change:`amplify`: [`botocore`] Update documentation for cacheConfig in CreateApp API * api-change:`evs`: [`botocore`] Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: [`botocore`] Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: [`botocore`] This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: [`botocore`] This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: [`botocore`] You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: [`botocore`] Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: [`botocore`] AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.38.29 * api-change:`apigateway`: [`botocore`] Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: [`botocore`] Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: [`botocore`] AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.38.28 * api-change:`athena`: [`botocore`] Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: [`botocore`] You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: [`botocore`] This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: [`botocore`] This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: [`botocore`] Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: [`botocore`] Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: [`botocore`] Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: [`botocore`] Add support for generating match IDs in near real-time. * api-change:`pcs`: [`botocore`] Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: [`botocore`] Support for Java runtime handler pattern. * from version 1.38.27 * api-change:`emr-serverless`: [`botocore`] This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: [`botocore`] Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.38.26 * api-change:`amplify`: [`botocore`] Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: [`botocore`] Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: [`botocore`] Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: [`botocore`] CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: [`botocore`] This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: [`botocore`] AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: [`botocore`] FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: [`botocore`] Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: [`botocore`] Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: [`botocore`] Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.38.25 * api-change:`cost-optimization-hub`: [`botocore`] This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: [`botocore`] Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: [`botocore`] Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: [`botocore`] You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: [`botocore`] Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.38.24 * api-change:`ce`: [`botocore`] This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: [`botocore`] This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update BuildRequires and Requires from setup.py * Update to 1.38.23 * api-change:`ec2`: [`botocore`] This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: [`botocore`] Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.38.22 * api-change:`amp`: [`botocore`] Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: [`botocore`] With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: [`botocore`] Features: support for customer managed encryption keys * api-change:`glue`: [`botocore`] This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.38.21 * api-change:`application-autoscaling`: [`botocore`] Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: [`botocore`] Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: [`botocore`] Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: [`botocore`] Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: [`botocore`] Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.38.20 * api-change:`datasync`: [`botocore`] Remove Discovery APIs from the DataSync service * api-change:`ec2`: [`botocore`] This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: [`botocore`] Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: [`botocore`] This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: [`botocore`] Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`privatenetworks`: [`botocore`] The privatenetworks client has been removed following the deprecation of the service. * api-change:`rds`: [`botocore`] This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.38.19 * api-change:`dsql`: [`botocore`] CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: [`botocore`] This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: [`botocore`] This release adds support for DVB- DASH, EBU-TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.38.18 * api-change:`bedrock-data-automation`: [`botocore`] Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: [`botocore`] Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: [`botocore`] CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: [`botocore`] This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: [`botocore`] Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: [`botocore`] Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: [`botocore`] This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: [`botocore`] This release introduces CreateSupportCase operation to SDK. * from version 1.38.17 * api-change:`bedrock-agent`: [`botocore`] Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: [`botocore`] Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: [`botocore`] Introduces Data Resync feature to describe- table-statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: [`botocore`] This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: [`botocore`] Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.38.16 * api-change:`cognito-idp`: [`botocore`] Add exceptions to WebAuthn operations. * api-change:`firehose`: [`botocore`] This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: [`botocore`] This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: [`botocore`] This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.38.15 * api-change:`bedrock`: [`botocore`] Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: [`botocore`] Changes for enhanced metadata in trace * api-change:`controltower`: [`botocore`] AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: [`botocore`] CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi- Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: [`botocore`] This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: [`botocore`] Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.38.14 * api-change:`deadline`: [`botocore`] AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: [`botocore`] EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: [`botocore`] Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: [`botocore`] Add support to the AV1 rate control mode * api-change:`mediatailor`: [`botocore`] Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: [`botocore`] Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: [`botocore`] No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: [`botocore`] Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.38.13 * api-change:`athena`: [`botocore`] Minor API documentation updates * api-change:`logs`: [`botocore`] We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: [`botocore`] Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: [`botocore`] Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.38.12 * api-change:`cloudfront`: [`botocore`] Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: [`botocore`] Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: [`botocore`] Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: [`botocore`] This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: [`botocore`] Updated description of a data structure. * api-change:`sso-admin`: [`botocore`] Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.38.11 * api-change:`ec2`: [`botocore`] This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: [`botocore`] Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: [`botocore`] Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: [`botocore`] SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: [`botocore`] Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.38.10 * api-change:`ec2`: [`botocore`] This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: [`botocore`] ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: [`botocore`] Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: [`botocore`] Add dualstack endpoints support. * from version 1.38.9 * api-change:`datazone`: [`botocore`] This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: [`botocore`] Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: [`botocore`] This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: [`botocore`] Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: [`botocore`] This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.38.8 * api-change:`bedrock-data-automation`: [`botocore`] Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: [`botocore`] Doc only update - fixed typos. * api-change:`kinesis`: [`botocore`] Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.38.7 * api-change:`appconfig`: [`botocore`] Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: [`botocore`] This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: [`botocore`] Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.38.6 * api-change:`bedrock`: [`botocore`] You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: [`botocore`] Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: [`botocore`] Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: [`botocore`] This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: [`botocore`] Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: [`botocore`] Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: [`botocore`] Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: [`botocore`] Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: [`botocore`] CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: [`botocore`] Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.38.5 * api-change:`connectcases`: [`botocore`] Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: [`botocore`] Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: [`botocore`] Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: [`botocore`] Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: [`botocore`] SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: [`botocore`] This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: [`botocore`] This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * from version 1.38.4 * api-change:`acm`: [`botocore`] Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: [`botocore`] This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: [`botocore`] Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: [`botocore`] Doc only update for GSI descriptions. * api-change:`imagebuilder`: [`botocore`] Add integration with SSM Parameter Store to Image Builder. * from version 1.38.3 * api-change:`bedrock-runtime`: [`botocore`] You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: [`botocore`] Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: [`botocore`] Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.38.2 * api-change:`apprunner`: [`botocore`] AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: [`botocore`] Add data source support to Event APIs * api-change:`bedrock-data-automation`: [`botocore`] Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: [`botocore`] Remove redundant validation check. * api-change:`dynamodb`: [`botocore`] Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: [`botocore`] Documentation only release for Amazon ECS * api-change:`pcs`: [`botocore`] Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: [`botocore`] This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update BuildRequires and Requires from setup.py * Update to 1.38.1 * api-change:`codebuild`: [`botocore`] Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: [`botocore`] Add support to roll back an In_Progress ECS Service Deployment * api-change:`imagebuilder`: [`botocore`] Add all `imagebuilder` modeled paginators that are currently supported by botocore. * api-change:`resource-explorer-2`: [`botocore`] Documentation-only update for CreateView option correction * from version 1.38.0 * api-change:`account`: [`botocore`] AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: [`botocore`] This release adds refresh token rotation. * api-change:`ec2`: [`botocore`] Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: [`botocore`] To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: [`botocore`] You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: [`botocore`] Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: [`botocore`] Fix endpoint resolution test cases * feature:Python: [`botocore`] End of support for Python 3.8 * feature:Python: End of support for Python 3.8 * from version 1.37.38 * api-change:`arc-zonal-shift`: [`botocore`] Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: [`botocore`] Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: [`botocore`] Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: [`botocore`] Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: [`botocore`] The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.37.37 * api-change:`qconnect`: [`botocore`] This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: [`botocore`] This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: [`botocore`] Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.37.36 * api-change:`accessanalyzer`: [`botocore`] Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: [`botocore`] Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: [`botocore`] Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: [`botocore`] This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: [`botocore`] Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: [`botocore`] We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: [`botocore`] Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: [`botocore`] Add versioning for HealthOmics workflows * from version 1.37.35 * api-change:`connectcases`: [`botocore`] This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: [`botocore`] Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: [`botocore`] Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: [`botocore`] Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: [`botocore`] Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: [`botocore`] S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer- managed keys. * api-change:`servicecatalog`: [`botocore`] Updated default value for the access-level-filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * from version 1.37.34 * api-change:`entityresolution`: [`botocore`] This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: [`botocore`] Indonesia SOR Tax Registration Launch * from version 1.37.33 * api-change:`connect-contact-lens`: [`botocore`] Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: [`botocore`] Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: [`botocore`] Add support for Detective DualStack endpoints * api-change:`dynamodb`: [`botocore`] Doc only update for API descriptions. * api-change:`marketplace-entitlement`: [`botocore`] Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: [`botocore`] Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: [`botocore`] Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: [`botocore`] Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * bugfix:`download_fileobj`: Fileobj provided in append mode will no longer allow concurrent writes to preserve data integrity. * from version 1.37.32 * api-change:`application-autoscaling`: [`botocore`] Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: [`botocore`] AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: [`botocore`] Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: [`botocore`] Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: [`botocore`] Add support to analysis and sheet level highlighting in QuickSight. * from version 1.37.31 * api-change:`controlcatalog`: [`botocore`] The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: [`botocore`] Documentation update for secondary indexes and Create_Table. * api-change:`glue`: [`botocore`] The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: [`botocore`] Support tagging Agents and adjust input field validations * api-change:`transfer`: [`botocore`] This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.37.30 * api-change:`bedrock-runtime`: [`botocore`] This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: [`botocore`] This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: [`botocore`] This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: [`botocore`] This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: [`botocore`] Documentation updates for AWS Security Hub. * api-change:`storagegateway`: [`botocore`] Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: [`botocore`] Uzbekistan Launch on TaxSettings Page * Update BuildRequires and Requires from setup.py * Update to 1.37.29 * api-change:`bedrock`: [`botocore`] New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: [`botocore`] New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: [`botocore`] Add input validations for multiple Glue APIs * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: [`botocore`] Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: [`botocore`] This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.37.28 * api-change:`ds-data`: [`botocore`] Doc only update - fixed broken links. * api-change:`ec2`: [`botocore`] Doc-only updates for Amazon EC2 * api-change:`events`: [`botocore`] Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: [`botocore`] Updated max size of Prefixes parameter of Scope data type. * from version 1.37.27 * api-change:`bedrock-agent`: [`botocore`] Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single- column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: [`botocore`] Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: [`botocore`] Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: [`botocore`] Improve descriptions for various API commands and data types. * api-change:`route53`: [`botocore`] Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: [`botocore`] Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: [`botocore`] This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: [`botocore`] This Feature Adds Support for the "zh- HK" Locale for Batch Operations * enhancement:Eventstream: [`botocore`] The event streams maximum payload size is now required to be 24Mb or less. * from version 1.37.26 * api-change:`application-signals`: [`botocore`] Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: [`botocore`] This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: [`botocore`] Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: [`botocore`] This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: [`botocore`] Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: [`botocore`] Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.37.25 * api-change:`cleanrooms`: [`botocore`] This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: [`botocore`] Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.37.24 * api-change:`bedrock-runtime`: [`botocore`] Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: [`botocore`] With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: [`botocore`] Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: [`botocore`] Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: [`botocore`] Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: [`botocore`] Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: [`botocore`] Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: [`botocore`] Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: [`botocore`] Add dual-stack support to global endpoints. * api-change:`transfer`: [`botocore`] Add WebAppEndpointPolicy support for WebApps * from version 1.37.23 * api-change:`apigateway`: [`botocore`] Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: [`botocore`] Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: [`botocore`] Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: [`botocore`] This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: [`botocore`] This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: [`botocore`] Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: [`botocore`] Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: [`botocore`] The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: [`botocore`] RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: [`botocore`] TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.37.22 * api-change:`batch`: [`botocore`] This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: [`botocore`] Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: [`botocore`] bedrock flow now support node action trace. * api-change:`cloudformation`: [`botocore`] Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: [`botocore`] This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: [`botocore`] Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: [`botocore`] Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: [`botocore`] add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: [`botocore`] This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.37.21 * api-change:`arc-zonal-shift`: [`botocore`] Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: [`botocore`] With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: [`botocore`] This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: [`botocore`] Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: [`botocore`] Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: [`botocore`] Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: [`botocore`] This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.37.20 * api-change:`bedrock-agent`: [`botocore`] Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: [`botocore`] Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: [`botocore`] Minor updates to improve developer experience. * api-change:`keyspaces`: [`botocore`] Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: [`botocore`] This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: [`botocore`] This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: [`botocore`] This release adds support for customer- managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: [`botocore`] Deprecate tags field in Get API responses * from version 1.37.19 * api-change:`iotwireless`: [`botocore`] Mark EutranCid under LteNmr optional. * api-change:`pcs`: [`botocore`] ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: [`botocore`] Provides the correct value for supported model ID. * api-change:`ssm`: [`botocore`] This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.37.18 * api-change:`bedrock`: [`botocore`] A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: [`botocore`] Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: [`botocore`] Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt-in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: [`botocore`] This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.37.17 * api-change:`amplify`: [`botocore`] Added appId field to Webhook responses * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: [`botocore`] Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: [`botocore`] Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: [`botocore`] You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.37.16 * api-change:`bedrock`: [`botocore`] Support custom prompt routers for evaluation jobs * api-change:`ec2`: [`botocore`] Doc-only updates for EC2 for March 2025. * api-change:`lambda`: [`botocore`] Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: [`botocore`] This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: [`botocore`] Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: [`botocore`] Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.37.15 * api-change:`appsync`: [`botocore`] Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: [`botocore`] This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: [`botocore`] This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.37.14 * api-change:`application-signals`: [`botocore`] This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: [`botocore`] Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: [`botocore`] CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: [`botocore`] Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: [`botocore`] AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.37.13 * api-change:`cognito-identity`: [`botocore`] Updated API model build artifacts for identity pools * api-change:`cognito-idp`: [`botocore`] Minor description updates to API parameters * api-change:`glue`: [`botocore`] This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: [`botocore`] This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.37.12 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: [`botocore`] Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: [`botocore`] This release adds support to update projects and environments * api-change:`dynamodb`: [`botocore`] Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: [`botocore`] This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: [`botocore`] Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: [`botocore`] This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: [`botocore`] Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * Update BuildRequires and Requires from setup.py * Update to 1.37.11 * api-change:`ec2`: [`botocore`] This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: [`botocore`] This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: [`botocore`] This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: [`botocore`] Adding componentArn to network reachability details * api-change:`medialive`: [`botocore`] Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.37.10 * api-change:`bedrock-agent`: [`botocore`] Add support for computer use tools * api-change:`bedrock-agent-runtime`: [`botocore`] Add support for computer use tools * api-change:`ce`: [`botocore`] Releasing minor partition endpoint updates. * api-change:`connect`: [`botocore`] Add support for contact transfers in external voice systems. * api-change:`medialive`: [`botocore`] Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: [`botocore`] PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: [`botocore`] This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: [`botocore`] This release updates the default value of pprof-disabled from false to true. * from version 1.37.9 * api-change:`bedrock-agent`: [`botocore`] Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: [`botocore`] Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: [`botocore`] Documentation updates for Amazon CloudFront. * api-change:`ec2`: [`botocore`] Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: [`botocore`] This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: [`botocore`] Several small updates to resolve customer requests. * from version 1.37.8 * api-change:`bedrock`: [`botocore`] This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: [`botocore`] Doc-only update for CloudTrail. * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: [`botocore`] This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: [`botocore`] This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: [`botocore`] You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: [`botocore`] Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.37.7 * api-change:`bedrock-runtime`: [`botocore`] This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: [`botocore`] AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: [`botocore`] New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: [`botocore`] This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: [`botocore`] Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.37.6 * api-change:`elasticache`: [`botocore`] Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: [`botocore`] Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: [`botocore`] AWS IoT SiteWise now supports MQTT- enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: [`botocore`] Note support for Database Insights for Amazon RDS. * from version 1.37.5 * api-change:`cognito-idp`: [`botocore`] Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: [`botocore`] Update the DescribeVpcs response * api-change:`qbusiness`: [`botocore`] Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: [`botocore`] Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: [`botocore`] Add DomainId to CreateDomainResponse * api-change:`transcribe`: [`botocore`] Updating documentation for post call analytics job queueing. * enhancement:configuration: [`botocore`] Add support for disabling host prefix injection via the `AWS_DISABLE_HOST_PREFIX_INJECTION` environment variable or the `disable_host_prefix_injection` parameter in the shared aws configuration file. * from version 1.37.4 * api-change:`bedrock-agent`: [`botocore`] This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: [`botocore`] Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: [`botocore`] Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: [`botocore`] Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: [`botocore`] Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: [`botocore`] The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: [`botocore`] Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: [`botocore`] Systems Manager doc-only updates for Feb. 2025. * enhancement:useragent: [`botocore`] Update user agent string to include client feature use. * from version 1.37.3 * api-change:`bedrock-agent-runtime`: [`botocore`] Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: [`botocore`] Definition update for EbsConfiguration. * api-change:`qbusiness`: [`botocore`] This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: [`botocore`] Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: [`botocore`] SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: [`botocore`] This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.37.2 * api-change:`application-signals`: [`botocore`] This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: [`botocore`] AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: [`botocore`] Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk-mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk-voice. * api-change:`cloudfront`: [`botocore`] Documentation update for VPC origin config. * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: [`botocore`] This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: [`botocore`] This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: [`botocore`] AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * enhancement:`Protocol`: [`botocore`] Adds support for the smithy-rpc-v2-cbor protocol. If a service supports smithy-rpc-v2-cbor, this protocol will automatically be used. For more information, see https://smithy.io/2.0/additional-specs/protocols/smithy-rpc-v2.html * from version 1.37.1 * api-change:`codebuild`: [`botocore`] Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: [`botocore`] Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: [`botocore`] Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: [`botocore`] AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: [`botocore`] PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.37.0 * api-change:`bedrock-agent`: [`botocore`] This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: [`botocore`] Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: [`botocore`] This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: [`botocore`] Documentation update, adding clarity and rephrasing. * api-change:`elastic-inference`: [`botocore`] The elastic-inference client has been removed following the deprecation of the service. * feature:Endpoints: [`botocore`] Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account- id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.36.26 * api-change:`appstream`: [`botocore`] Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: [`botocore`] Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.36.25 * api-change:`codebuild`: [`botocore`] Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: [`botocore`] Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: [`botocore`] Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: [`botocore`] CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: [`botocore`] Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: [`botocore`] Add support for toolbar configuration under user settings. * from version 1.36.24 * api-change:`codepipeline`: [`botocore`] Add environment variables to codepipeline action declaration. * api-change:`ecs`: [`botocore`] This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: [`botocore`] Documentation updates for Amazon Lightsail. * api-change:`location`: [`botocore`] Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: [`botocore`] This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: [`botocore`] This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: [`botocore`] Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: [`botocore`] This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.36.23 * api-change:`batch`: [`botocore`] This documentation-only update corrects some typos. * api-change:`emr-containers`: [`botocore`] EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: [`botocore`] Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.36.22 * api-change:`amplify`: [`botocore`] Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: [`botocore`] Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: [`botocore`] This release introduces APIs to manage DbClusters and adds support for read replicas * enhancement:Parsers: [`botocore`] Minor Parser updates to support the new smithy-generated protocol tests. See `boto/botocore#3247 <https://github.com/boto/botocore/pull/3247>`__ for more details. * from version 1.36.21 * api-change:`codebuild`: [`botocore`] Added test suite names to test case metadata * api-change:`connect`: [`botocore`] Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: [`botocore`] Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: [`botocore`] Add support for Stop DB feature. * api-change:`s3`: [`botocore`] Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: [`botocore`] The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: [`botocore`] Update Environment and Device name field definitions * from version 1.36.20 * api-change:`accessanalyzer`: [`botocore`] This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: [`botocore`] Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: [`botocore`] This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: [`botocore`] Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: [`botocore`] Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: [`botocore`] This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.36.19 * api-change:`b2bi`: [`botocore`] Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: [`botocore`] This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: [`botocore`] This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: [`botocore`] Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: [`botocore`] Support for in-place Lustre version upgrades * api-change:`medialive`: [`botocore`] Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: [`botocore`] Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: [`botocore`] Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * enhancement:Protocols: [`botocore`] Added support for multiple protocols within a service based on performance priority. * from version 1.36.18 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: [`botocore`] Add support for operation level caching * api-change:`ec2`: [`botocore`] Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: [`botocore`] Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.36.17 * api-change:`apigatewayv2`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`cloudfront`: [`botocore`] Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: [`botocore`] Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: [`botocore`] New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.36.16 * api-change:`ecr`: [`botocore`] Adds support to handle the new basic scanning daily quota. * api-change:`eks`: [`botocore`] Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: [`botocore`] This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: [`botocore`] Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: [`botocore`] This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.36.15 * api-change:`cloudformation`: [`botocore`] We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: [`botocore`] This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: [`botocore`] This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: [`botocore`] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * enhancement:Eventsteam: [`botocore`] The SDK no longer validates payload size for eventstreams. This is to facilitate varying payload requirements across AWS services. * from version 1.36.14 * api-change:`rds`: [`botocore`] Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.36.13 * api-change:`datasync`: [`botocore`] Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: [`botocore`] Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: [`botocore`] This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: [`botocore`] Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: [`botocore`] Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: [`botocore`] IPv6 support for Hyperpod clusters * from version 1.36.12 * api-change:`mediatailor`: [`botocore`] Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * Update BuildRequires and Requires from setup.py * Update to 1.36.11 * api-change:`amp`: [`botocore`] Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: [`botocore`] This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: [`botocore`] Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: [`botocore`] The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: [`botocore`] Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: [`botocore`] This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.36.10 * api-change:`appstream`: [`botocore`] Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: [`botocore`] Add a 'reason' field to InternalServerException * api-change:`ecr`: [`botocore`] Temporarily updating dualstack endpoint support * api-change:`ecr-public`: [`botocore`] Temporarily updating dualstack endpoint support * api-change:`mediatailor`: [`botocore`] Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: [`botocore`] Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: [`botocore`] You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: [`botocore`] Adds Cedar JSON format support for entities and context data in authorization requests * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.23.8 * from version 1.36.9 * api-change:`bcm-pricing-calculator`: [`botocore`] Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: [`botocore`] Add support for Dualstack and Dualstack-with- FIPS Endpoints * api-change:`ecr-public`: [`botocore`] Add support for Dualstack Endpoints * api-change:`mailmanager`: [`botocore`] This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: [`botocore`] Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.36.8 * api-change:`appsync`: [`botocore`] Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: [`botocore`] AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: [`botocore`] feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: [`botocore`] This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: [`botocore`] For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: [`botocore`] Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.36.7 * api-change:`bedrock-agent`: [`botocore`] Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: [`botocore`] Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: [`botocore`] This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: [`botocore`] Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * bugfix:Signing: [`botocore`] No longer sign transfer-encoding header for SigV4 * from version 1.36.6 * api-change:`cloudtrail`: [`botocore`] This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: [`botocore`] Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: [`botocore`] Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: [`botocore`] Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: [`botocore`] Fixed typos in the descriptions. * api-change:`transfer`: [`botocore`] Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.36.5 * api-change:`ec2`: [`botocore`] Added "future" allocation type for future dated capacity reservation * from version 1.36.4 * api-change:`bedrock-agent-runtime`: [`botocore`] Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: [`botocore`] Docs Update for timeout changes * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: [`botocore`] Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.36.3 * api-change:`batch`: [`botocore`] Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: [`botocore`] corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: [`botocore`] Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: [`botocore`] Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: [`botocore`] AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt-in. * api-change:`logs`: [`botocore`] Documentation-only update to address doc errors * api-change:`quicksight`: [`botocore`] Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: [`botocore`] This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update BuildRequires and Requires from setup.py * Update to 1.36.2 * api-change:`bedrock-runtime`: [`botocore`] Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: [`botocore`] Doc only update for Detective documentation. * api-change:`ec2`: [`botocore`] Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: [`botocore`] Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: [`botocore`] Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.36.1 * api-change:`ecs`: [`botocore`] The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: [`botocore`] Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.36.0 * api-change:`apigateway`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: [`botocore`] Now supports streaming for inline agents. * api-change:`cognito-identity`: [`botocore`] corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: [`botocore`] Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: [`botocore`] This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: [`botocore`] Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: [`botocore`] This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: [`botocore`] Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: [`botocore`] Mark type in MaintenanceWindow as required. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.23.4 * feature:`s3`: [`botocore`] The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: [`botocore`] Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: [`botocore`] S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.35.99 * api-change:`gamelift`: [`botocore`] Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.35.98 * api-change:`artifact`: [`botocore`] Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: [`botocore`] Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: [`botocore`] Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: [`botocore`] This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.35.97 * api-change:`redshift`: [`botocore`] Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: [`botocore`] Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: [`botocore`] Fixed typos in the descriptions. * from version 1.35.96 * api-change:`codebuild`: [`botocore`] AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: [`botocore`] This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: [`botocore`] AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.35.95 * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: [`botocore`] Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.35.94 * api-change:`cloudhsmv2`: [`botocore`] Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: [`botocore`] This release makes Amazon DynamoDB point-in-time-recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: [`botocore`] This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * from version 1.35.93 * api-change:`iotsecuretunneling`: [`botocore`] Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: [`botocore`] Allow vanity DNS domain when creating a new ASC instance * from version 1.35.92 * api-change:`ecs`: [`botocore`] Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: [`botocore`] Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: [`botocore`] This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.35.91 * api-change:`appsync`: [`botocore`] Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: [`botocore`] Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in-progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: [`botocore`] AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: [`botocore`] This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: [`botocore`] Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: [`botocore`] Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: [`botocore`] In-flight message typo fix from 20k to 120k. * from version 1.35.90 * api-change:`ecr`: [`botocore`] Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: [`botocore`] Restoring custom endpoint functionality for ECR Public * from version 1.35.89 * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation to correct various descriptions. * from version 1.35.88 * api-change:`bcm-pricing-calculator`: [`botocore`] Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: [`botocore`] Add support for Dualstack Endpoints * api-change:`network-firewall`: [`botocore`] Dual-stack endpoints are now supported. * api-change:`securityhub`: [`botocore`] Documentation updates for AWS Security Hub * from version 1.35.87 * api-change:`ecr`: [`botocore`] Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: [`botocore`] Add support for Dualstack endpoints * api-change:`eks`: [`botocore`] This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: [`botocore`] Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.35.86 * api-change:`bedrock-agent`: [`botocore`] Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: [`botocore`] bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: [`botocore`] Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: [`botocore`] Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: [`botocore`] Added new API's for defining and fetching Billing Views. * api-change:`ce`: [`botocore`] Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: [`botocore`] This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: [`botocore`] Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: [`botocore`] This release expands the catalog of upgrade insight checks * api-change:`macie2`: [`botocore`] This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: [`botocore`] Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: [`botocore`] This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.35.85 * api-change:`appstream`: [`botocore`] Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: [`botocore`] This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: [`botocore`] MediaLive is releasing ListVersions api * api-change:`qconnect`: [`botocore`] Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: [`botocore`] AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: [`botocore`] Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.35.84 * api-change:`amplify`: [`botocore`] Added WAF Configuration to Amplify Apps * api-change:`budgets`: [`botocore`] Releasing minor partition endpoint updates * api-change:`connect`: [`botocore`] This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: [`botocore`] This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: [`botocore`] AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: [`botocore`] Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: [`botocore`] Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: [`botocore`] Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: [`botocore`] AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: [`botocore`] Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.35.83 * api-change:`account`: [`botocore`] Update endpoint configuration. * api-change:`backup`: [`botocore`] Add Support for Backup Indexing * api-change:`backupsearch`: [`botocore`] Add support for searching backups * api-change:`batch`: [`botocore`] This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: [`botocore`] Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: [`botocore`] Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: [`botocore`] AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: [`botocore`] Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: [`botocore`] This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: [`botocore`] Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.35.82 * api-change:`cloud9`: [`botocore`] Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: [`botocore`] This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: [`botocore`] This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: [`botocore`] Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: [`botocore`] This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.35.81 * api-change:`cloudhsmv2`: [`botocore`] Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: [`botocore`] This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: [`botocore`] Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: [`botocore`] Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: [`botocore`] AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: [`botocore`] There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: [`botocore`] AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.35.80 * api-change:`connect`: [`botocore`] Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: [`botocore`] Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: [`botocore`] To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: [`botocore`] Improved descriptions for certain APIs. * api-change:`route53domains`: [`botocore`] This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.35.79 * api-change:`artifact`: [`botocore`] Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: [`botocore`] Doc-only updates for CloudTrail. * api-change:`cognito-idp`: [`botocore`] Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: [`botocore`] Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: [`botocore`] This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: [`botocore`] API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: [`botocore`] Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: [`botocore`] Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.35.78 * api-change:`application-autoscaling`: [`botocore`] Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: [`botocore`] Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: [`botocore`] Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: [`botocore`] Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: [`botocore`] Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update BuildRequires and Requires from setup.py * Update to 1.35.77 * api-change:`appsync`: [`botocore`] Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: [`botocore`] Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: [`botocore`] This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: [`botocore`] This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: [`botocore`] Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: [`botocore`] H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: [`botocore`] Added text to clarify case-sensitivity * from version 1.35.76 * api-change:`partnercentral-selling`: [`botocore`] Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: [`botocore`] This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.35.75 * api-change:`bedrock`: [`botocore`] Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: [`botocore`] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: [`botocore`] Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: [`botocore`] Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: [`botocore`] Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: [`botocore`] This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: [`botocore`] Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.35.74 * api-change:`athena`: [`botocore`] Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: [`botocore`] Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: [`botocore`] Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: [`botocore`] Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: [`botocore`] Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: [`botocore`] Support for configuring AiOps investigation as alarm action * api-change:`datazone`: [`botocore`] Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: [`botocore`] Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: [`botocore`] This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: [`botocore`] This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: [`botocore`] This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: [`botocore`] Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: [`botocore`] This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: [`botocore`] Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: [`botocore`] Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: [`botocore`] Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: [`botocore`] Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.35.73 * api-change:`bedrock-runtime`: [`botocore`] Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: [`botocore`] It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: [`botocore`] Added support for passing role arn corresponding to the supported event destination * from version 1.35.72 * api-change:`bedrock`: [`botocore`] Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: [`botocore`] This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: [`botocore`] This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: [`botocore`] This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: [`botocore`] Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: [`botocore`] Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: [`botocore`] This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: [`botocore`] This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: [`botocore`] Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: [`botocore`] Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: [`botocore`] FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: [`botocore`] Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: [`botocore`] Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: [`botocore`] AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: [`botocore`] Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: [`botocore`] Amazon MemoryDB SDK now supports all APIs for Multi-Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: [`botocore`] This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: [`botocore`] This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: [`botocore`] Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: [`botocore`] This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: [`botocore`] Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: [`botocore`] Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: [`botocore`] Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: [`botocore`] Add new Multi Domain Correlation findings. * api-change:`security-ir`: [`botocore`] AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: [`botocore`] AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: [`botocore`] Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.35.71 * api-change:`bedrock-agent`: [`botocore`] Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: [`botocore`] AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: [`botocore`] This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: [`botocore`] Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.35.70 * api-change:`bedrock-agent`: [`botocore`] Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: [`botocore`] Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: [`botocore`] Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: [`botocore`] Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: [`botocore`] Private sharing, file upload and data collection feature support for Q Apps * from version 1.35.69 * api-change:`directconnect`: [`botocore`] Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: [`botocore`] This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: [`botocore`] Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.35.68 * api-change:`autoscaling`: [`botocore`] Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: [`botocore`] Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: [`botocore`] InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: [`botocore`] This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: [`botocore`] Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: [`botocore`] AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: [`botocore`] Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: [`botocore`] This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: [`botocore`] Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: [`botocore`] Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: [`botocore`] Add ProvisionedPollerConfig to Lambda event-source-mapping API. * api-change:`mailmanager`: [`botocore`] Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: [`botocore`] Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: [`botocore`] This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: [`botocore`] This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: [`botocore`] This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: [`botocore`] This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: [`botocore`] ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: [`botocore`] Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: [`botocore`] While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.35.67 * api-change:`apigateway`: [`botocore`] Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: [`botocore`] Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: [`botocore`] Add support for the Amazon Bedrock Runtime. * api-change:`ce`: [`botocore`] This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: [`botocore`] Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: [`botocore`] This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: [`botocore`] Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: [`botocore`] Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: [`botocore`] This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: [`botocore`] Adds metadata property to an AffectedEntity. * api-change:`iot`: [`botocore`] General Availability (GA) release of AWS IoT Device Management * Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: [`botocore`] AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: [`botocore`] General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: [`botocore`] Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: [`botocore`] Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: [`botocore`] This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: [`botocore`] This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: [`botocore`] AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: [`botocore`] Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: [`botocore`] Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: [`botocore`] Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: [`botocore`] AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.35.66 * api-change:`autoscaling`: [`botocore`] With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: [`botocore`] Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: [`botocore`] Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: [`botocore`] This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: [`botocore`] Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: [`botocore`] This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: [`botocore`] This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: [`botocore`] Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: [`botocore`] With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU- performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: [`botocore`] This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: [`botocore`] This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: [`botocore`] Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: [`botocore`] This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: [`botocore`] MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: [`botocore`] Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: [`botocore`] This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: [`botocore`] This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: [`botocore`] This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: [`botocore`] Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: [`botocore`] Added data protection settings with support for inline data redaction. * from version 1.35.65 * api-change:`b2bi`: [`botocore`] Add new X12 transactions sets and versions * api-change:`ec2`: [`botocore`] This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: [`botocore`] This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: [`botocore`] Add support for the new parameters in EFS replication APIs * api-change:`glue`: [`botocore`] AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: [`botocore`] Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: [`botocore`] Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: [`botocore`] Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: [`botocore`] Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.35.64 * api-change:`appconfig`: [`botocore`] AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: [`botocore`] Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: [`botocore`] This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: [`botocore`] Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: [`botocore`] This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Adding request and response elements for managed resources. * api-change:`ecs`: [`botocore`] This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: [`botocore`] The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: [`botocore`] This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: [`botocore`] Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: [`botocore`] Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.35.63 * api-change:`cloudwatch`: [`botocore`] Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: [`botocore`] Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: [`botocore`] Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: [`botocore`] Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: [`botocore`] This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: [`botocore`] You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: [`botocore`] Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.35.62 * api-change:`partnercentral-selling`: [`botocore`] Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co- selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.35.61 * api-change:`accessanalyzer`: [`botocore`] Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: [`botocore`] Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: [`botocore`] Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: [`botocore`] This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: [`botocore`] New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: [`botocore`] IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: [`botocore`] New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: [`botocore`] Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co- selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: [`botocore`] This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: [`botocore`] Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: [`botocore`] This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: [`botocore`] Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: [`botocore`] This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update BuildRequires and Requires from setup.py * Update to 1.35.60 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.35.59 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * from version 1.35.58 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.57 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.56 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.55 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * enhancement:protocol: Added support for header enabling service migration off the AWS Query protocol. * from version 1.35.54 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.53 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.52 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.51 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.50 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.49 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.48 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`nimble`: The nimble client has been removed following the deprecation of the service. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields * Update BuildRequires and Requires from setup.py Changes in python-botocore: * Update to 1.43.36 * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.43.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.43.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.43.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.43.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.43.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.43.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.43.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.43.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * from version 1.43.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.43.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.43.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.43.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.43.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.43.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.43.21 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.43.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.43.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.43.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * from version 1.43.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.43.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update to 1.43.15 * api-change:`backup`: Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.43.14 * api-change:`datazone`: Add support for VPC connection * api-change:`ec2`: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call * api-change:`securityagent`: Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:`s3`: Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucket * from version 1.43.13 * api-change:`batch`: Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.43.12 * api-change:`bedrock-runtime`: Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: GenerateAuthRequestCryptogram API launch. * Update to 1.43.11 * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.43.10 * api-change:`accessanalyzer`: Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: Support for dataset enrichment and geo spatial in new data preparation experience From 1.43.9 * api-change:`logs`: Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.43.8 * api-change:`bedrock`: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: Release --has-databases parameter for AWS Glue get- catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: Introducing new option for security groups mapping * with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.43.7 * api-change:`arc-region-switch`: Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. * Update _constraints to match current requirements * Update to 1.43.6 * api-change:`bcm-data-exports`: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: This is a documentation update * api-change:`invoicing`: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. * from version 1.43.5 * api-change:`bedrock-agentcore-control`: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: Validate outpost access point resource name * api-change:`sagemaker`: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. * from version 1.43.4 * api-change:`cleanroomsml`: Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). * from version 1.43.3 * api-change:`bedrock-agentcore-control`: Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service- specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: Amazon VPC Lattice now supports privately resolvable DNS resources * from version 1.43.2 * api-change:`appstream`: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. * from version 1.43.1 * api-change:`bedrock-agentcore`: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: AgentCore Identity now supports on- behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: Adds support for asynchronous notebook runs * api-change:`eks`: Vended logs update param for capability vended logs feature * api-change:`kafka`: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API * from version 1.43.0 * api-change:`account`: Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage * api-change:`cloudfront`: Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: Removes support for registry policy V1 * api-change:`gamelift`: Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: Allow admins to configure IPv6 ranges on IP Access Settings. * enhancement:awscrt: Update awscrt version to 0.32.2 * feature:Python: End of support for Python 3.9 * from version 1.42.97 * api-change:`application-signals`: Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: Add support for Passthrough pricing plan * api-change:`gameliftstreams`: Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: Added support for Protocol as modified resource and added update failure as modification state * from version 1.42.96 * api-change:`bedrock-agentcore-control`: Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * from version 1.42.95 * api-change:`datazone`: Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: Alias `get_o_tel_enrichment`, `start_o_tel_enrichment`, and `stop_o_tel_enrichment` botocore methods to use `otel` instead of `o_tel`. * from version 1.42.94 * api-change:`batch`: Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iotwireless`: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * from version 1.42.93 * api-change:`cognito-idp`: Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * from version 1.42.92 * api-change:`application-signals`: Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: Expanded support for new suppression rule fields. * api-change:`kafka`: Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. * from version 1.42.91 * api-change:`cleanrooms`: This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: Improving Documentation for Neptune * api-change:`quicksight`: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. * from version 1.42.90 * api-change:`appstream`: Add content redirection to Update Stack * api-change:`autoscaling`: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: Added error handling for service quota limits * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: Launching SMUS IAM domain SDK support * api-change:`devops-agent`: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: Updating regex for identification of AWS Regions. * api-change:`logs`: Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. * bugfix:signing: Fix bug so that configured auth scheme preference is used when auth scheme is resolved from endpoints rulesets, or from operation- level auth trait. Auth scheme preference can be configured using the existing `auth_scheme_preference` client config option, the `auth_scheme_preference` shared config setting, or the existing `AWS_AUTH_SCHEME_PREFERENCE` environment variable. * from version 1.42.89 * api-change:`customer-profiles`: This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key- value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high-speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. * from version 1.42.88 * api-change:`connect`: Conversational Analytics for Email * api-change:`devops-agent`: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: Minor updates to exceptions for completeness * api-change:`imagebuilder`: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * from version 1.42.87 * api-change:`bcm-dashboards`: Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: Adds support for MediaLive Channel-type Router Inputs. * api-change:`redshift-data`: The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: Release support for g7e instance types for SageMaker HyperPod * from version 1.42.86 * api-change:`backup`: Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`ivs-realtime`: Adds support for Amazon IVS real-time streaming redundant ingest. * api-change:`marketplace-discovery`: AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * from version 1.42.85 * api-change:`accessanalyzer`: Revert previous additions of API changes. * api-change:`bedrock-agentcore`: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lambda`: Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. * bugfix:auth: Fix `sigv4a_signing_region_set` config being ignored when SigV4a is selected via `auth_scheme_preference`. The configured region set is now correctly applied to the signing context regardless of how SigV4a is resolved. * from version 1.42.84 * api-change:`accessanalyzer`: Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: Migrated to Smithy. No functional changes * api-change:`lightsail`: This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. * from version 1.42.83 * api-change:`bedrock`: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: Add support for tagging of Alarm resource type * api-change:`logs`: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions * from version 1.42.82 * api-change:`appstream`: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects * api-change:`bedrock-runtime`: Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. * from version 1.42.81 * api-change:`bedrock`: Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * from version 1.42.80 * api-change:`acm`: Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: AWS DevOps Agent service General Availability release. * api-change:`dms`: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-maps`: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * from version 1.42.79 * api-change:`appstream`: Add support for URL Redirection * api-change:`autoscaling`: Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: AWS DevOps Agent General Availability. * api-change:`ecs`: Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Update CreateScript API documentation. * api-change:`lakeformation`: Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re- verification without requiring manual intervention from support teams. * api-change:`sagemaker`: Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: Added support for opting out of Amazon S3 Express session authentication via the new `disable_s3_express_session_auth` S3 client configuration setting, or the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. * from version 1.42.78 * api-change:`bedrock-agentcore`: Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. * from version 1.42.77 * api-change:`bcm-data-exports`: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * from version 1.42.76 * api-change:`apigatewayv2`: Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`marketplace-agreement`: The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. * from version 1.42.75 * api-change:`bedrock-agentcore-control`: Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: Adds support for updating the vector options field for existing collections. * api-change:`pcs`: This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. * from version 1.42.74 * api-change:`batch`: AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: Add support for tagging of ContactMethod resource type * api-change:`omics`: Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. * from version 1.42.73 * api-change:`backup`: Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`opensearch`: Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. * bugfix:s3: Fix aws-chunked requests with non-seekable streams sending both `Content-Length` and `Transfer-Encoding: chunked`, which violated HTTP/1.1 (RFC 7230) and caused `SignatureDoesNotMatch` errors. * from version 1.42.72 * api-change:`batch`: AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. * from version 1.42.71 * api-change:`ec2`: The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: This update adds additional bitrate options for Dolby AC-4 audio outputs. * Update to 1.42.70 * api-change:`bedrock-agentcore-control`: Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * from version 1.42.69 * api-change:`bedrock`: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. * from version 1.42.68 * api-change:`apigateway`: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: The change adds a new capability named ManageSharedFolders in Custom Permissions * from version 1.42.67 * api-change:`datasync`: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`sso-oidc`: Fixed missing error messages in SSO OIDC error responses by mapping OAuth2 error_description field to the standard Message field. Issue was raised in `#2216 <https://github.com/boto/botocore/issues/2216>`__. * from version 1.42.66 * api-change:`customer-profiles`: Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`polly`: Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: Added WINDOWS SERVER 2025 OperatingSystemName. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kafka`: Add dual stack endpoint to SDK * api-change:`lexv2-models`: This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. * from version 1.42.64 * api-change:`iam`: Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. * from version 1.42.63 * api-change:`appintegrations`: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. * from version 1.42.62 * api-change:`connecthealth`: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * enhancement:S3 redirect: Validate new region name when redirecting. * Update to 1.42.61 * api-change:`connect`: Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: Adding support for DeploymentStrategyOptions * api-change:`quicksight`: Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * enhancement:auth: Exclude additional hop-by-hop headers from SigV4 signing to prevent signature mismatches when intermediaries mutate transport headers (connection, keep-alive, proxy-authenticate, proxy-authorization, TE, trailer, upgrade). * from version 1.42.60 * api-change:`bedrock-agentcore-control`: Support for AgentCore Policy GA * api-change:`datazone`: Adding QueryGraph operation to DataZone SDK * api-change:`logs`: CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.42.59 * api-change:`arc-region-switch`: Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.42.58 * api-change:`backup-gateway`: This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.42.57 * api-change:`batch`: AWS Batch documentation update for service job capacity units. * api-change:`ec2`: Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: Neptune global clusters now supports tags * api-change:`wafv2`: AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.42.56 * api-change:`cloudwatch`: This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.42.55 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: Add workflow properties support to connections APIs * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`mediatailor`: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.42.54 * api-change:`appstream`: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`sagemaker-runtime`: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * from version 1.42.53 * api-change:`bcm-dashboards`: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * enhancement:`checksums`: Added support for the SHA512 checksum algorithm. When the optional AWS CRT (`awscrt`) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation). * from version 1.42.52 * api-change:`cleanrooms`: This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: Correcting in-app notifications API documentation. * from version 1.42.51 * api-change:`ec2`: Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`evidently`: The evidently client has been removed following the deprecation of the service. * api-change:`grafana`: This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`iotanalytics`: The iotanalytics client has been removed following the deprecation of the service. * api-change:`rds`: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: Adds support for branding customization without requiring a custom wallpaper. * from version 1.42.50 * api-change:`arc-region-switch`: Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: Documentation updates for EC2 Secondary Networks * api-change:`ecr`: Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: Update MessageType enum to include missing types. * from version 1.42.49 * api-change:`cloudwatch`: Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * enhancement:AWSCRT: Update awscrt version to 0.31.2 * from version 1.42.48 * api-change:`ec2`: Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * from version 1.42.47 * api-change:`batch`: Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * from version 1.42.46 * api-change:`bedrock-agentcore`: Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.42.45 * api-change:`connectcampaignsv2`: Add the missing event type for WhatsApp * api-change:`ec2`: Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: Allow cross account v5 in put data lake settings * api-change:`neptunedata`: Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.42.44 * api-change:`bedrock-data-automation-runtime`: Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: Adding g7e instance support in Sagemaker Training * from version 1.42.43 * api-change:`arc-region-switch`: Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: Minor neptune-graph documentation changes * api-change:`ram`: Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: Added support for 12 new graphics-optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * enhancement:HTTP session: Set blocksize from default 16KB to 128KB if urllib3 v2 is installed * from version 1.42.42 * api-change:`bedrock-runtime`: Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: Amazon Connect Cases now supports larger, multi- line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: Update delete cluster description * api-change:`medialive`: AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * enhancement:Validation: Updated list validation to add fast-path for list members that only require basic type checking. * from version 1.42.41 * api-change:`batch`: AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-maps`: Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: Updated the CloseAccount description. * api-change:`sso-admin`: Added new Region management APIs to support multi- Region replication in IAM Identity Center. * from version 1.42.40 * api-change:`bedrock-agentcore-control`: Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.42.39 * api-change:`connect`: This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.42.38 * api-change:`ec2`: G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.42.37 * api-change:`cognito-idp`: This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL- CODECS tag in HLS manifests. * api-change:`s3`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.42.36 * api-change:`connect`: Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * from version 1.42.35 * api-change:`connectcases`: Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: Adds support for AWS Ground Station Telemetry. * from version 1.42.34 * api-change:`connect`: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: Added api for deleting data export configuration for a domain * api-change:`qconnect`: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.42.33 * api-change:`autoscaling`: This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: Adding new enum value for ScanStatusReason * api-change:`health`: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.42.32 * api-change:`bedrock-agentcore`: Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.42.31 * api-change:`autoscaling`: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.42.30 * api-change:`connect`: Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: Adding security consideration comments for lcc accessing execution role under root access * from version 1.42.29 * api-change:`cleanrooms`: This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * enhancement:config: Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variable * from version 1.42.28 * api-change:`ce`: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: no feature changes. model migrated to Smithy * api-change:`redshift`: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update to 1.42.27 * api-change:`bedrock`: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.42.26 * api-change:`billing`: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * from version 1.42.25 * api-change:`bedrock-agentcore-control`: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: Adding MaterializedViews task run APIs * api-change:`medialive`: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: Adds waiters to Amazon Transcribe. * from version 1.42.24 * api-change:`workspaces`: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.42.23 * api-change:`ce`: This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.42.22 * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.42.21 * bugfix:`s3`: Clarify `payload_signing_enabled` documentation to cover interaction with `request_checksum_calculation` * from version 1.42.20 * api-change:`cleanrooms`: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.42.19 * api-change:`connect`: Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kafkaconnect`: This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect- fips as the service name. This is done to match the Kafka endpoints. * from version 1.42.18 * api-change:`connect`: Changes for Contact for Global Search * api-change:`elastictranscoder`: The elastictranscoder client has been removed following the deprecation of the service. * api-change:`quicksight`: This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.42.17 * api-change:`medialive`: AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.42.16 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-places`: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: Add additional validation to Outpost bucket names. * from version 1.42.15 * api-change:`config`: Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.42.14 * api-change:`arc-region-switch`: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: It is a internal bug fix for region expansion * api-change:`wickr`: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: Add support for WebAuthn under user settings. * from version 1.42.13 * api-change:`appstream`: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: Adds support for ECR Create On Push * api-change:`ecs`: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: Added "Stopping" for the HANA Database Status. * from version 1.42.12 * api-change:`gameliftstreams`: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: Add support for dbiResourceId in finding. * api-change:`inspector-scan`: Adds an additional OutputFormat * api-change:`kafkaconnect`: Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.42.11 * api-change:`iot`: Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.42.10 * api-change:`bedrock-agentcore-control`: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`entityresolution`: Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: Add support for SQ Dashboard Api * from version 1.42.9 * api-change:`bcm-recommended-actions`: Added new freetier action types to RecommendedAction.type. * api-change:`connect`: Amazon Connect now offers automated post-chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.42.8 * api-change:`lambda`: Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: Add SortBy parameter to ListSecrets * api-change:`sesv2`: Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.42.7 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: Adds support for Signer GetRevocationStatus with updated endpoints * Update to 1.42.6 * api-change:`account`: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * Update to 1.42.5 * api-change:`ce`: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: Update Mail Manager Archive ARN validation * enhancement:ContainerProvider: The ContainerProvider now works with arbitray HTTPS URLs for `AWS_CONTAINER_CREDENTIALS_FULL_URI`. * from version 1.42.4 * api-change:`ecs`: Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * enhancement:AWSCRT: Update awscrt version to 0.29.2 * from version 1.42.3 * api-change:`lambda`: Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.42.2 * api-change:`bedrock`: Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.42.1 * api-change:`bedrock`: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: GPU-acceleration helps you build large- scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: New S3 Storage Class FSX_ONTAP * api-change:`s3control`: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: Added support for Amazon Database Savings Plans * api-change:`securityhub`: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.41.6 * api-change:`appintegrations`: This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: AWS Clean Rooms now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: This release adds support for EKS Capabilities * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi- product solutions. * api-change:`partnercentral-account`: Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * enhancement:AWSCRT: Update awscrt version to 0.29.1 * from version 1.41.5 * api-change:`bedrock-runtime`: Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.41.4 * api-change:`ec2`: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: Network Firewall release of the Proxy feature. * api-change:`organizations`: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: Adds support for new route53 feature: accelerated recovery. * Update to 1.41.3 * api-change:`cloudfront`: Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * enhancement:awscrt: Update awscrt version to 0.29.0 * from version 1.41.2 * api-change:`apigateway`: API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: Add support for ECR managed signing * api-change:`eks`: Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`invoicing`: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: This release adds support for Tiered Storage * api-change:`kms`: Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: Add support for resources in the aws-eusc partition. * api-change:`marketplace-entitlement`: Endpoint update for new region * api-change:`mediapackagev2`: Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: Endpoint update for new region * api-change:`odb`: Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: Add support for Upgrade Rollout Order * api-change:`redshift`: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: Adds support for creating Webapps accessible from a VPC. * from version 1.41.1 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large- scale distributed applications. * api-change:`autoscaling`: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: Bedrock Data Automation Runtime Sync API * api-change:`braket`: Add support for Braket spending limits. * api-change:`budgets`: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: Add support for environment variables and an IAM execution role. * api-change:`dms`: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. * api-change:`networkmanager`: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: Add support for EBS volume in Recycle Bin * api-change:`rds`: Add support for VPC Encryption Controls. * api-change:`redshift-data`: Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.41.0 * api-change:`apigateway`: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: Support for API Gateway portals and portal products. * api-change:`backup`: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: This release includes support for Search Results. * api-change:`billing`: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: Release ListEfficiencyMetrics API * api-change:`datazone`: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: Add support for scanning and viewing scan results for backup resource types * api-change:`health`: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: Initial GA launch of Partner Central Channel * api-change:`route53`: Add dual-stack endpoint support for Route53 * api-change:`rum`: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.40.76 * api-change:`autoscaling`: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. * api-change:`iam`: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.40.75 * api-change:`appstream`: Adding support for additional instances and extended storage * api-change:`backup`: AWS Backup now supports specifying a logically air- gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.40.74 * api-change:`datazone`: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * enhancement:AWSCRT: Update awscrt version to 0.28.4 * from version 1.40.73 * api-change:`cloudformation`: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iotwireless`: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: Updated endpoint and service metadata * api-change:`sagemaker`: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.40.72 * api-change:`amp`: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.40.71 * api-change:`batch`: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`medical-imaging`: Added new fields in existing APIs. * api-change:`rtbfabric`: Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.40.70 * api-change:`acm-pca`: Private Certificate Authority service now supports ML- DSA key algorithms. * api-change:`appstream`: AWS Appstream support for IPv6 * api-change:`backup`: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.40.69 * api-change:`controltower`: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.40.68 * api-change:`accessanalyzer`: New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: Add Amazon EC2 R8a instance types * api-change:`gamelift`: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: Support for New Data Prep Experience * api-change:`s3tables`: Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: Provides NoLongerSupportedException error message * from version 1.40.67 * api-change:`cloudfront`: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: Added support for Project Resource Tags * api-change:`ec2`: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.40.66 * api-change:`pinpoint-sms-voice-v2`: This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.40.65 * api-change:`bedrock-agentcore-control`: Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: Fix the AWS Budgets endpoint for the aws-eusc partition. * api-change:`ec2`: Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kinesis`: Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.40.64 * api-change:`connectcases`: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fms`: Update endpoint ruleset parameters casing * api-change:`fsx`: Update endpoint ruleset parameters casing * api-change:`health`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: Update endpoint ruleset parameters casing * api-change:`mediaconvert`: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: Update endpoint ruleset parameters casing * api-change:`textract`: Update endpoint ruleset parameters casing * api-change:`waf`: Update endpoint ruleset parameters casing * from version 1.40.63 * api-change:`amp`: Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: Update endpoint ruleset parameters casing * api-change:`appconfig`: Update endpoint ruleset parameters casing * api-change:`appflow`: Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: Update endpoint ruleset parameters casing * api-change:`appmesh`: Update endpoint ruleset parameters casing * api-change:`appsync`: Update endpoint ruleset parameters casing * api-change:`artifact`: Update endpoint ruleset parameters casing * api-change:`auditmanager`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: Update endpoint ruleset parameters casing * api-change:`cleanrooms`: Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: Update endpoint ruleset parameters casing * api-change:`clouddirectory`: Update endpoint ruleset parameters casing * api-change:`cloudsearch`: Update endpoint ruleset parameters casing * api-change:`cloudwatch`: Update endpoint ruleset parameters casing * api-change:`codecatalyst`: Update endpoint ruleset parameters casing * api-change:`codecommit`: Update endpoint ruleset parameters casing * api-change:`codedeploy`: Update endpoint ruleset parameters casing * api-change:`cognito-sync`: Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: Update endpoint ruleset parameters casing * api-change:`connectcases`: Update endpoint ruleset parameters casing * api-change:`deadline`: Update endpoint ruleset parameters casing * api-change:`devops-guru`: Update endpoint ruleset parameters casing * api-change:`docdb`: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: Update endpoint ruleset parameters casing * api-change:`elasticache`: Update endpoint ruleset parameters casing * api-change:`emr-serverless`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`firehose`: Update endpoint ruleset parameters casing * api-change:`frauddetector`: Update endpoint ruleset parameters casing * api-change:`geo-places`: Update endpoint ruleset parameters casing * api-change:`glue`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: Update endpoint ruleset parameters casing * api-change:`iotevents-data`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: Update endpoint ruleset parameters casing * api-change:`kms`: Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: Update endpoint ruleset parameters casing * api-change:`neptune`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: RTB Fabric documentation update. * api-change:`s3outposts`: Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: Update endpoint ruleset parameters casing * api-change:`schemas`: Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: Update endpoint ruleset parameters casing * api-change:`servicecatalog`: Update endpoint ruleset parameters casing * api-change:`sso`: Update endpoint ruleset parameters casing * api-change:`sts`: Update endpoint ruleset parameters casing * from version 1.40.62 * api-change:`bedrock-runtime`: Add support for system tool and web citation response. * from version 1.40.61 * api-change:`apigatewayv2`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: Update endpoint ruleset parameters casing * api-change:clients: The following clients have been removed per deprecation of the services - qldb, qldb-session, robomaker, lookoutmetrics, lookoutvision, iotfleethub, apptest * api-change:`cloud9`: Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: Update endpoint ruleset parameters casing * api-change:`codeconnections`: Update endpoint ruleset parameters casing * api-change:`codeguru-security`: Update endpoint ruleset parameters casing * api-change:`detective`: Update endpoint ruleset parameters casing * api-change:`ec2`: This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: Update endpoint ruleset parameters casing * api-change:`emr-containers`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gameliftstreams`: Add stream group expiration date and expired status * api-change:`glacier`: Update endpoint ruleset parameters casing * api-change:`groundstation`: Enable use of AzEl ephemerides * api-change:`inspector-scan`: Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: Update endpoint ruleset parameters casing * api-change:`kendra`: Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: Update endpoint ruleset parameters casing * api-change:`lambda`: Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: Update endpoint ruleset parameters casing * api-change:`notifications`: Update endpoint ruleset parameters casing * api-change:`opensearch`: Update endpoint ruleset parameters casing * api-change:`organizations`: Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: Update endpoint ruleset parameters casing * api-change:`pipes`: Update endpoint ruleset parameters casing * api-change:`ram`: Update endpoint ruleset parameters casing * api-change:`resource-groups`: Update endpoint ruleset parameters casing * api-change:`s3`: Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: Update endpoint ruleset parameters casing * api-change:`security-ir`: Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: Update endpoint ruleset parameters casing * api-change:`sqs`: Update endpoint ruleset parameters casing * api-change:`support-app`: Update endpoint ruleset parameters casing * api-change:`taxsettings`: Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: Update endpoint ruleset parameters casing * api-change:`xray`: Update endpoint ruleset parameters casing * from version 1.40.60 * api-change:`accessanalyzer`: Update endpoint ruleset parameters casing * api-change:`aiops`: Update endpoint ruleset parameters casing * api-change:`athena`: Update endpoint ruleset parameters casing * api-change:`backup-gateway`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: Update endpoint ruleset parameters casing * api-change:`braket`: Update endpoint ruleset parameters casing * api-change:`ce`: Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: Update endpoint ruleset parameters casing * api-change:`codeartifact`: Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: Update endpoint ruleset parameters casing * api-change:`cognito-idp`: Update endpoint ruleset parameters casing * api-change:`comprehend`: Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: Update endpoint ruleset parameters casing * api-change:`controltower`: Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: Update endpoint ruleset parameters casing * api-change:`dax`: Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`entityresolution`: Update endpoint ruleset parameters casing * api-change:`forecast`: Update endpoint ruleset parameters casing * api-change:`greengrass`: Update endpoint ruleset parameters casing * api-change:`iam`: Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: Update endpoint ruleset parameters casing * api-change:`lex-runtime`: Update endpoint ruleset parameters casing * api-change:`managedblockchain`: Update endpoint ruleset parameters casing * api-change:`mturk`: Update endpoint ruleset parameters casing * api-change:`neptune-graph`: Update endpoint ruleset parameters casing * api-change:`outposts`: Update endpoint ruleset parameters casing * api-change:`pinpoint`: Update endpoint ruleset parameters casing * api-change:`rbin`: Update endpoint ruleset parameters casing * api-change:`rds-data`: Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: Update endpoint ruleset parameters casing * api-change:`rekognition`: Update endpoint ruleset parameters casing * api-change:`repostspace`: Update endpoint ruleset parameters casing * api-change:`route53profiles`: Update endpoint ruleset parameters casing * api-change:`route53resolver`: Update endpoint ruleset parameters casing * api-change:`s3vectors`: Update endpoint ruleset parameters casing * api-change:`scheduler`: Update endpoint ruleset parameters casing * api-change:`secretsmanager`: Update endpoint ruleset parameters casing * api-change:`ses`: Update endpoint ruleset parameters casing * api-change:`shield`: Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: Update endpoint ruleset parameters casing * api-change:`socialmessaging`: Update endpoint ruleset parameters casing * api-change:`ssm-sap`: Update endpoint ruleset parameters casing * api-change:`sso-admin`: Update endpoint ruleset parameters casing * api-change:`stepfunctions`: Update endpoint ruleset parameters casing * api-change:`waf-regional`: Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: Update endpoint ruleset parameters casing * from version 1.40.59 * api-change:`acm`: Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Update endpoint ruleset parameters casing * api-change:`billing`: Update endpoint ruleset parameters casing * api-change:`budgets`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: Update endpoint ruleset parameters casing * api-change:`cloudtrail`: Update endpoint ruleset parameters casing * api-change:`codepipeline`: Update endpoint ruleset parameters casing * api-change:`datapipeline`: Update endpoint ruleset parameters casing * api-change:`datazone`: This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: Update endpoint ruleset parameters casing * api-change:`eks`: Update endpoint ruleset parameters casing * api-change:`elb`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`evs`: Update endpoint ruleset parameters casing * api-change:`fis`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Update endpoint ruleset parameters casing * api-change:`iotwireless`: Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: Update endpoint ruleset parameters casing * api-change:`location`: Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: Update endpoint ruleset parameters casing * api-change:`mediapackage`: Update endpoint ruleset parameters casing * api-change:`mediastore`: Update endpoint ruleset parameters casing * api-change:`mediastore-data`: Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: Update endpoint ruleset parameters casing * api-change:`mq`: Update endpoint ruleset parameters casing * api-change:`panorama`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: Update endpoint ruleset parameters casing * api-change:`qbusiness`: Update endpoint ruleset parameters casing * api-change:`robomaker`: Update endpoint ruleset parameters casing * api-change:`route53domains`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Add support for custom rate limits. * api-change:`s3tables`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Added inference components model data caching feature * api-change:`sagemaker-metrics`: Update endpoint ruleset parameters casing * api-change:`securityhub`: Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: Update endpoint ruleset parameters casing * api-change:`snow-device-management`: Update endpoint ruleset parameters casing * api-change:`sso-oidc`: Update endpoint ruleset parameters casing * api-change:`supplychain`: Update endpoint ruleset parameters casing * api-change:`translate`: Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: Update endpoint ruleset parameters casing * api-change:`wisdom`: Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: Update endpoint ruleset parameters casing * from version 1.40.58 * api-change:`account`: Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: Fixing the service documentation name * api-change:`bedrock-agentcore-control`: Fixing the service documentation name * api-change:`chime-sdk-voice`: Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: Update endpoint ruleset parameters casing * api-change:`codebuild`: Update endpoint ruleset parameters casing * api-change:`codestar-connections`: Update endpoint ruleset parameters casing * api-change:`config`: Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: Update endpoint ruleset parameters casing * api-change:`cur`: Update endpoint ruleset parameters casing * api-change:`discovery`: Update endpoint ruleset parameters casing * api-change:`dms`: Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: Update endpoint ruleset parameters casing * api-change:`drs`: Update endpoint ruleset parameters casing * api-change:`dsql`: Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: Update endpoint ruleset parameters casing * api-change:`ecr`: Update endpoint ruleset parameters casing * api-change:`ecr-public`: Update endpoint ruleset parameters casing * api-change:`healthlake`: Update endpoint ruleset parameters casing * api-change:`internetmonitor`: Update endpoint ruleset parameters casing * api-change:`iotevents`: Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: Update endpoint ruleset parameters casing * api-change:`mediatailor`: Update endpoint ruleset parameters casing * api-change:`mgh`: Update endpoint ruleset parameters casing * api-change:`mgn`: Update endpoint ruleset parameters casing * api-change:`mpa`: Update endpoint ruleset parameters casing * api-change:`neptunedata`: Update endpoint ruleset parameters casing * api-change:`networkmonitor`: Update endpoint ruleset parameters casing * api-change:`odb`: Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: Update endpoint ruleset parameters casing * api-change:`personalize-events`: Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: Update endpoint ruleset parameters casing * api-change:`resiliencehub`: Update endpoint ruleset parameters casing * api-change:`rum`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: Update endpoint ruleset parameters casing * api-change:`savingsplans`: Update endpoint ruleset parameters casing * api-change:`securitylake`: Update endpoint ruleset parameters casing * api-change:`sesv2`: Update endpoint ruleset parameters casing * api-change:`storagegateway`: Update endpoint ruleset parameters casing * api-change:`synthetics`: Update endpoint ruleset parameters casing * from version 1.40.57 * api-change:`appfabric`: Update endpoint ruleset parameters casing * api-change:`autoscaling`: Update endpoint ruleset parameters casing * api-change:`b2bi`: Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: Update endpoint ruleset parameters casing * api-change:`ce`: Update endpoint ruleset parameters casing * api-change:`chatbot`: Update endpoint ruleset parameters casing * api-change:`cloudformation`: Update endpoint ruleset parameters casing * api-change:`cloudhsm`: Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: Update endpoint ruleset parameters casing * api-change:`cognito-identity`: Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: Update endpoint ruleset parameters casing * api-change:`connect`: This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: Update endpoint ruleset parameters casing * api-change:`devicefarm`: This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: Update endpoint ruleset parameters casing * api-change:`ds-data`: Update endpoint ruleset parameters casing * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`forecastquery`: Update endpoint ruleset parameters casing * api-change:`iam`: Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: Update endpoint ruleset parameters casing * api-change:`iot`: Update endpoint ruleset parameters casing * api-change:`iotanalytics`: Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: Update endpoint ruleset parameters casing * api-change:`iotsitewise`: Update endpoint ruleset parameters casing * api-change:`ivschat`: Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: Update endpoint ruleset parameters casing * api-change:`lexv2-models`: Update endpoint ruleset parameters casing * api-change:`mailmanager`: Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: Update endpoint ruleset parameters casing * api-change:`medialive`: Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: Update endpoint ruleset parameters casing * api-change:`oam`: Update endpoint ruleset parameters casing * api-change:`pcs`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: Update endpoint ruleset parameters casing * api-change:`redshift-data`: Update endpoint ruleset parameters casing * api-change:`route53`: Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: Update endpoint ruleset parameters casing * api-change:`sns`: Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: Update endpoint ruleset parameters casing * api-change:`workdocs`: Update endpoint ruleset parameters casing * api-change:`workmail`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Update endpoint ruleset parameters casing * from version 1.40.56 * api-change:`dynamodb`: Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`mediaconvert`: This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * from version 1.40.55 * api-change:`amp`: Update endpoint ruleset parameters casing * api-change:`amplifybackend`: Update endpoint ruleset parameters casing * api-change:`appconfigdata`: Update endpoint ruleset parameters casing * api-change:`appintegrations`: Update endpoint ruleset parameters casing * api-change:`application-insights`: Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: Update endpoint ruleset parameters casing * api-change:`cloudfront`: Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: Update endpoint ruleset parameters casing * api-change:`controlcatalog`: Update endpoint ruleset parameters casing * api-change:`datasync`: Update endpoint ruleset parameters casing * api-change:`ds`: Update endpoint ruleset parameters casing * api-change:`dsql`: Update endpoint ruleset parameters casing * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Update endpoint ruleset parameters casing * api-change:`events`: Update endpoint ruleset parameters casing * api-change:`evidently`: Update endpoint ruleset parameters casing * api-change:`finspace`: Update endpoint ruleset parameters casing * api-change:`finspace-data`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: Update endpoint ruleset parameters casing * api-change:`iot-data`: Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: Update endpoint ruleset parameters casing * api-change:`lakeformation`: Update endpoint ruleset parameters casing * api-change:`license-manager`: Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: Update endpoint ruleset parameters casing * api-change:`network-firewall`: Update endpoint ruleset parameters casing * api-change:`networkmanager`: Update endpoint ruleset parameters casing * api-change:`organizations`: Update endpoint ruleset parameters casing * api-change:`pi`: Update endpoint ruleset parameters casing * api-change:`qapps`: Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: Update endpoint ruleset parameters casing * api-change:`signer`: Update endpoint ruleset parameters casing * api-change:`swf`: Releasing minor endpoint updates. * api-change:`timestream-write`: Update endpoint ruleset parameters casing * api-change:`tnb`: Update endpoint ruleset parameters casing * api-change:`wellarchitected`: Update endpoint ruleset parameters casing * from version 1.40.54 * api-change:`acm-pca`: Update endpoint ruleset parameters casing * api-change:`amplify`: Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: Update endpoint ruleset parameters casing * api-change:`apprunner`: Update endpoint ruleset parameters casing * api-change:`apptest`: Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: Update endpoint ruleset parameters casing * api-change:`billingconductor`: New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: Update endpoint ruleset parameters casing * api-change:`databrew`: Update endpoint ruleset parameters casing * api-change:`dataexchange`: Update endpoint ruleset parameters casing * api-change:`dlm`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`freetier`: Update endpoint ruleset parameters casing * api-change:`gamelift`: Update endpoint ruleset parameters casing * api-change:`geo-routes`: Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: Update endpoint ruleset parameters casing * api-change:`grafana`: Update endpoint ruleset parameters casing * api-change:`identitystore`: Update endpoint ruleset parameters casing * api-change:`ivs`: Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: Update endpoint ruleset parameters casing * api-change:`kafka`: Update endpoint ruleset parameters casing * api-change:`keyspaces`: Update endpoint ruleset parameters casing * api-change:`kms`: Update endpoint ruleset parameters casing * api-change:`lex-models`: Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: Update endpoint ruleset parameters casing * api-change:`m2`: Update endpoint ruleset parameters casing * api-change:`machinelearning`: Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: Update endpoint ruleset parameters casing * api-change:`medical-imaging`: Update endpoint ruleset parameters casing * api-change:`memorydb`: Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: Update endpoint ruleset parameters casing * api-change:`osis`: Update endpoint ruleset parameters casing * api-change:`personalize`: Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: Update endpoint ruleset parameters casing * api-change:`polly`: Update endpoint ruleset parameters casing * api-change:`pricing`: Update endpoint ruleset parameters casing * api-change:`qldb`: Update endpoint ruleset parameters casing * api-change:`qldb-session`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: Update endpoint ruleset parameters casing * api-change:`ssm`: Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: Update endpoint ruleset parameters casing * api-change:`timestream-query`: Update endpoint ruleset parameters casing * api-change:`voice-id`: Update endpoint ruleset parameters casing * api-change:`workspaces-web`: Update endpoint ruleset parameters casing * from version 1.40.53 * api-change:`bedrock`: Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.40.52 * api-change:`appstream`: This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: This release adds support for creating instant, point-in- time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: Move UntagResource API body member to query parameter * api-change:`transfer`: SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.40.51 * api-change:`bedrock-agentcore`: Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update to 1.40.50 * api-change:`bedrock-agentcore`: Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update to 1.40.49 * api-change:`quicksight`: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.40.48 * api-change:`bedrock-agentcore-control`: Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: Released support for IPv6 and dual-stack active directories * api-change:`outposts`: This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.40.47 * api-change:`proton`: Deprecating APIs in AWS Proton namespace. * from version 1.40.46 * api-change:`backup`: Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: Add new AWS Resource Explorer APIs * from version 1.40.45 * api-change:`cleanrooms`: Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.40.44 * api-change:`cloudformation`: Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: Adds support to configure canaries with pre- configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.40.43 * api-change:`chime-sdk-meetings`: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.40.42 * api-change:`application-signals`: Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: AWS Directory service now supports IPv6-native and dual- stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: added warnings to a few CLI pages * api-change:`rds`: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: Add support for updating server identity provider type * from version 1.40.41 * api-change:`bedrock`: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.40.40 * api-change:`bedrock-agent-runtime`: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: Support for payer account dimension and billing view health status. * api-change:`connect`: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`redshift`: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.40.39 * api-change:`glue`: Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.40.38 * api-change:`appstream`: G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kms`: Documentation only updates for KMS. * api-change:`neptune`: Doc-only update to address customer use. * from version 1.40.37 * api-change:`cleanrooms`: Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: This release includes exception definition and documentation updates. * from version 1.40.36 * api-change:`batch`: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.40.35 * api-change:`bedrock-agentcore-control`: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: Added support for cross- account Active Directories. * api-change:`medialive`: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sms-voice`: Updated the `sms-voice` client to the latest version. Note: this client is maintained only for backwards compatibility and should not be used for new development. We recommend using the `pinpoint-sms-voice` client for full support and ongoing updates. * api-change:`sqs`: Update invalid character handling documentation for SQS SendMessage API * from version 1.40.34 * api-change:`bedrock`: Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.40.33 * api-change:`ec2`: Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: Add support for Amazon EC2 Capacity Blocks for ML * Update to 1.40.32 * api-change:`budgets`: [`botocore`] Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: [`botocore`] IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: [`botocore`] Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: [`botocore`] Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.40.31 * api-change:`ce`: Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * api-change:`sms`: The sms client has been removed following the deprecation of the service. * from version 1.40.30 * api-change:`payment-cryptography`: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.40.29 * api-change:`amp`: Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: adding IAM principal id to IAM user profile details * api-change:`ecs`: This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS- related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.40.28 * api-change:`networkflowmonitor`: Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.40.27 * api-change:`autoscaling`: Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: SDK release for user defined predefined attributes. * api-change:`datazone`: Adds support for custom blueprints * api-change:`mediapackagev2`: Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.40.26 * api-change:`iotsitewise`: Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * Update to 1.40.25 * api-change:`ecs`: This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.40.24 * api-change:`cleanrooms`: Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.40.23 * api-change:`cleanrooms`: Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.40.22 * api-change:`ec2`: MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.40.21 * api-change:`bedrock-runtime`: Fixed stop sequence limit for converse API. * api-change:`ec2`: Release shows new route types such as filtered and advertisement. * api-change:`xray`: AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.40.20 * api-change:`applicationcostprofiler`: Remove incorrect endpoint tests * api-change:`apprunner`: Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: Remove incorrect endpoint tests * api-change:`cloud9`: Remove incorrect endpoint tests * api-change:`cloudhsmv2`: Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: Remove incorrect endpoint tests * api-change:`codedeploy`: Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: Remove incorrect endpoint tests * api-change:`connect`: AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`ec2`: This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fis`: Remove incorrect endpoint tests * api-change:`fms`: Remove incorrect endpoint tests * api-change:`geo-maps`: Remove incorrect endpoint tests * api-change:`glue`: Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: Remove incorrect endpoint tests * api-change:`mediastore-data`: Remove incorrect endpoint tests * api-change:`mturk`: Remove incorrect endpoint tests * api-change:`omics`: Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: Remove incorrect endpoint tests * api-change:`rds`: Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: Remove incorrect endpoint tests * api-change:`savingsplans`: Remove incorrect endpoint tests * api-change:`scheduler`: Remove incorrect endpoint tests * api-change:`ses`: Remove incorrect endpoint tests * api-change:`ssm-sap`: Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: Remove incorrect endpoint tests * api-change:`timestream-query`: Remove incorrect endpoint tests * api-change:`waf`: Remove incorrect endpoint tests * api-change:`workmailmessageflow`: Remove incorrect endpoint tests * api-change:`xray`: Remove incorrect endpoint tests * from version 1.40.19 * api-change:`amplifybackend`: Remove incorrect endpoint tests * api-change:`application-insights`: Remove incorrect endpoint tests * api-change:`batch`: Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: Remove incorrect endpoint tests * api-change:`codeguruprofiler`: Remove incorrect endpoint tests * api-change:`datapipeline`: Remove incorrect endpoint tests * api-change:`discovery`: Remove incorrect endpoint tests * api-change:`ds`: Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`evidently`: Remove incorrect endpoint tests * api-change:`frauddetector`: Remove incorrect endpoint tests * api-change:`inspector`: Remove incorrect endpoint tests * api-change:`kinesisvideo`: Remove incorrect endpoint tests * api-change:`kinesis-video-media`: Remove incorrect endpoint tests * api-change:`lakeformation`: Remove incorrect endpoint tests * api-change:`lex-models`: Remove incorrect endpoint tests * api-change:`migrationhub-config`: Remove incorrect endpoint tests * api-change:`neptune-graph`: Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`opsworks`: The opsworks client has been removed following the deprecation of the service. * api-change:`opsworkscm`: The opsworkscm client has been removed following the deprecation of the service. * api-change:`personalize`: Remove incorrect endpoint tests * api-change:`pi`: Remove incorrect endpoint tests * api-change:`qldb-session`: Remove incorrect endpoint tests * api-change:`redshift`: Remove incorrect endpoint tests * api-change:`robomaker`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: Remove incorrect endpoint tests * api-change:`snow-device-management`: Remove incorrect endpoint tests * api-change:`timestream-write`: Remove incorrect endpoint tests * api-change:`voice-id`: Remove incorrect endpoint tests * api-change:`workdocs`: Remove incorrect endpoint tests * api-change:`workmail`: Remove incorrect endpoint tests * from version 1.40.18 * api-change:`apprunner`: Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: Remove incorrect endpoint tests * api-change:`codestar-connections`: Remove incorrect endpoint tests * api-change:`comprehendmedical`: Remove incorrect endpoint tests * api-change:`connectparticipant`: Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: Remove incorrect endpoint tests * api-change:`ec2`: Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`finspace`: Remove incorrect endpoint tests * api-change:`geo-routes`: Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: Remove incorrect endpoint tests * api-change:`globalaccelerator`: Remove incorrect endpoint tests * api-change:`greengrass`: Remove incorrect endpoint tests * api-change:`identitystore`: Remove incorrect endpoint tests * api-change:`imagebuilder`: Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: Remove incorrect endpoint tests * api-change:`kafka`: Remove incorrect endpoint tests * api-change:`lookoutvision`: Remove incorrect endpoint tests * api-change:`mgh`: Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: Remove incorrect endpoint tests * api-change:`mq`: Remove incorrect endpoint tests * api-change:`personalize-events`: Remove incorrect endpoint tests * api-change:`pinpoint`: Remove incorrect endpoint tests * api-change:`ram`: Remove incorrect endpoint tests * api-change:`rbin`: Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: Remove incorrect endpoint tests * api-change:`signer`: Remove incorrect endpoint tests * api-change:`waf-regional`: Remove incorrect endpoint tests * from version 1.40.17 * api-change:`appflow`: Remove incorrect endpoint tests * api-change:`b2bi`: Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: Remove incorrect endpoint tests * api-change:`cloudsearch`: Remove incorrect endpoint tests * api-change:`cloudtrail-data`: Remove incorrect endpoint tests * api-change:`codeartifact`: Remove incorrect endpoint tests * api-change:`codeguru-security`: Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: Remove incorrect endpoint tests * api-change:`cur`: Remove incorrect endpoint tests * api-change:`datazone`: Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: Remove incorrect endpoint tests * api-change:`devops-guru`: Remove incorrect endpoint tests * api-change:`ec2`: Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`finspace-data`: Remove incorrect endpoint tests * api-change:`forecast`: Remove incorrect endpoint tests * api-change:`iotfleethub`: Remove incorrect endpoint tests * api-change:`kendra`: Remove incorrect endpoint tests * api-change:`kinesisanalytics`: Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: Remove incorrect endpoint tests * api-change:`lex-runtime`: Remove incorrect endpoint tests * api-change:`lookoutequipment`: Remove incorrect endpoint tests * api-change:`mediaconvert`: This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: Remove incorrect endpoint tests * api-change:`mediastore`: Remove incorrect endpoint tests * api-change:`personalize-runtime`: Remove incorrect endpoint tests * api-change:`qbusiness`: The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: Remove incorrect endpoint tests * api-change:`sagemaker-edge`: Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: Remove incorrect endpoint tests * api-change:`serverlessrepo`: Remove incorrect endpoint tests * api-change:`shield`: Remove incorrect endpoint tests * api-change:`snowball`: Remove incorrect endpoint tests * api-change:`sqs`: Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: Remove incorrect endpoint tests * api-change:`support-app`: Remove incorrect endpoint tests * api-change:`timestream-influxdb`: Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: Remove incorrect endpoint tests * api-change:`wellarchitected`: Remove incorrect endpoint tests * from version 1.40.16 * api-change:`clouddirectory`: Remove incorrect endpoint tests * api-change:`cognito-sync`: Remove incorrect endpoint tests * api-change:`docdb`: Remove incorrect endpoint tests * api-change:`elb`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`healthlake`: Remove incorrect endpoint tests * api-change:`iotanalytics`: Remove incorrect endpoint tests * api-change:`macie2`: Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: Remove incorrect endpoint tests * api-change:`medialive`: AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: Remove incorrect endpoint tests * api-change:`proton`: Remove incorrect endpoint tests * api-change:`qconnect`: Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: Remove incorrect endpoint tests * api-change:`rds`: Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: Remove incorrect endpoint tests * api-change:`sagemaker`: Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: Remove incorrect endpoint tests * api-change:`simspaceweaver`: Remove incorrect endpoint tests * api-change:`synthetics`: Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: test and verified, safe to release * from version 1.40.15 * api-change:`apigatewaymanagementapi`: Remove incorrect endpoint tests * api-change:`appfabric`: Remove incorrect endpoint tests * api-change:`backup-gateway`: Remove incorrect endpoint tests * api-change:`cloudhsm`: Remove incorrect endpoint tests * api-change:`cognito-identity`: Remove incorrect endpoint tests * api-change:`comprehend`: Remove incorrect endpoint tests * api-change:`ebs`: Remove incorrect endpoint tests * api-change:`ecr-public`: Remove incorrect endpoint tests * api-change:`ecs`: This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Remove incorrect endpoint tests * api-change:`forecastquery`: Remove incorrect endpoint tests * api-change:`gameliftstreams`: The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: Remove incorrect endpoint tests * api-change:`guardduty`: Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: Remove incorrect endpoint tests * api-change:`iotevents`: Remove incorrect endpoint tests * api-change:`iotevents-data`: Remove incorrect endpoint tests * api-change:`iotthingsgraph`: Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: Remove incorrect endpoint tests * api-change:`lexv2-runtime`: Remove incorrect endpoint tests * api-change:`lookoutmetrics`: Remove incorrect endpoint tests * api-change:`managedblockchain`: Remove incorrect endpoint tests * api-change:`mediapackage`: Remove incorrect endpoint tests * api-change:`panorama`: Remove incorrect endpoint tests * api-change:`pinpoint-email`: Remove incorrect endpoint tests * api-change:`resource-groups`: Remove incorrect endpoint tests * api-change:`s3outposts`: Remove incorrect endpoint tests * api-change:`ssm-contacts`: Doc-only updates for Incident Manager Contacts August 2025 * from version 1.40.14 * api-change:`bedrock-runtime`: Launch CountTokens API to allow token counting * api-change:`billing`: Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: This release supports policy grant identifier for cloud formation integration * api-change:`detective`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`eks`: EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kinesisanalyticsv2`: Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.40.13 * api-change:`cleanrooms`: Support error message configuration for analysis templates * api-change:`ec2`: Add support for "warning" volume status. * api-change:`polly`: Added support for new output format - Opus. * from version 1.40.12 * api-change:`batch`: Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`s3control`: Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * enhancement:AWSCRT: Update awscrt version to 0.27.6 * from version 1.40.11 * api-change:`amp`: Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.40.10 * api-change:`arc-region-switch`: Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: Added support for entity lists. * api-change:`medialive`: CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.40.9 * api-change:`braket`: Add support for Braket program sets. * api-change:`datazone`: Adds support for account pools and project profile account decoupling * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: Add Tagging Support for Opportunity resources * api-change:`sagemaker`: This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * from version 1.40.8 * api-change:`backupsearch`: Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.40.7 * api-change:`bedrock`: This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: Updating SearchUserHierarchyGroups API * api-change:`deadline`: Adds support for Wait and Save feature in service- managed fleets * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: Added support for managing user background session for applications * from version 1.40.6 * api-change:`connect`: This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * bugfix:stub: Fixes a bug which causes the stubber to begin failing for DynamoDB when SSO or AssumeRole credentials fail to load * from version 1.40.5 * api-change:`batch`: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: AWS CodeBuild now supports comment-based pull request control. * api-change:`gameliftstreams`: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.40.4 * api-change:`appstream`: Added support for G6 instances * api-change:`budgets`: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.40.3 * api-change:`bedrock`: This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: Add support for deletion protection on EKS clusters * api-change:`rds`: Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.40.2 * api-change:`bedrock-agentcore`: Remove superfluous field from API * api-change:`codeconnections`: New integration with Azure DevOps provider type. * api-change:`evs`: TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.40.1 * api-change:`acm-pca`: Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: This is the initial SDK release for Region switch * api-change:`auditmanager`: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: Release new resource detail type CodeRepository * api-change:`sns`: Amazon SNS support for Amazon SQS fair queues * from version 1.40.0 * api-change:`customer-profiles`: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: Added Impala connector support * api-change:`s3control`: Add Tags field to CreateAccessPoint * api-change:`sesv2`: This release introduces support for Multi-tenant management * api-change:`workspaces-web`: Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.39.17 * api-change:`cloudfront`: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.39.16 * api-change:`batch`: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: Adds support for tag management on monitors. * api-change:`location`: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. * api-change:`opensearchserverless`: This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.39.15 * api-change:`directconnect`: Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * enhancement:`sso`: Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. * from version 1.39.14 * api-change:`appintegrations`: Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross- contact), and run background applications (service). * api-change:`budgets`: Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: Documentation updates for Amazon SQS fair queues feature. * from version 1.39.13 * api-change:`datazone`: This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: Add Git integration and README support for HealthOmics workflows * from version 1.39.12 * api-change:`ec2`: Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: Added the lastUserId parameter to the ListDevices and GetDevice API. * bugfix:`bedrock`: Fixes an issue where bearer authentication was incorrectly applied to all services with the `bedrock` signing name. Bearer auth is now only applied if the service model also includes the `smithy.api#httpBearerAuth` trait. * from version 1.39.11 * api-change:`ecr`: Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: This release updates the supported regions for Neptune API to include current AWS regions. * from version 1.39.10 * api-change:`cloudfront`: Add dualstack endpoint support * api-change:`deadline`: Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * from version 1.39.9 * api-change:`auditmanager`: Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: July 2025 doc-only updates for Systems Manager. * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * from version 1.39.8 * api-change:`cleanroomsml`: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: Align input with style guidelines. * api-change:`synthetics`: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.39.7 * api-change:`bedrock`: This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: document update to support on demand custom model. * api-change:`datasync`: AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.39.6 * api-change:`ecs`: This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.39.5 * api-change:`bedrock-agent`: Add support for S3 Vectors as a vector store. * api-change:`datazone`: Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: Introduced custom instructions for topics. * api-change:`repostspace`: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.39.4 * api-change:`ec2`: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: Removing content that refers to an S3 bucket that is no longer in use. * from version 1.39.3 * api-change:`customer-profiles`: This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.39.2 * api-change:`connectcases`: This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * Update to 1.39.1 * api-change:`cleanroomsml`: This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: Add support for the new optional domain-unit-id parameter in the UpdateProject API. * api-change:`ec2`: Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: Updated field validation requirements for InstanceGroups. * from version 1.39.0 * api-change:`arc-zonal-shift`: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: Added support for UNKNOWN drift status. * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.38.46 * api-change:`config`: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: Adding UnauthorizedException to public SDK * api-change:`rds`: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: Added support for new SES regions * from version 1.38.45 * api-change:`deadline`: Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.38.44 * api-change:`ecs`: Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: Remove Tags field from Get API responses * from version 1.38.43 * api-change:`aiops`: Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real- time network latency for multiplayer games. * api-change:`license-manager`: AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: This Feature Adds Support for the "et-EE" Locale for Batch Operations * from version 1.38.42 * api-change:`glue`: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: Added support for Amazon WorkSpaces Instances API * from version 1.38.41 * api-change:`bedrock`: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: Add ECS support for Windows Server 2025 * api-change:`geo-places`: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.38.40 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON-formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.38.39 * api-change:`aiops`: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: Added paginators for `imagebuilder`. * api-change:`logs`: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.38.38 * api-change:`accessanalyzer`: We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: Adds support for Exportable Public Certificates * api-change:`backup`: AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: Release of Active Threat Defense in Network Firewall * api-change:`organizations`: Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.38.37 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.38.36 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: Fixed regex patterns for ARN fields. * from version 1.38.35 * api-change:`controlcatalog`: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: WAF now provides two DDoS protection options: resource- level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * bugfix:Serialization: Fixes a bug where instances of decimal.Decimal were unable to be passed into JSON serialization * from version 1.38.34 * api-change:`gameliftstreams`: Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.38.33 * api-change:`appsync`: Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: Support dual-stack endpoints for ce api * api-change:`customer-profiles`: This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: Add ConflictException to UpdateEnvironment API * from version 1.38.32 * api-change:`bedrock-agent-runtime`: This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: S3 Tables now supports getting details about a table via its table ARN. * from version 1.38.31 * api-change:`bcm-pricing-calculator`: Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.38.30 * api-change:`amplify`: Update documentation for cacheConfig in CreateApp API * api-change:`evs`: Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.38.29 * api-change:`apigateway`: Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.38.28 * api-change:`athena`: Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: Add support for generating match IDs in near real-time. * api-change:`pcs`: Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: Support for Java runtime handler pattern. * from version 1.38.27 * api-change:`emr-serverless`: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.38.26 * api-change:`amplify`: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.38.25 * api-change:`cost-optimization-hub`: This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.38.24 * api-change:`ce`: This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update to 1.38.23 * api-change:`ec2`: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.38.22 * api-change:`amp`: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: Features: support for customer managed encryption keys * api-change:`glue`: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.38.21 * api-change:`application-autoscaling`: Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.38.20 * api-change:`datasync`: Remove Discovery APIs from the DataSync service * api-change:`ec2`: This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`privatenetworks`: The privatenetworks client has been removed following the deprecation of the service. * api-change:`rds`: This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.38.19 * api-change:`dsql`: CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: This release adds support for DVB-DASH, EBU- TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.38.18 * api-change:`bedrock-data-automation`: Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: This release introduces CreateSupportCase operation to SDK. * from version 1.38.17 * api-change:`bedrock-agent`: Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: Introduces Data Resync feature to describe-table- statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.38.16 * api-change:`cognito-idp`: Add exceptions to WebAuthn operations. * api-change:`firehose`: This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.38.15 * api-change:`bedrock`: Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: Changes for enhanced metadata in trace * api-change:`controltower`: AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi-Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.38.14 * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: Add support to the AV1 rate control mode * api-change:`mediatailor`: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.38.13 * api-change:`athena`: Minor API documentation updates * api-change:`logs`: We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.38.12 * api-change:`cloudfront`: Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: Updated description of a data structure. * api-change:`sso-admin`: Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.38.11 * api-change:`ec2`: This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.38.10 * api-change:`ec2`: This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: Add dualstack endpoints support. * from version 1.38.9 * api-change:`datazone`: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.38.8 * api-change:`bedrock-data-automation`: Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: Doc only update - fixed typos. * api-change:`kinesis`: Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.38.7 * api-change:`appconfig`: Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.38.6 * api-change:`bedrock`: You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.38.5 * api-change:`connectcases`: Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * from version 1.38.4 * api-change:`acm`: Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: Doc only update for GSI descriptions. * api-change:`imagebuilder`: Add integration with SSM Parameter Store to Image Builder. * from version 1.38.3 * api-change:`bedrock-runtime`: You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.38.2 * api-change:`apprunner`: AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: Add data source support to Event APIs * api-change:`bedrock-data-automation`: Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: Remove redundant validation check. * api-change:`dynamodb`: Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: Documentation only release for Amazon ECS * api-change:`pcs`: Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update to 1.38.1 * api-change:`codebuild`: Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`imagebuilder`: Add all `imagebuilder` modeled paginators that are currently supported by botocore. * api-change:`resource-explorer-2`: Documentation-only update for CreateView option correction * from version 1.38.0 * api-change:`account`: AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: This release adds refresh token rotation. * api-change:`ec2`: Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: Fix endpoint resolution test cases * feature:Python: End of support for Python 3.8 * from version 1.37.38 * api-change:`arc-zonal-shift`: Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.37.37 * api-change:`qconnect`: This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.37.36 * api-change:`accessanalyzer`: Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: Add versioning for HealthOmics workflows * from version 1.37.35 * api-change:`connectcases`: This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer-managed keys. * api-change:`servicecatalog`: Updated default value for the access-level- filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * from version 1.37.34 * api-change:`entityresolution`: This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: Indonesia SOR Tax Registration Launch * from version 1.37.33 * api-change:`connect-contact-lens`: Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: Add support for Detective DualStack endpoints * api-change:`dynamodb`: Doc only update for API descriptions. * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * from version 1.37.32 * api-change:`application-autoscaling`: Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: Add support to analysis and sheet level highlighting in QuickSight. * from version 1.37.31 * api-change:`controlcatalog`: The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: Documentation update for secondary indexes and Create_Table. * api-change:`glue`: The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: Support tagging Agents and adjust input field validations * api-change:`transfer`: This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.37.30 * api-change:`bedrock-runtime`: This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: Documentation updates for AWS Security Hub. * api-change:`storagegateway`: Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: Uzbekistan Launch on TaxSettings Page * Update to 1.37.29 * api-change:`bedrock`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: Add input validations for multiple Glue APIs * api-change:`medialive`: AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.37.28 * api-change:`ds-data`: Doc only update - fixed broken links. * api-change:`ec2`: Doc-only updates for Amazon EC2 * api-change:`events`: Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: Updated max size of Prefixes parameter of Scope data type. * from version 1.37.27 * api-change:`bedrock-agent`: Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: Improve descriptions for various API commands and data types. * api-change:`route53`: Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: This Feature Adds Support for the "zh-HK" Locale for Batch Operations * enhancement:Eventstream: The event streams maximum payload size is now required to be 24Mb or less. * from version 1.37.26 * api-change:`application-signals`: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.37.25 * api-change:`cleanrooms`: This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.37.24 * api-change:`bedrock-runtime`: Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: Add dual-stack support to global endpoints. * api-change:`transfer`: Add WebAppEndpointPolicy support for WebApps * from version 1.37.23 * api-change:`apigateway`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.37.22 * api-change:`batch`: This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: bedrock flow now support node action trace. * api-change:`cloudformation`: Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.37.21 * api-change:`arc-zonal-shift`: Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.37.20 * api-change:`bedrock-agent`: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: Minor updates to improve developer experience. * api-change:`keyspaces`: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: Deprecate tags field in Get API responses * from version 1.37.19 * api-change:`iotwireless`: Mark EutranCid under LteNmr optional. * api-change:`pcs`: ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: Provides the correct value for supported model ID. * api-change:`ssm`: This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.37.18 * api-change:`bedrock`: A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt- in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.37.17 * api-change:`amplify`: Added appId field to Webhook responses * api-change:`bedrock`: With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.37.16 * api-change:`bedrock`: Support custom prompt routers for evaluation jobs * api-change:`ec2`: Doc-only updates for EC2 for March 2025. * api-change:`lambda`: Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.37.15 * api-change:`appsync`: Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.37.14 * api-change:`application-signals`: This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.37.13 * api-change:`cognito-identity`: Updated API model build artifacts for identity pools * api-change:`cognito-idp`: Minor description updates to API parameters * api-change:`glue`: This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.37.12 * api-change:`acm-pca`: Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: This release adds support to update projects and environments * api-change:`dynamodb`: Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * Update to 1.37.11 * api-change:`ec2`: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: Adding componentArn to network reachability details * api-change:`medialive`: Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.37.10 * api-change:`bedrock-agent`: Add support for computer use tools * api-change:`bedrock-agent-runtime`: Add support for computer use tools * api-change:`ce`: Releasing minor partition endpoint updates. * api-change:`connect`: Add support for contact transfers in external voice systems. * api-change:`medialive`: Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: This release updates the default value of pprof-disabled from false to true. * from version 1.37.9 * api-change:`bedrock-agent`: Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: Documentation updates for Amazon CloudFront. * api-change:`ec2`: Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: Several small updates to resolve customer requests. * from version 1.37.8 * api-change:`bedrock`: This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: Doc-only update for CloudTrail. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.37.7 * api-change:`bedrock-runtime`: This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.37.6 * api-change:`elasticache`: Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: AWS IoT SiteWise now supports MQTT-enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: Note support for Database Insights for Amazon RDS. * from version 1.37.5 * api-change:`cognito-idp`: Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: Update the DescribeVpcs response * api-change:`qbusiness`: Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: Add DomainId to CreateDomainResponse * api-change:`transcribe`: Updating documentation for post call analytics job queueing. * enhancement:configuration: Add support for disabling host prefix injection via the `AWS_DISABLE_HOST_PREFIX_INJECTION` environment variable or the `disable_host_prefix_injection` parameter in the shared aws configuration file. * from version 1.37.4 * api-change:`bedrock-agent`: This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: Systems Manager doc-only updates for Feb. 2025. * enhancement:useragent: Update user agent string to include client feature use. * from version 1.37.3 * api-change:`bedrock-agent-runtime`: Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: Definition update for EbsConfiguration. * api-change:`qbusiness`: This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.37.2 * api-change:`application-signals`: This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk- mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk- voice. * api-change:`cloudfront`: Documentation update for VPC origin config. * api-change:`ec2`: Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * enhancement:`Protocol`: Adds support for the smithy-rpc-v2-cbor protocol. If a service supports smithy-rpc-v2-cbor, this protocol will automatically be used. For more information, see https://smithy.io/2.0/additional- specs/protocols/smithy-rpc-v2.html * from version 1.37.1 * api-change:`codebuild`: Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.37.0 * api-change:`bedrock-agent`: This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: Documentation update, adding clarity and rephrasing. * api-change:`elastic-inference`: The elastic-inference client has been removed following the deprecation of the service. * feature:Endpoints: Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account-id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.36.26 * api-change:`appstream`: Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.36.25 * api-change:`codebuild`: Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: Add support for toolbar configuration under user settings. * from version 1.36.24 * api-change:`codepipeline`: Add environment variables to codepipeline action declaration. * api-change:`ecs`: This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: Documentation updates for Amazon Lightsail. * api-change:`location`: Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.36.23 * api-change:`batch`: This documentation-only update corrects some typos. * api-change:`emr-containers`: EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.36.22 * api-change:`amplify`: Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: This release introduces APIs to manage DbClusters and adds support for read replicas * enhancement:Parsers: Minor Parser updates to support the new smithy- generated protocol tests. See `boto/botocore#3247 <https://github.com/boto/botocore/pull/3247>`__ for more details. * from version 1.36.21 * api-change:`codebuild`: Added test suite names to test case metadata * api-change:`connect`: Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: Add support for Stop DB feature. * api-change:`s3`: Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: Update Environment and Device name field definitions * from version 1.36.20 * api-change:`accessanalyzer`: This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.36.19 * api-change:`b2bi`: Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: Support for in-place Lustre version upgrades * api-change:`medialive`: Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * enhancement:Protocols: Added support for multiple protocols within a service based on performance priority. * from version 1.36.18 * api-change:`acm-pca`: Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: Add support for operation level caching * api-change:`ec2`: Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.36.17 * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`cloudfront`: Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.36.16 * api-change:`ecr`: Adds support to handle the new basic scanning daily quota. * api-change:`eks`: Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.36.15 * api-change:`cloudformation`: We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * enhancement:Eventsteam: The SDK no longer validates payload size for eventstreams. This is to facilitate varying payload requirements across AWS services. * from version 1.36.14 * api-change:`rds`: Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.36.13 * api-change:`datasync`: Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: IPv6 support for Hyperpod clusters * from version 1.36.12 * api-change:`mediatailor`: Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * Update to 1.36.11 * api-change:`amp`: Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.36.10 * api-change:`appstream`: Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: Add a 'reason' field to InternalServerException * api-change:`ecr`: Temporarily updating dualstack endpoint support * api-change:`ecr-public`: Temporarily updating dualstack endpoint support * api-change:`mediatailor`: Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: Adds Cedar JSON format support for entities and context data in authorization requests * enhancement:AWSCRT: Update awscrt version to 0.23.8 * from version 1.36.9 * api-change:`bcm-pricing-calculator`: Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: Add support for Dualstack and Dualstack-with-FIPS Endpoints * api-change:`ecr-public`: Add support for Dualstack Endpoints * api-change:`mailmanager`: This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.36.8 * api-change:`appsync`: Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.36.7 * api-change:`bedrock-agent`: Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * bugfix:Signing: No longer sign transfer-encoding header for SigV4 * from version 1.36.6 * api-change:`cloudtrail`: This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: Fixed typos in the descriptions. * api-change:`transfer`: Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.36.5 * api-change:`ec2`: Added "future" allocation type for future dated capacity reservation * from version 1.36.4 * api-change:`bedrock-agent-runtime`: Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: Docs Update for timeout changes * api-change:`medialive`: AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.36.3 * api-change:`batch`: Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt- in. * api-change:`logs`: Documentation-only update to address doc errors * api-change:`quicksight`: Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update to 1.36.0 * api-change:`bedrock-runtime`: Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: Doc only update for Detective documentation. * api-change:`ec2`: Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.36.1 * api-change:`ecs`: The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.36.0 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: Now supports streaming for inline agents. * api-change:`cognito-identity`: corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: Mark type in MaintenanceWindow as required. * enhancement:AWSCRT: Update awscrt version to 0.23.4 * feature:`s3`: The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.35.99 * api-change:`gamelift`: Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.35.98 * api-change:`artifact`: Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.35.97 * api-change:`redshift`: Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: Fixed typos in the descriptions. * from version 1.35.96 * api-change:`codebuild`: AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.35.95 * api-change:`rds`: Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.35.94 * api-change:`cloudhsmv2`: Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: This release makes Amazon DynamoDB point-in-time- recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * from version 1.35.93 * api-change:`iotsecuretunneling`: Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: Allow vanity DNS domain when creating a new ASC instance * from version 1.35.92 * api-change:`ecs`: Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.35.91 * api-change:`appsync`: Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in- progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: In-flight message typo fix from 20k to 120k. * from version 1.35.90 * api-change:`ecr`: Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: Restoring custom endpoint functionality for ECR Public * from version 1.35.89 * api-change:`rds`: Updates Amazon RDS documentation to correct various descriptions. * from version 1.35.88 * api-change:`bcm-pricing-calculator`: Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: Add support for Dualstack Endpoints * api-change:`network-firewall`: Dual-stack endpoints are now supported. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.35.87 * api-change:`ecr`: Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: Add support for Dualstack endpoints * api-change:`eks`: This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.35.86 * api-change:`bedrock-agent`: Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: Added new API's for defining and fetching Billing Views. * api-change:`ce`: Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: This release expands the catalog of upgrade insight checks * api-change:`macie2`: This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.35.85 * api-change:`appstream`: Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: MediaLive is releasing ListVersions api * api-change:`qconnect`: Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.35.84 * api-change:`amplify`: Added WAF Configuration to Amplify Apps * api-change:`budgets`: Releasing minor partition endpoint updates * api-change:`connect`: This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.35.83 * api-change:`account`: Update endpoint configuration. * api-change:`backup`: Add Support for Backup Indexing * api-change:`backupsearch`: Add support for searching backups * api-change:`batch`: This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.35.82 * api-change:`cloud9`: Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.35.81 * api-change:`cloudhsmv2`: Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.35.80 * api-change:`connect`: Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: Improved descriptions for certain APIs. * api-change:`route53domains`: This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.35.79 * api-change:`artifact`: Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: Doc-only updates for CloudTrail. * api-change:`cognito-idp`: Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.35.78 * api-change:`application-autoscaling`: Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update to 1.35.77 * api-change:`appsync`: Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: Added text to clarify case-sensitivity * from version 1.35.76 * api-change:`partnercentral-selling`: Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.35.75 * api-change:`bedrock`: Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.35.74 * api-change:`athena`: Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: Support for configuring AiOps investigation as alarm action * api-change:`datazone`: Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.35.73 * api-change:`bedrock-runtime`: Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: Added support for passing role arn corresponding to the supported event destination * from version 1.35.72 * api-change:`bedrock`: Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for Multi- Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: Add new Multi Domain Correlation findings. * api-change:`security-ir`: AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.35.71 * api-change:`bedrock-agent`: Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.35.70 * api-change:`bedrock-agent`: Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: Private sharing, file upload and data collection feature support for Q Apps * from version 1.35.69 * api-change:`directconnect`: Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.35.68 * api-change:`autoscaling`: Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: Add ProvisionedPollerConfig to Lambda event-source- mapping API. * api-change:`mailmanager`: Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.35.67 * api-change:`apigateway`: Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: Add support for the Amazon Bedrock Runtime. * api-change:`ce`: This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: Adds metadata property to an AffectedEntity. * api-change:`iot`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.35.66 * api-change:`autoscaling`: With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: Added data protection settings with support for inline data redaction. * from version 1.35.65 * api-change:`b2bi`: Add new X12 transactions sets and versions * api-change:`ec2`: This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: Add support for the new parameters in EFS replication APIs * api-change:`glue`: AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.35.64 * api-change:`appconfig`: AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adding request and response elements for managed resources. * api-change:`ecs`: This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.35.63 * api-change:`cloudwatch`: Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.35.62 * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.35.61 * api-change:`accessanalyzer`: Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update to 1.35.60 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.35.59 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * from version 1.35.58 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.57 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.56 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.55 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * enhancement:protocol: Added support for header enabling service migration off the AWS Query protocol. * from version 1.35.54 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.53 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.52 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.51 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.50 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.49 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.48 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`nimble`: The nimble client has been removed following the deprecation of the service. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1921 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-botocore-1.43.36-160000.1.1 * python313-boto3-1.43.36-160000.1.1 * python313-s3transfer-0.19.0-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204537 * https://bugzilla.suse.com/show_bug.cgi?id=1209255 * https://bugzilla.suse.com/show_bug.cgi?id=1267424 * https://jira.suse.com/browse/PED-2333 * https://jira.suse.com/browse/PED-3780 * https://jira.suse.com/browse/SLE-15 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:30:31 -0000 Subject: SUSE-SU-2026:24271-1: important: Security update for php8 Message-ID: <179270103121.838.17781162141130697371@8741a845db10> # Security update for php8 Announcement ID: SUSE-SU-2026:24271-1 Release Date: 2026-10-21T17:04:21Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: Update to php 8.4.27: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1955 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1955 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * php8-sysvshm-8.4.27-160000.1.1 * php8-iconv-debuginfo-8.4.27-160000.1.1 * php8-dom-debuginfo-8.4.27-160000.1.1 * php8-xsl-8.4.27-160000.1.1 * php8-ctype-debuginfo-8.4.27-160000.1.1 * php8-dom-8.4.27-160000.1.1 * php8-gettext-debuginfo-8.4.27-160000.1.1 * php8-ldap-debuginfo-8.4.27-160000.1.1 * php8-ftp-8.4.27-160000.1.1 * php8-embed-8.4.27-160000.1.1 * php8-fpm-debuginfo-8.4.27-160000.1.1 * php8-exif-8.4.27-160000.1.1 * php8-ffi-debuginfo-8.4.27-160000.1.1 * php8-tidy-8.4.27-160000.1.1 * php8-sysvmsg-debuginfo-8.4.27-160000.1.1 * php8-gmp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debugsource-8.4.27-160000.1.1 * php8-fastcgi-debugsource-8.4.27-160000.1.1 * php8-sysvmsg-8.4.27-160000.1.1 * php8-ctype-8.4.27-160000.1.1 * php8-enchant-debuginfo-8.4.27-160000.1.1 * php8-mbstring-8.4.27-160000.1.1 * php8-zip-8.4.27-160000.1.1 * php8-embed-debugsource-8.4.27-160000.1.1 * php8-ldap-8.4.27-160000.1.1 * php8-iconv-8.4.27-160000.1.1 * php8-shmop-8.4.27-160000.1.1 * php8-exif-debuginfo-8.4.27-160000.1.1 * php8-fastcgi-debuginfo-8.4.27-160000.1.1 * php8-tidy-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-8.4.27-160000.1.1 * php8-enchant-8.4.27-160000.1.1 * php8-tokenizer-debuginfo-8.4.27-160000.1.1 * php8-bz2-8.4.27-160000.1.1 * php8-fpm-debugsource-8.4.27-160000.1.1 * php8-gettext-8.4.27-160000.1.1 * php8-sqlite-8.4.27-160000.1.1 * php8-fpm-8.4.27-160000.1.1 * php8-fileinfo-8.4.27-160000.1.1 * php8-intl-8.4.27-160000.1.1 * php8-readline-8.4.27-160000.1.1 * php8-calendar-8.4.27-160000.1.1 * php8-sockets-8.4.27-160000.1.1 * php8-ffi-8.4.27-160000.1.1 * php8-sodium-debuginfo-8.4.27-160000.1.1 * php8-xsl-debuginfo-8.4.27-160000.1.1 * php8-curl-8.4.27-160000.1.1 * php8-ftp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debuginfo-8.4.27-160000.1.1 * php8-gd-debuginfo-8.4.27-160000.1.1 * php8-bcmath-8.4.27-160000.1.1 * php8-calendar-debuginfo-8.4.27-160000.1.1 * php8-opcache-8.4.27-160000.1.1 * php8-fastcgi-8.4.27-160000.1.1 * php8-sysvsem-8.4.27-160000.1.1 * php8-snmp-8.4.27-160000.1.1 * php8-soap-debuginfo-8.4.27-160000.1.1 * php8-shmop-debuginfo-8.4.27-160000.1.1 * php8-openssl-debuginfo-8.4.27-160000.1.1 * php8-zlib-8.4.27-160000.1.1 * php8-mysql-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-debuginfo-8.4.27-160000.1.1 * php8-zip-debuginfo-8.4.27-160000.1.1 * php8-posix-8.4.27-160000.1.1 * php8-dba-8.4.27-160000.1.1 * apache2-mod_php8-8.4.27-160000.1.1 * php8-gmp-8.4.27-160000.1.1 * php8-phar-debuginfo-8.4.27-160000.1.1 * php8-devel-8.4.27-160000.1.1 * php8-pdo-8.4.27-160000.1.1 * php8-fileinfo-debuginfo-8.4.27-160000.1.1 * php8-curl-debuginfo-8.4.27-160000.1.1 * php8-zlib-debuginfo-8.4.27-160000.1.1 * php8-snmp-debuginfo-8.4.27-160000.1.1 * php8-sqlite-debuginfo-8.4.27-160000.1.1 * php8-bz2-debuginfo-8.4.27-160000.1.1 * php8-pcntl-8.4.27-160000.1.1 * php8-debuginfo-8.4.27-160000.1.1 * php8-pcntl-debuginfo-8.4.27-160000.1.1 * php8-odbc-debuginfo-8.4.27-160000.1.1 * php8-cli-8.4.27-160000.1.1 * php8-dba-debuginfo-8.4.27-160000.1.1 * php8-readline-debuginfo-8.4.27-160000.1.1 * php8-openssl-8.4.27-160000.1.1 * php8-soap-8.4.27-160000.1.1 * php8-pgsql-8.4.27-160000.1.1 * php8-sysvsem-debuginfo-8.4.27-160000.1.1 * php8-opcache-debuginfo-8.4.27-160000.1.1 * php8-mbstring-debuginfo-8.4.27-160000.1.1 * php8-cli-debuginfo-8.4.27-160000.1.1 * php8-8.4.27-160000.1.1 * php8-pdo-debuginfo-8.4.27-160000.1.1 * php8-tokenizer-8.4.27-160000.1.1 * php8-sockets-debuginfo-8.4.27-160000.1.1 * php8-intl-debuginfo-8.4.27-160000.1.1 * php8-gd-8.4.27-160000.1.1 * php8-sysvshm-debuginfo-8.4.27-160000.1.1 * php8-sodium-8.4.27-160000.1.1 * php8-embed-debuginfo-8.4.27-160000.1.1 * php8-phar-8.4.27-160000.1.1 * php8-odbc-8.4.27-160000.1.1 * php8-xmlwriter-8.4.27-160000.1.1 * php8-mysql-8.4.27-160000.1.1 * php8-bcmath-debuginfo-8.4.27-160000.1.1 * php8-posix-debuginfo-8.4.27-160000.1.1 * php8-xmlwriter-debuginfo-8.4.27-160000.1.1 * php8-debugsource-8.4.27-160000.1.1 * php8-pgsql-debuginfo-8.4.27-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php8-fpm-apache-8.4.27-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * php8-sysvshm-8.4.27-160000.1.1 * php8-iconv-debuginfo-8.4.27-160000.1.1 * php8-dom-debuginfo-8.4.27-160000.1.1 * php8-xsl-8.4.27-160000.1.1 * php8-ctype-debuginfo-8.4.27-160000.1.1 * php8-dom-8.4.27-160000.1.1 * php8-gettext-debuginfo-8.4.27-160000.1.1 * php8-ldap-debuginfo-8.4.27-160000.1.1 * php8-ftp-8.4.27-160000.1.1 * php8-embed-8.4.27-160000.1.1 * php8-fpm-debuginfo-8.4.27-160000.1.1 * php8-exif-8.4.27-160000.1.1 * php8-ffi-debuginfo-8.4.27-160000.1.1 * php8-tidy-8.4.27-160000.1.1 * php8-sysvmsg-debuginfo-8.4.27-160000.1.1 * php8-gmp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debugsource-8.4.27-160000.1.1 * php8-fastcgi-debugsource-8.4.27-160000.1.1 * php8-sysvmsg-8.4.27-160000.1.1 * php8-ctype-8.4.27-160000.1.1 * php8-enchant-debuginfo-8.4.27-160000.1.1 * php8-mbstring-8.4.27-160000.1.1 * php8-zip-8.4.27-160000.1.1 * php8-embed-debugsource-8.4.27-160000.1.1 * php8-ldap-8.4.27-160000.1.1 * php8-iconv-8.4.27-160000.1.1 * php8-shmop-8.4.27-160000.1.1 * php8-exif-debuginfo-8.4.27-160000.1.1 * php8-fastcgi-debuginfo-8.4.27-160000.1.1 * php8-tidy-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-8.4.27-160000.1.1 * php8-enchant-8.4.27-160000.1.1 * php8-tokenizer-debuginfo-8.4.27-160000.1.1 * php8-bz2-8.4.27-160000.1.1 * php8-fpm-debugsource-8.4.27-160000.1.1 * php8-gettext-8.4.27-160000.1.1 * php8-sqlite-8.4.27-160000.1.1 * php8-fpm-8.4.27-160000.1.1 * php8-fileinfo-8.4.27-160000.1.1 * php8-intl-8.4.27-160000.1.1 * php8-readline-8.4.27-160000.1.1 * php8-calendar-8.4.27-160000.1.1 * php8-sockets-8.4.27-160000.1.1 * php8-ffi-8.4.27-160000.1.1 * php8-sodium-debuginfo-8.4.27-160000.1.1 * php8-xsl-debuginfo-8.4.27-160000.1.1 * php8-curl-8.4.27-160000.1.1 * php8-ftp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debuginfo-8.4.27-160000.1.1 * php8-gd-debuginfo-8.4.27-160000.1.1 * php8-bcmath-8.4.27-160000.1.1 * php8-calendar-debuginfo-8.4.27-160000.1.1 * php8-opcache-8.4.27-160000.1.1 * php8-fastcgi-8.4.27-160000.1.1 * php8-sysvsem-8.4.27-160000.1.1 * php8-snmp-8.4.27-160000.1.1 * php8-soap-debuginfo-8.4.27-160000.1.1 * php8-shmop-debuginfo-8.4.27-160000.1.1 * php8-openssl-debuginfo-8.4.27-160000.1.1 * php8-zlib-8.4.27-160000.1.1 * php8-mysql-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-debuginfo-8.4.27-160000.1.1 * php8-zip-debuginfo-8.4.27-160000.1.1 * php8-posix-8.4.27-160000.1.1 * php8-dba-8.4.27-160000.1.1 * apache2-mod_php8-8.4.27-160000.1.1 * php8-gmp-8.4.27-160000.1.1 * php8-phar-debuginfo-8.4.27-160000.1.1 * php8-devel-8.4.27-160000.1.1 * php8-pdo-8.4.27-160000.1.1 * php8-fileinfo-debuginfo-8.4.27-160000.1.1 * php8-curl-debuginfo-8.4.27-160000.1.1 * php8-zlib-debuginfo-8.4.27-160000.1.1 * php8-snmp-debuginfo-8.4.27-160000.1.1 * php8-sqlite-debuginfo-8.4.27-160000.1.1 * php8-bz2-debuginfo-8.4.27-160000.1.1 * php8-pcntl-8.4.27-160000.1.1 * php8-debuginfo-8.4.27-160000.1.1 * php8-pcntl-debuginfo-8.4.27-160000.1.1 * php8-odbc-debuginfo-8.4.27-160000.1.1 * php8-cli-8.4.27-160000.1.1 * php8-dba-debuginfo-8.4.27-160000.1.1 * php8-readline-debuginfo-8.4.27-160000.1.1 * php8-openssl-8.4.27-160000.1.1 * php8-soap-8.4.27-160000.1.1 * php8-pgsql-8.4.27-160000.1.1 * php8-sysvsem-debuginfo-8.4.27-160000.1.1 * php8-opcache-debuginfo-8.4.27-160000.1.1 * php8-mbstring-debuginfo-8.4.27-160000.1.1 * php8-cli-debuginfo-8.4.27-160000.1.1 * php8-8.4.27-160000.1.1 * php8-pdo-debuginfo-8.4.27-160000.1.1 * php8-tokenizer-8.4.27-160000.1.1 * php8-sockets-debuginfo-8.4.27-160000.1.1 * php8-intl-debuginfo-8.4.27-160000.1.1 * php8-gd-8.4.27-160000.1.1 * php8-sysvshm-debuginfo-8.4.27-160000.1.1 * php8-sodium-8.4.27-160000.1.1 * php8-embed-debuginfo-8.4.27-160000.1.1 * php8-phar-8.4.27-160000.1.1 * php8-odbc-8.4.27-160000.1.1 * php8-xmlwriter-8.4.27-160000.1.1 * php8-mysql-8.4.27-160000.1.1 * php8-bcmath-debuginfo-8.4.27-160000.1.1 * php8-posix-debuginfo-8.4.27-160000.1.1 * php8-xmlwriter-debuginfo-8.4.27-160000.1.1 * php8-debugsource-8.4.27-160000.1.1 * php8-pgsql-debuginfo-8.4.27-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php8-fpm-apache-8.4.27-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:40 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:30:40 -0000 Subject: SUSE-RU-2026:24270-1: moderate: Recommended update for libvirt Message-ID: <179270104001.838.2859442667686778578@8741a845db10> # Recommended update for libvirt Announcement ID: SUSE-RU-2026:24270-1 Release Date: 2026-10-21T08:38:59Z Rating: moderate References: * bsc#1279843 * bsc#1284528 * jsc#PED-16192 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature and has two fixes can now be installed. ## Description: This update for libvirt fixes the following issues: Changes in libvirt: * qemu: * Avoid returning error when query job cannot be acquired in virDomainGetXMLDesc() (bsc#1284528) * Additional commits to fix incoming migration to QEMU 10.0.0 and newer (bsc#1279843) * Add ClearwaterForest CPU model (jsc#PED-16192) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1954 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1954 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libvirt-daemon-driver-storage-logical-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-11.4.0-160000.7.1 * libvirt-daemon-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-11.4.0-160000.7.1 * libvirt-client-qemu-11.4.0-160000.7.1 * libvirt-daemon-proxy-11.4.0-160000.7.1 * libvirt-daemon-driver-network-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-qemu-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-11.4.0-160000.7.1 * libvirt-daemon-config-nwfilter-11.4.0-160000.7.1 * libvirt-ssh-proxy-debuginfo-11.4.0-160000.7.1 * libvirt-nss-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-11.4.0-160000.7.1 * libvirt-client-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-11.4.0-160000.7.1 * libvirt-nss-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-config-network-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-debuginfo-11.4.0-160000.7.1 * libvirt-devel-11.4.0-160000.7.1 * libvirt-daemon-common-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-11.4.0-160000.7.1 * libvirt-daemon-log-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-11.4.0-160000.7.1 * libvirt-libs-11.4.0-160000.7.1 * libvirt-daemon-hooks-11.4.0-160000.7.1 * libvirt-daemon-common-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-debuginfo-11.4.0-160000.7.1 * libvirt-debugsource-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-network-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-logical-11.4.0-160000.7.1 * libvirt-daemon-lock-debuginfo-11.4.0-160000.7.1 * libvirt-libs-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-proxy-debuginfo-11.4.0-160000.7.1 * libvirt-client-debuginfo-11.4.0-160000.7.1 * libvirt-ssh-proxy-11.4.0-160000.7.1 * libvirt-daemon-lock-11.4.0-160000.7.1 * libvirt-daemon-log-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-debuginfo-11.4.0-160000.7.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * libvirt-doc-11.4.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-driver-storage-logical-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-11.4.0-160000.7.1 * libvirt-daemon-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-11.4.0-160000.7.1 * libvirt-client-qemu-11.4.0-160000.7.1 * libvirt-daemon-proxy-11.4.0-160000.7.1 * libvirt-daemon-driver-network-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-qemu-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-11.4.0-160000.7.1 * libvirt-daemon-config-nwfilter-11.4.0-160000.7.1 * libvirt-ssh-proxy-debuginfo-11.4.0-160000.7.1 * libvirt-nss-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-11.4.0-160000.7.1 * libvirt-client-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-11.4.0-160000.7.1 * libvirt-nss-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-config-network-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-debuginfo-11.4.0-160000.7.1 * libvirt-devel-11.4.0-160000.7.1 * libvirt-daemon-common-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-11.4.0-160000.7.1 * libvirt-daemon-log-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-11.4.0-160000.7.1 * libvirt-libs-11.4.0-160000.7.1 * libvirt-daemon-hooks-11.4.0-160000.7.1 * libvirt-daemon-common-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-debuginfo-11.4.0-160000.7.1 * libvirt-debugsource-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-network-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-logical-11.4.0-160000.7.1 * libvirt-daemon-lock-debuginfo-11.4.0-160000.7.1 * libvirt-libs-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-proxy-debuginfo-11.4.0-160000.7.1 * libvirt-client-debuginfo-11.4.0-160000.7.1 * libvirt-ssh-proxy-11.4.0-160000.7.1 * libvirt-daemon-lock-11.4.0-160000.7.1 * libvirt-daemon-log-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-debuginfo-11.4.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (noarch) * libvirt-doc-11.4.0-160000.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279843 * https://bugzilla.suse.com/show_bug.cgi?id=1284528 * https://jira.suse.com/browse/PED-16192 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:30:46 -0000 Subject: SUSE-RU-2026:24269-1: moderate: Recommended update for python-hypothesis Message-ID: <179270104689.838.15623520354874757469@8741a845db10> # Recommended update for python-hypothesis Announcement ID: SUSE-RU-2026:24269-1 Release Date: 2026-10-21T08:10:35Z Rating: moderate References: * jsc#PED-15839 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature can now be installed. ## Description: This update for python-hypothesis fixes the following issues: Changes in python-hypothesis: \- Fix the condition with suse_version macro on SLFO (jsc#PED-15839) \- Convert to libalternatives on SLE-16-based and newer systems only ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1952 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1952 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-hypothesis-6.127.8-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-hypothesis-6.127.8-160000.3.1 ## References: * https://jira.suse.com/browse/PED-15839 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:30:53 -0000 Subject: SUSE-SU-2026:24268-1: moderate: Security update for coreutils Message-ID: <179270105312.838.8849443131307883397@8741a845db10> # Security update for coreutils Announcement ID: SUSE-SU-2026:24268-1 Release Date: 2026-10-21T08:10:35Z Rating: moderate References: * bsc#1272698 Cross-References: * CVE-2026-56391 CVSS scores: * CVE-2026-56391 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-56391 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-56391 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issue: * CVE-2026-56391: uniq: denial of service and information disclosure via out- of-bounds read with multibyte input (bsc#1272698). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1951 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1951 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-single-debuginfo-9.6-160000.3.1 * coreutils-9.6-160000.3.1 * coreutils-single-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-single-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * coreutils-doc-9.6-160000.3.1 * coreutils-lang-9.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-single-debuginfo-9.6-160000.3.1 * coreutils-9.6-160000.3.1 * coreutils-single-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-single-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * coreutils-doc-9.6-160000.3.1 * coreutils-lang-9.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56391.html * https://bugzilla.suse.com/show_bug.cgi?id=1272698 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:07 -0000 Subject: SUSE-SU-2026:24267-1: moderate: Security update for python-soupsieve Message-ID: <179270106787.838.17955321841407370029@8741a845db10> # Security update for python-soupsieve Announcement ID: SUSE-SU-2026:24267-1 Release Date: 2026-10-21T07:48:42Z Rating: moderate References: * bsc#1281119 * bsc#1281120 Cross-References: * CVE-2026-85999 * CVE-2026-86000 CVSS scores: * CVE-2026-85999 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85999 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86000 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86000 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-soupsieve fixes the following issues: * CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). * CVE-2026-86000: quadratic complexity when running the `IDENTIFIER` / `VALUE` selector sub-patterns can lead to a DoS (bsc#1281120). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1953 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1953 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-soupsieve-2.6-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-soupsieve-2.6-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85999.html * https://www.suse.com/security/cve/CVE-2026-86000.html * https://bugzilla.suse.com/show_bug.cgi?id=1281119 * https://bugzilla.suse.com/show_bug.cgi?id=1281120 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:17 -0000 Subject: SUSE-SU-2026:24266-1: important: Security update for cyrus-sasl Message-ID: <179270107780.838.4514280420180059786@8741a845db10> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24266-1 Release Date: 2026-10-21T05:47:26Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability, contains one feature and has three fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1950 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1950 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cyrus-sasl-gs2-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-scram-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-scram-2.1.28-160000.4.1 * cyrus-sasl-gs2-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-crammd5-2.1.28-160000.4.1 * cyrus-sasl-otp-2.1.28-160000.4.1 * cyrus-sasl-ntlm-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-devel-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-160000.4.1 * cyrus-sasl-otp-debuginfo-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-2.1.28-160000.4.1 * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-gs2-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-scram-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-scram-2.1.28-160000.4.1 * cyrus-sasl-gs2-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-crammd5-2.1.28-160000.4.1 * cyrus-sasl-otp-2.1.28-160000.4.1 * cyrus-sasl-ntlm-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-devel-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-160000.4.1 * cyrus-sasl-otp-debuginfo-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-2.1.28-160000.4.1 * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:26 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:26 -0000 Subject: SUSE-SU-2026:24265-1: important: Security update for amazon-ecs-init Message-ID: <179270108618.838.9299953931138139826@8741a845db10> # Security update for amazon-ecs-init Announcement ID: SUSE-SU-2026:24265-1 Release Date: 2026-10-20T15:10:57Z Rating: important References: * bsc#1279042 * bsc#1280679 Cross-References: * CVE-2026-84445 * CVE-2026-89090 CVSS scores: * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for amazon-ecs-init fixes the following issues: * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280679). Changes for amazon-ecs-init: * Update to version 1.108.0 * Enhancement - Add ECS-Init install pointer for non-Amazon Linux AMIs to README (#5161) * Enhancement - Remove direct docker run instructions from README (#5160) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.28.1 to 1.33.6 in /ecs-agent, /agent, and /ecs-init (#5159) * Feature - Enable IMDS IAM roles config resolution (#5154) * Enhancement - Bump github.com/containerd/containerd from 1.7.33 to 1.7.36 in /agent (#5155) * Enhancement - Bump github.com/containerd/containerd from 1.7.35 to 1.7.36 in /ecs-init (#5156) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.195.0 to 1.334.0 in /ecs-agent and /agent (#5148) * Enhancement - Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /ecs- agent, /ecs-agent/daemonimages/csidriver and /agent (#5153) (bsc#1279042, CVE-2026-84445) * Enhancement - Bump go.opentelemetry.io/otel/exporters/otlp/ otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /agent (#5141) * Enhancement - IMDS credential scanner/refresher updates (#5145) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1949 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1949 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * amazon-ecs-init-1.108.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * amazon-ecs-init-1.108.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84445.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1279042 * https://bugzilla.suse.com/show_bug.cgi?id=1280679 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:31 -0000 Subject: SUSE-RU-2026:24264-1: moderate: Recommended update for python3 Message-ID: <179270109185.838.10744224531302284967@8741a845db10> # Recommended update for python3 Announcement ID: SUSE-RU-2026:24264-1 Release Date: 2026-10-20T14:34:56Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for python3 fixes the following issues: Changes in python3: * do not hardrequire the primary interpreter version, otherwise we have a bootstrapping problem if we update the primary_python version ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1948 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1948 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * python3-base-3.13.14-160000.2.1 * python3-devel-3.13.14-160000.2.1 * python3-3.13.14-160000.2.1 * python3-curses-3.13.14-160000.2.1 * python3-doc-devhelp-3.13.14-160000.2.1 * python3-idle-3.13.14-160000.2.1 * python3-dbm-3.13.14-160000.2.1 * python3-tools-3.13.14-160000.2.1 * python3-tk-3.13.14-160000.2.1 * python3-doc-3.13.14-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * python3-base-3.13.14-160000.2.1 * python3-devel-3.13.14-160000.2.1 * python3-3.13.14-160000.2.1 * python3-curses-3.13.14-160000.2.1 * python3-doc-devhelp-3.13.14-160000.2.1 * python3-idle-3.13.14-160000.2.1 * python3-dbm-3.13.14-160000.2.1 * python3-tools-3.13.14-160000.2.1 * python3-tk-3.13.14-160000.2.1 * python3-doc-3.13.14-160000.2.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:41 -0000 Subject: SUSE-RU-2026:24262-1: moderate: Recommended update for python-rpm-packaging Message-ID: <179270110198.838.14988751490193127024@8741a845db10> # Recommended update for python-rpm-packaging Announcement ID: SUSE-RU-2026:24262-1 Release Date: 2026-10-19T15:48:06Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for python-rpm-packaging fixes the following issues: Changes in python-rpm-packaging: * Remove dependency on /usr/bin/python3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1945 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1945 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python-rpm-packaging-20210526+a18ca48-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python-rpm-packaging-20210526+a18ca48-160000.3.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:37 -0000 Subject: SUSE-SU-2026:24263-1: important: Security update for guava Message-ID: <179270109760.838.17464994032521257534@8741a845db10> # Security update for guava Announcement ID: SUSE-SU-2026:24263-1 Release Date: 2026-10-20T13:40:00Z Rating: important References: * bsc#1284985 Cross-References: * CVE-2026-102554 CVSS scores: * CVE-2026-102554 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102554 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102554 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for guava fixes the following issue: * CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes for guava: * Adapt the generated OSGi data to reality * Upgrade to guava 33.7.2 * Changes of 33.7.2 * collect: Changed MapMaker, CompactHashMap, and CompactHashSet deserialization to avoid eagerly allocating as much memory as a serialization payload requests (bsc#1284985, CVE-2026-102554) * Changes of 33.7.1 * removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. * Changes of 33.7.0 * Guava module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/ /MANIFEST.MF, which occasionally causes trouble for some users * collect: Changed some ImmutableMap implementations to create a new, lightweight object on each call to view methods like keySet(), rather than creating and storing that object during the first call for reuse later. This is likely to slightly improve performance for some users, but it could lead to regressions in unusual cases, such as repeatedly calling asMultimap().inverse() on the same ImmutableMap instance. * net: Added HttpHeaders constant for on-prefetch-activation. * net: Added MediaType constants for application/yaml and application/x-pem- file. * util.concurrent: Fixed ExecutionSequencer queue stall when delegate executor throws RejectedExecutionException. * Changes of 33.6.0 * Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. * cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. * collect: Added toImmutableSortedMap collectors that use the natural comparator. * collect: Changed ConcurrentHashMultiset, ImmutableMultimap, and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. * graph: Removed @Beta from all APIs in the package. * graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. * graph: Added an asNetwork() view to Graph and ValueGraph. * hash: Added BloomFilter.serializedSize(). * net: Added HttpHeaders.CDN_CACHE_CONTROL. * Changes of 33.5.0 * For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue. * Listed the JSpecify annotations as an optional dependency in our OSGi metadata. * cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) * collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. * math: Added saturatedAbs methods to IntMath and LongMath. * net: Added image/avif to MediaType. * util.concurrent: Added Striped.custom. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1947 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1947 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * guava-javadoc-33.7.2-160000.1.1 * guava-33.7.2-160000.1.1 * guava-testlib-33.7.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * guava-javadoc-33.7.2-160000.1.1 * guava-33.7.2-160000.1.1 * guava-testlib-33.7.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102554.html * https://bugzilla.suse.com/show_bug.cgi?id=1284985 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:49 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:24261-1: important: Security update for aliyun-cli Message-ID: <179270110908.838.6188037283019847749@8741a845db10> # Security update for aliyun-cli Announcement ID: SUSE-SU-2026:24261-1 Release Date: 2026-10-19T15:31:50Z Rating: important References: * bsc#1283596 * bsc#1284203 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for aliyun-cli fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli: * Update to version 3.5.1 * Add opt-in built-in OSS JSON/JSONL listings with bounded pages and resumable cursors, structured errors with recovery guidance, and non-interactive confirmation handling (#1452). * Add offline validation and read-only plans for single-file uploads and single-object deletion; record exact failed targets in exclusive JSONL manifests for cp/sync and expose sync deletion-phase state (#1452). * Fix the OSS bridge to preserve option order and `--`, propagate parser and service errors, pass profile region/timeouts/retry budgets, and refresh host credentials at request time without injecting them into argv (#1454). * Stop replaying writes after ambiguous transport or server failures; classify retries with jittered backoff, join workers before closing reports, and fix progress data races and failure-report filename collisions (#1452). * Enforce the host safety policy for legacy OSS operations and reject unsupported preview combinations (#1452, #1454). * Harden policy parsing and environment overrides to fail closed on invalid configuration; explicit deny rules cannot be bypassed by `--force`, `--yes`, or AI mode. * Enforce the safety policy before built-in extension dispatch (cliext/safety.go). * Restrict legacy FNF request-signing compatibility to a product allowlist (#1447). * API alias canonicalization was reverted and held: aliases and PascalCase/ kebab-case spellings remain separate policy matches, matching command spelling exactly as typed. * Version AI-mode OpenAPI and OSS error envelopes with `schemaVersion: "v1"`, and return structured startup configuration errors (#1453). * Add ALIBABA_CLOUD_CLI_AGENT_INTEGRATION controls for automatic AI mode; expand agent detection, User-Agent attribution, and Qoder China CLI detection (#1445, #1455). * Support case-insensitive product routing for in-process OpenAPI commands (#1445). * Expose regional and VPC product endpoints through queryable product Help (#1448). * Support camel RPC flat arrays (#1456) and prefer product prefix/substring suggestions over edit distance in "Did you mean" output. * Upgrade JMESPath to support `json.Number`, preserving large-number comparison and sorting precision and fixing empty-array average semantics. * Dispatch newly installed metadata plugins in-process (#1439). * Harden plugin archive extraction, package replacement/rollback, and download URL diagnostics (#1442). * Redact JSON and form bodies based on content while preserving the encoding of original form stars; keep raw and unparseable dry-run bodies intact (#1440, #1449). * Prefer native macOS architecture packages in install.sh (#1433). * Keep prerelease tags off the stable latest pointer and fail closed when release asset downloads are incomplete (#1437). * Include cliext in required checks, fix cross-platform test failures (#1446), restore single-file entrypoint builds, and stabilize language tests. * Update the aliyun-openapi-meta submodule and release jobs. * Add the OSS automation guide (en / zh-CN), document startup errors, exit statuses and command-spelling safety matching (#1450), and add the v3.5.1 CHANGELOG entry. * from version 3.5.0 * docs: add StsToken credential mode to README by @yndu13 in (#1403) * Built-in plugin and AI MODE enhancement by @yndu13 in (#1411) * Update Aliyun OpenAPI meta data * Update to version 3.4.11 * feat(openapi): extend --estimate-cost coverage (pricing context, SLS/openapi path, oss bridge, by-triple) and scripting contract by @api-tool-agent in (#1399) * from version 3.4.10 (no changes) * from version 3.4.9 * fix(maxc): fall back when symlink creation fails on Windows by @yndu13 in (#1390) * fix: quote-aware External process_command parsing by @yndu13 in (#1391) * fix: POSIX line-continuation in External process_command splitting by @yndu13 in (#1392) * Improve invalid flag error with did-you-mean hints by @yndu13 in (#1394) * fix: atomically write config.json via temp+rename by @yndu13 in (#1387) * fix: detect throttling by x-acs-retry-after header by @yndu13 in (#1395) * feat: add aliyun ecctl for Elastic Compute Control CLI by @yndu13 in (#1397) * fix: allow --profile with aliyun oss subcommands by @yndu13 in (#1398) * Update to version 3.4.8 * fix(test): mock plugin index for offline-stable Windows CI by @yndu13 in (#1379) * fix: correct waiter timeout/interval range validation by @yndu13 in (#1382) * feat(openapi): add --cli-dry-run flag for built-in PascalCase commands by @CodeSpaceiiii in (#1383) * fix: persist configure read-timeout as read_timeout by @yndu13 in (#1384) * fix: ignore empty --mode so env credentials still apply by @yndu13 in (#1386) * feat: add mseutil command to aliyun CLI by @yndu13 in (#1381) * fix(oss): honor profile endpoint and endpoint-type vpc by @yndu13 in (#1385) * fix: correct import order in openapi/library_test.go by @CodeSpaceiiii with @Copilot in (#1388) * Fix invisible API parameter names in help output (bold-black on dark terminals) by @mvanhorn in (#1362) * feat: integrate flow-cli into Aliyun CLI by @yndu13 in (#1380) * fix(esacli): harden exec override and shorthand flags by @yndu13 in (#1389) * from version 3.4.7 * {plugin} Add alias support for plugin by @AllyW in (#1376) * feat(mock): add response_body_size for controllable mock stdout size by @yndu13 in (#1378) * fix(plugin): prevent bulk update plugin pointer aliasing by @yndu13 in (#1377) * from version 3.4.6 * feat(openapi): add --estimate-cost-context to pass PricingContext to quotes by @LCLSpring in (#1373) * feat(mock): add delay_ms field to simulate command execution latency by @yndu13 in (#1375) * Update to version 3.4.5 * [Feature] Support ESA CLI Sub Command by @msyysm1211 in (#1345) * feat(config): support STS endpoint override for OIDC and role auth by @yndu13 in (#1372) * from version 3.4.4 * (no changes) * from version 3.4.3 * fix: correct valid typo in invalid command error by @yndu13 in (#1365) * {Misc} Add ALIBABA_CLOUD_DISABLE_EXTERNAL_PROCESS to disable external process by @AllyW in (#1366) * from version 3.4.2 * feat(openapi): add --estimate-cost and list-supported-pricing-apis by @LCLSpring in (#1364) * Update to version 3.4.1 * [Feature]Add Aliyun Lindorm CLI Subcommand by @MistySoul in (#1361) * {cliext} Add aliyun spark-submit by @AllyW in (#1358) * from version 3.4.0 * feat(acrutil): extract shared binary manager and add diagnosis subcommand by @copyrightpoiiiii in (#1349) * [feature] add rostran sub command by @xiao201208 in (#1350) * {OpenAPI} Add --cli-dry-run-json by @AllyW in (#1306) * {Misc} Fix plugin three layer cmd help by @AllyW in (#1343) * Feature/support anonymous by @yuexiu94 in (#1354) * feat: support retry-after policy for throttling error by @yndu13 in (#1355) * Update to version 3.3.23 * {Plugin} Allow plugins to opt out of host profile enforcement by @AllyW in (#1348) * Update to version 3.3.22 * {Logging} Skip list for self-built-gateway products by @AllyW in (#1346) * from version 3.3.21 * {Configure} Match policy rules against the command users actually type for ROA by @AllyW in (#1344) * from version 3.3.20 * {OpenAPI} Add call context logging by @AllyW in (#1342) * from version 3.3.19 * [Feature] Support MaxC CLI Sub Command by @dingxin-tech in (#1332) * feat(appmanager): Generalized PrepareEnv credential pass-through supports multiple authentication modes by @mengjunwei-mjw in (#1341) * from version 3.3.18 * Improve CMS2 command descriptions and clarify exception return codes by @tingbin-ctb in (#1337) * feat(iact3): add iact3 subcommand with manual upgrade by @xiao201208 in (#1336) * Add kmscli command by @oobujieshi in (#1340) * from version 3.3.17 * {Plugin} Support lang and profile from flag for plugin execution by @AllyW in (#1330) * Computenest pypi venv by @mengjunwei-mjw in (#1331) * feat: add codeup-cli subcommand for migrating third-party code repos by @imu2008 in (#1335) * from version 3.3.16 * Optimize error messages by @CodeSpaceiiii in (#1327) * {Openapi} Return InvalidApiError for unknown API on restful products by @AllyW in (#1326) * feat(acrutil): Add Alibaba Cloud Container Registry(ACR) Skill management CLI subcommand by @copyrightpoiiiii in (#1329) * {Configure} Support BearerToken profile mode by @AllyW in (#1333) * from version 3.3.15 * feat add saectl by @Beimingx in (#1319) * Cloud Monitor version 2.0: Independent binary access, Aliyun CMS2 subcommands by @thinkbetter18 in (#1322) * feat(otel): integrate OpenTelemetry support with environment variable by @CodeSpaceiiii in (#1324) * aliyuncms has been renamed to aliyuncms2. COMPAT_MODE, USER_AGENT, AI_USER_AGENT, and OTEL headers have been added. Issues with business parameter passing have been fixed by @tingbin-ctb in (#1325) * Update to version 3.3.14 * feat(appmanager): add appmanager subcommand with PyPI+OSS dual-source by @mengjunwei-mjw in (#1317) * {Misc} Add --name and update version check message for plugin install and adjust agent detection by @AllyW in (#1316) * from version 3.3.13 * Update to version 3.3.12 * Add AgentBay CLI command and implement language setting logic by @CodeSpaceiiii in (#1311) * {Profile} Add external-account-type for user profile by @AllyW in (#1312) * Implement CLI mock command with add, import, remove, list, clear, and path subcommands by @CodeSpaceiiii in (#1313) * {Openapi} Add agent segment to user-agent by @AllyW in (#1314) * from version 3.3.11 * Fix retrySaveProfile function to return success status and update tests by @CodeSpaceiiii in (#1310) * Update to version 3.3.10 * from version 3.3.9 * {Config} Add safety policy env parsing by @AllyW in (#1307) * from version 3.3.8 * {Core} Add plugin install --package and plugin show by @AllyW in (#1301) * from version 3.3.7 * {config} Fix: Only honor ALIBABA_CLOUD_ENDPOINT for profile endpoint env injection by @AllyW in (#1304) * from version 3.3.6 * {Core} Fix endpoint shorthand flag -e of oss by @AllyW in (#1303) * from version 3.3.5 * feat: profile support endpoint flag by @crimson-gao in (#1298) * {Core} Add aliyun upgrade and configurable plugin index source and fix CloudSSO/OAuth one-off CLI flags persisting by @AllyW in (#1299) * Update to version 3.3.4 * {Core} Fix unknown-flag parsing for plugin-style subcommands by @AllyW in (#1296) * from version 3.3.3 * {Core} Add ai-mode and safety policy configuration by @AllyW in (#1295) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1944 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1944 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * aliyun-cli-debuginfo-3.5.1-160000.1.1 * aliyun-cli-3.5.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * aliyun-cli-debuginfo-3.5.1-160000.1.1 * aliyun-cli-3.5.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283596 * https://bugzilla.suse.com/show_bug.cgi?id=1284203 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:13 -0000 Subject: SUSE-RU-2026:24259-1: important: Recommended update for erlang Message-ID: <179270113332.838.8208381040034471303@8741a845db10> # Recommended update for erlang Announcement ID: SUSE-RU-2026:24259-1 Release Date: 2026-10-16T12:34:49Z Rating: important References: * bsc#1278689 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for erlang fixes the following issues: Changes in erlang: * Fix regression in MX lookup (bsc#1278689) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1924 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1924 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * erlang-debuginfo-27.1.3-160000.6.1 * erlang-debugsource-27.1.3-160000.6.1 * erlang-epmd-27.1.3-160000.6.1 * erlang-epmd-debuginfo-27.1.3-160000.6.1 * erlang-27.1.3-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * erlang-debuginfo-27.1.3-160000.6.1 * erlang-debugsource-27.1.3-160000.6.1 * erlang-epmd-27.1.3-160000.6.1 * erlang-epmd-debuginfo-27.1.3-160000.6.1 * erlang-27.1.3-160000.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1278689 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:07 -0000 Subject: SUSE-SU-2026:24260-1: important: Security update for MozillaFirefox Message-ID: <179270112716.838.11545394514650386324@8741a845db10> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:24260-1 Release Date: 2026-10-19T14:43:34Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value. (bsc#1259727) * CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712) * CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730) * CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263) * CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. (bsc#1264713) * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service. (bsc#1275098) * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks. (bsc#1275098) * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c. (bsc#1275736) * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service. (bsc#1275605) * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash. (bsc#1275736) * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks. (bsc#1275736) * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption. (bsc#1275736) * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters. (bsc#1282347) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1942 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1942 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * MozillaFirefox-debuginfo-153.5.0-160000.1.1 * MozillaFirefox-translations-other-153.5.0-160000.1.1 * MozillaFirefox-153.5.0-160000.1.1 * MozillaFirefox-debugsource-153.5.0-160000.1.1 * MozillaFirefox-translations-common-153.5.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * MozillaFirefox-devel-153.5.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * MozillaFirefox-debuginfo-153.5.0-160000.1.1 * MozillaFirefox-translations-other-153.5.0-160000.1.1 * MozillaFirefox-153.5.0-160000.1.1 * MozillaFirefox-debugsource-153.5.0-160000.1.1 * MozillaFirefox-translations-common-153.5.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * MozillaFirefox-devel-153.5.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:22 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:22 -0000 Subject: SUSE-SU-2026:24258-1: moderate: Security update for bcel Message-ID: <179270114214.838.11248162729501613565@8741a845db10> # Security update for bcel Announcement ID: SUSE-SU-2026:24258-1 Release Date: 2026-10-16T12:21:02Z Rating: moderate References: * bsc#1284399 * bsc#1284400 Cross-References: * CVE-2026-105111 * CVE-2026-94114 CVSS scores: * CVE-2026-105111 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-105111 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105111 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94114 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-94114 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-94114 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for bcel fixes the following issues: * CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). * CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399). Changes for bcel: * Update to version 6.13.0 * New Features * Add support for permitted subclasses * Add RecordComponentInfo.getAttribute(byte tag) * Add Const.MAJOR_27 * Add Const.MINOR_27 * Add and use ArrayType.isElementType(Type) * Add Const.MAJOR_28 * Add Const.MINOR_28 * Fixed Bugs * Fix constant pool module access test on Java 26 and above * Deprecate org.apache.bcel.classfile.Utility.Utility() * Deprecate org.apache.bcel.verifier.exc.Utility .getStackTrace(Throwable) * Fix all Javadoc warnings and enforce checks by default * Escape constant pool names in generated HTML * Escape referenced names in BCELFactory Java output * Make wide flag thread-local in Utility.codeToString * Read multianewarray dimensions as unsigned byte * Site docs: clarify security model * Read ConstantDynamic indices as unsigned shorts * Validate index upper bound in CPInstruction, IINC and RET setIndex * Use correct attribute tag in NestHost and ModuleMainClass * Propagate runtime-visible flag when parsing parameter annotations * Use fixedLength for parsed LOOKUPSWITCH length * Fix ConstantPoolGen dedup key collisions for names with delimiters * Read unsigned bytecode operands in CodeHTML disassembler * Deep-copy bootstrap arguments array in BootstrapMethod.copy() * Use exclusive live-range end in LocalVariableTable .getLocalVariable * Build TABLESWITCH from sorted arrays in SWITCH * Use array element type not basic type for primitive array access * Set length in INVOKEDYNAMIC constructor * Reject CALOAD on non-char arrays in structural verification * Add negative verifier tests for remaining array load/store component type checks * Validate u1 count bound in INVOKEINTERFACE and MULTIANEWARRAY * Match wide local variable instruction length to dumped bytes * Bound IINC increment to signed short * Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in ConstantUtf8 * Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser * Nested annotation element values recurse unboundedly; MAX_ARRAY_DIMENSIONS cap bypassed * Opcodes tableswitch and lookupswitch add boundary checks * JustIce Pass 2 hangs on cyclic superclass chain of a referenced exception class * JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k hashtable operations * Pass 3b dataflow stores frames per instruction and clones ever-growing execution chains * Cubic handlers * range * subroutines scan in Subroutines constructor hangs JustIce Pass 3b * Subroutines.noRecursiveCalls enumerates exponentially many JSR call paths * Disassembler and Class2HTML re-implement the unchecked switch-table allocation * ConstantPool.constantToString recurses forever on self-referencing CONSTANT_MethodHandle * Utility.typeSignatureToString recurses per generic-nesting level, unbounded, with quadratic substring copies * Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide (bsc#1284400, CVE-2026-94114) * Silent u2/u1 count truncation across dump paths corrupts emitted bytecode * Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports) (bsc#1284399, CVE-2026-105111) * Class2HTML builds output file paths from the unvalidated class name * ClassPath.getBytes() sizes its buffer from the forged ZIP uncompressed-size field * PMG attribute ignores declared length, enabling BCEL-vs-JVM parse divergence * Signature.matchGJIdent recurses unboundedly on nested generic signatures (Signature.translate) * Utility.decode fixed 3x buffer breaks the encode/decode round trip and throws unchecked AIOOBE * BCELifier interpolates attacker class/package names into generated Java source unescaped * Verifier pass 3a delayed checks are quadratic in attribute and code size * Verifier cache grows unboundedly with attacker-chosen class names * Static WIDE ThreadLocal survives exceptions, corrupting the next class's disassembly on the same thread * Utility.JavaReader escape decoding: OOB table index, bad-hex crash, silent non-canonical aliasing * Changes * Bump org.apache.commons:commons-parent from 95 to 104 * Bump org.jetbrains.kotlin:kotlin-stdlib from 2.3.0 to 2.4.20 * Bump commons-io:commons-io from 2.21.0 to 2.22.0 * Bump jna.version from 5.18.1 to 5.19.1 * [test] Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0 * Changes of version 6.12.0 * Add Const.MAJOR_26 * Add Const.MINOR_26 * Fix infinite loop in example.TransitiveHull * Fix Apache RAT plugin console warnings * Fix malformed Javadoc comments * Make the build reproducible on the Azul JDK * Fix infinite loop in JavaClass.findField() on invalid input * Fix infinite loop in JavaClass.getAllInterfaces() on invalid input * Fix infinite loop in JavaClass.getSuperClasses() on invalid * Exception message in Args.requireU4() refers to the wrong data type * Exception message in Args.requireU2() refers to the wrong upper range value * Code.Code(int, int, DataInput, ConstantPool) now throws a ClassFormatException if the code array is greater than the JVM specification allows * Code.Code(int, int, int, int, byte[], CodeException[], Attribute[], ConstantPool) now throws a ClassFormatException if the code array is greater than the JVM specification allows * Code.setCode(byte[]) now throws a ClassFormatException if the code array is greater than the JVM specification allows * ClassDumper.dump() should not call the input stream it didn't open; fixes IOException when calling DumpClass.main (ClassDumper.java:351) * org.apache.bcel.classfile.ConstantPool.ConstantPool(Constant[]) now uses varagrs: ConstantPool(Constant...) * org.apache.bcel.classfile.Deprecated now requires its the attribute_length item be zero * org.apache.bcel.classfile.Synthetic now requires its the * The size of an Attribute unknown to the JVM specification is limited to 1 MB and is overridden with the system property BCEL.Attribute.Unknown.max_attribute_length * Bump org.apache.commons:commons-parent from 89 to 95 * [test] Bump org.jetbrains.kotlin:kotlin-stdlib from 2.2.20 to 2.3.0 * Bump commons-io:commons-io from 2.20.0 to 2.21.0 * Bump commons-lang3 from 3.19.0 to 3.20.0 * [test] Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0 * Changes of version 6.11.0 * Add Const.MAJOR_25 * Add Const.MINOR_25 * Add experimental CycloneDX VEX file * Refactor to use new Maven POM variable ecj.version * Replace internal use of Locale.ENGLISH with Locale.ROOT * BCEL-375: Wrong permissions on bcel .jar file in binary .tar.gz distribution file * BCEL-376: ClassPath.close() throws UnsupportedOperationException when created with system-classpath * ClassPath.getResources(String) can use an ArrayList instead of a Vector * Fix SpotBugs [ERROR] Medium: Operation on the "created" shared variable in "ConstantUtf8" class is not atomic [org.apache .bcel.classfile.ConstantUtf8] At ConstantUtf8.java:[line 119] AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE * Fix SpotBugs [ERROR] Medium: Operation on the "considered" shared variable in "ConstantUtf8" class is not atomic [org .apache.bcel.classfile.ConstantUtf8] At ConstantUtf8.java: [line 137] AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE * Fix SpotBugs [ERROR] Medium: Operation on the "skipped" shared .bcel.classfile.ConstantUtf8] At ConstantUtf8.java:[line 134] * org.apache.bcel.util.ClassPath .addJdkModules(String, List) now reads the system property "jdk.module.path" instead of "java.modules.path" * Fix ConstantPoolModuleAccessTest failures on Java 25 * 377: Fix testing on Java 24 and up * Bump org.apache.commons:commons-parent from 72 to 89 * Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.19.0 * Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.0 to 2.2.20 * Bump commons-io:commons-io from 2.16.1 to 2.20.0 * Bump jna.version from 5.14.0 to 5.18.1 * Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 * Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to 4.5.0 * Bump org.apache.commons:commons-exec from 1.4.0 to 1.5.0 a minimum of Java 8 * Fix PMD UnnecessaryFullyQualifiedName * Fix PMD EmptyCatchBlock by allowing commented blocks * Fix PMD EmptyControlStatement by allowing commented blocks JasminVisitor * SpotBugs checks should ignore code generated by JavaCC * Fix SpotBugs URF_UNREAD_FIELD in ClassDumper * Fix SpotBugs DM_DEFAULT_ENCODING in JasminVisitor ASTFunAppl Mini.Environment * Fix SpotBugs DM_DEFAULT_ENCODING in Mini.MiniC * Fix SpotBugs WMI_WRONG_MAP_ITERATOR in Package.go(String[]) TransitiveHull.getIgnored() * Add accessors to model and unit tests, Javadoc * Add Const.MAJOR_22 * Add Const.MINOR_22 * Add Const.MAJOR_23 * Add Const.MINOR_23 * Add Const.MAJOR_24 * Add Const.MINOR_24 2.0.0 to 4.5.0-M2 * Bump org.apache.commons:commons-parent from 69 to 71 3.1.0 * Includes changes from 6.9.0 Maintenance and bug fix release * Add Support for Java 16 records * Add null guard for InstructionFactory.createInvoke() * Avoid possible NullPointerException in org.apache.bcel.classfile.DescendingVisitor.accept(E[]) AnnotationEntryGen[]) ConstantPoolGen, boolean) ElementValue[], ConstantPoolGen) org.apache.bcel.generic.ClassGen.setMethods(Method[]) * Avoid possible NullPointerException in org.apache.bcel.generic .ClassGen.unpackAnnotations(Attribute[]) * Avoid possible NullPointerException in org.apache.bcel .classfile.ParameterAnnotationEntry .createParameterAnnotationEntries(Attribute[]) org.apache.bcel.generic.ClassGen.ClassGen(JavaClass) .FieldGenOrMethodGen.addAll(Attribute[]) * Avoid NullPointerException after calling org.apache.bcel .classfile.MethodParameters.setParameters(MethodParameter[]) with null .classfile.ParameterAnnotations .setParameterAnnotationTable(ParameterAnnotationEntry[]) .classfile.LocalVariableTypeTable .setLocalVariableTable(LocalVariable[]) with null .classfile.LocalVariableTable .classfile.LineNumberTable.setLineNumberTable(LineNumber[]) .classfile.JavaClass.setMethods(Method[] with null .classfile.JavaClass.setInterfaces(int[]) with null .classfile.JavaClass.setInterfaceNames(String[]) with null .classfile.JavaClass.setFields(Field[]) with null .classfile.JavaClass.setAttributes(Attribute[]) with null .classfile.ConstantPool.setConstantPool(Constant[]) with null .classfile.FieldOrMethod.setAttributes(Attribute[]) with null .classfile.Annotations.setAnnotationTable(AnnotationEntry[]) .classfile.ArrayElementValue.ArrayElementValue(int, ElementValue[], ConstantPool) with null .classfile.BootstrapMethod.BootstrapMethod(int, int[]) with null .classfile.BootstrapMethod.setBootstrapArguments(int[]) with .classfile.BootstrapMethods.BootstrapMethods(int, int, BootstrapMethod[], ConstantPool) with null .classfile.BootstrapMethods .setBootstrapMethods(BootstrapMethod[]) with null * Avoid NullPointerException calling org.apache.bcel.generic .InstructionList.redirectLocalVariables(LocalVariableGen[], InstructionHandle, InstructionHandle) with null .InstructionList.redirectExceptionHandlers(CodeExceptionGen[], .InstructionList.findHandle(InstructionHandle[], int[], int, int) with null .MethodGen.setArgumentTypes(Type[]) with null .MethodGen.setArgumentNames(String[]) with null .MethodGen.removeRuntimeAttributes(Attribute[]) with null .MethodGen.makeMutableVersion(AnnotationEntry[]) with null * Bump org.apache.commons:commons-parent from 66 to 69 * Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.22 to 1.9.23 * Bump commons-io:commons-io from 2.15.1 to 2.16.1 * 6.8.0 (2023-12-08) Maintenance and bug fix release ClassFormatException input Java4Example ~ Add verifier tests on some opcodes signatures ~ Add Const.MAJOR_20 ~ Add Const.MINOR_20 ~ Add Const.MAJOR_21 ~ Add Const.MINOR_21 ~ [Bcelifier] stackmap support to pass JDK verifier SE_BAD_FIELD BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH NullPointerException not a NullPointerException ~ Test and coverage of InstructionFactory ~ Verifier: test and coverage for SWAP instruction () in it`()' ~ Fix null pointers in AnnotationEntry supports package-private) test ATHROW on empty stack Select#toString(boolean) ~ Fix EmptyVisitorTestCase on Java 21 ~ Bump commons-parent from 54 to 65 ~ Bump jna.version from 5.12.1 to 5.13.0 ~ Bump kotlin-stdlib from 1.8.10 to 1.9.21 ~ Bump commons-io from 2.11.0 to 2.15.1 ~ Bump commons-lang3 from 3.12.0 to 3.14.0 3.1.1 * 6.7.0 (2022-11-28) Maintenance and bug fix release * 6.6.1 (2022-10-29) Maintenance and bug fix release * 6.6.0 (2022-10-08) Minor feature and bug fix release * 6.5.0 (2020-06-05) Minor feature and bug fix release * 6.4.1 (2019-09-26) Bug fix release * 6.4.0 (2019-09-20) Feature and bug fix release requires Java 7 or higher to run class org.apache.bcel.generic.InstructionConsts class java.lang.String ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1923 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1923 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * bcel-6.13.0-160000.1.1 * bcel-javadoc-6.13.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * bcel-6.13.0-160000.1.1 * bcel-javadoc-6.13.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105111.html * https://www.suse.com/security/cve/CVE-2026-94114.html * https://bugzilla.suse.com/show_bug.cgi?id=1284399 * https://bugzilla.suse.com/show_bug.cgi?id=1284400 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:37 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:33:37 -0000 Subject: SUSE-SU-2026:4868-1: critical: Security update for webkit2gtk3 Message-ID: <179270121754.838.698830358986627979@8741a845db10> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4868-1 Release Date: 2026-10-22T15:23:01Z Rating: critical References: * bsc#1276418 * bsc#1277001 * bsc#1277004 * bsc#1277015 * bsc#1277755 * bsc#1284619 * bsc#1285528 Cross-References: * CVE-2026-64715 * CVE-2026-64718 * CVE-2026-65335 * CVE-2026-78376 * CVE-2026-83596 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-65335 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-78376 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78376 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78376 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Security issues fixed: * CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). * CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277015). * CVE-2026-78376: use-after-free of `JSCValue` function parameters (bsc#1276418). * CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755). Non security issue fixed: * libjavascriptcoregtk-4_0-18: JSGlobalContextCreate() aborts on aarch64 64 KB-page kernel (bsc#1285528). * Build with -DUSE_64KB_PAGE_BLOCK=ON on aarch64 (bsc#1285528). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4868 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4868 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4868 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4868 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4868 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4868 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4868 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4868 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4868 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * webkit2gtk4-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * webkit-jsc-4.1-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * webkit-jsc-4-2.54.1-150400.4.157.5 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkit-jsc-4.1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * webkit-jsc-6.0-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-minibrowser-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150400.4.157.4 * webkit-jsc-4-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-WebKit-6_0-2.54.1-150400.4.157.4 * webkit-jsc-6.0-2.54.1-150400.4.157.4 * webkit2gtk3-minibrowser-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-minibrowser-2.54.1-150400.4.157.5 * openSUSE Leap 15.4 (x86_64) * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-32bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150400.4.157.5 * libwebkit2gtk-4_1-0-32bit-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-64bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150400.4.157.5 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 ## References: * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64718.html * https://www.suse.com/security/cve/CVE-2026-65335.html * https://www.suse.com/security/cve/CVE-2026-78376.html * https://www.suse.com/security/cve/CVE-2026-83596.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1276418 * https://bugzilla.suse.com/show_bug.cgi?id=1277001 * https://bugzilla.suse.com/show_bug.cgi?id=1277004 * https://bugzilla.suse.com/show_bug.cgi?id=1277015 * https://bugzilla.suse.com/show_bug.cgi?id=1277755 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 * https://bugzilla.suse.com/show_bug.cgi?id=1285528 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:34:35 -0000 Subject: SUSE-SU-2026:4866-1: important: Security update for go1.26-openssl Message-ID: <179270127510.838.1649633218792662390@8741a845db10> # Security update for go1.26-openssl Announcement ID: SUSE-SU-2026:4866-1 Release Date: 2026-10-22T14:38:05Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 * bsc#1286261 * bsc#1286317 * jsc#SLE-18320 Cross-References: * CVE-2026-111943 * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). Changes: * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF * go#81152 cmd/compile/internal/test: TestMergeLocalsIntegration failures * go#81113 debug/elf: applyRelocationsPPC was broken by CL 705075 * go#80889 os: TestRootMultiMkdirAllShallow failures on openbsd * go#80851 cmd/go: pseudo #cgo directive FFLAGS value mixed up with CXXFLAGS in Go 1.26 * go#80827 runtime: async preemption corrupts AVX (YMM) state on netbsd/amd64 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4866 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4866 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4866 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4866 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.26-openssl-race-1.26.10-150600.13.18.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 * https://jira.suse.com/browse/SLE-18320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:47 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:34:47 -0000 Subject: SUSE-SU-2026:4864-1: important: Security update for go1.26 Message-ID: <179270128731.838.18220881775243083806@8741a845db10> # Security update for go1.26 Announcement ID: SUSE-SU-2026:4864-1 Release Date: 2026-10-22T13:37:39Z Rating: important References: * bsc#1255111 * bsc#1284770 * bsc#1284772 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 * CVE-2026-78663 * CVE-2026-78669 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go1.26.10 (bsc#1255111): * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4864 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4864 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4864 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4864 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4864 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4864 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4864 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4864 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4864 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4864 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4864 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:33:04 -0000 Subject: SUSE-RU-2026:24254-1: moderate: Recommended update for aws-cli, python-s3transfer, python-boto3, python-botocore Message-ID: <179270118403.838.6836099124111830293@8741a845db10> # Recommended update for aws-cli, python-s3transfer, python-boto3, python- botocore Announcement ID: SUSE-RU-2026:24254-1 Release Date: 2026-10-16T11:30:14Z Rating: moderate References: * bsc#1204537 * bsc#1209255 * bsc#1267424 * jsc#PED-2333 * jsc#PED-3780 * jsc#SLE-15 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that contains three features and has three fixes can now be installed. ## Description: This update for aws-cli, python-s3transfer, python-boto3, python-botocore fixes the following issues: Changes in aws-cli: * Update to 1.45.36 (bsc#1267424) * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.45.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.45.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.45.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.45.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.45.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.45.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.45.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.45.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * enhancement:emr: EMR SSH/SCP helper commands (`aws emr ssh`, `socks`, `put`, `get`) now default to `StrictHostKeyChecking=accept-new` for improved host key verification security. A new `--ssh-options` parameter allows passing arbitrary SSH options to override defaults. On systems with OpenSSH < 7.6, the CLI automatically falls back to the previous behavior with a warning. * from version 1.45.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.45.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.45.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.45.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.45.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.45.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.45.21 * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.45.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.45.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.45.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * bugfix:s3: Fix false negative in parent-directory escape detection that allowed keys like `/../foo` to bypass warning during downloads * from version 1.45.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.45.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update to 1.45.15 * api-change:`backup`: Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.45.14 * api-change:`datazone`: Add support for VPC connection * api-change:`ec2`: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call * api-change:`securityagent`: Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:configure: Warn if the credentials file has permissions beyond the default of 0o600 when modifying the file. Fixes `#10019 <https://github.com/aws/aws-cli/issues/10019>`__. * from version 1.45.13 * api-change:`batch`: Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.45.12 * api-change:`bedrock-runtime`: Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: GenerateAuthRequestCryptogram API launch. * enhancement:`cloudtrail validate-logs`: Invalidate log files with data appended to the end of the gzip stream. * Update to 1.45.11 * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.45.10 * api-change:`accessanalyzer`: Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: Support for dataset enrichment and geo spatial in new data preparation experience From 1.45.9 * api-change:`logs`: Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.45.8 * api-change:`bedrock`: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: Release --has-databases parameter for AWS Glue get- catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: Introducing new option for security groups mapping * with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.45.7 * api-change:`arc-region-switch`: Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. From 1.45.6 * api-change:`bcm-data-exports`: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: Launching AgentCore payments * a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: This is a documentation update * api-change:`invoicing`: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. From 1.45.5 * api-change:`bedrock-agentcore-control`: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: Validate outpost access point resource name * api-change:`sagemaker`: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. From 1.45.4 * api-change:`cleanroomsml`: Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). From 1.45.3 * api-change:`bedrock-agentcore-control`: Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service- specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: Amazon VPC Lattice now supports privately resolvable DNS resources * enhancement:Migration: Added support to upgrade debug mode for detecting breaking change introduced in AWS CLI v2: in v2, Cyclic Redundancy Check 64 (CRC64NVME) is used by default for `aws s3` commands that upload a file to S3, but Cyclic Redundancy Check 32 (CRC32) is used instead in v1. To use upgrade debug mode, specify the `--v2-debug` global parameter on a command. From 1.45.2 * api-change:`appstream`: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. From 1.45.1 * api-change:`bedrock-agentcore`: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: AgentCore Identity now supports on- behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: Adds support for asynchronous notebook runs * api-change:`eks`: Vended logs update param for capability vended logs feature * api-change:`kafka`: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API From 1.45.0 * api-change:`account`: Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage * api-change:`cloudfront`: Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: Removes support for registry policy V1 * api-change:`gamelift`: Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: Allow admins to configure IPv6 ranges on IP Access Settings. * feature:Python: End of support for Python 3.9 From 1.44.87 * api-change:`application-signals`: Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: Add support for Passthrough pricing plan * api-change:`gameliftstreams`: Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: Added support for Protocol as modified resource and added update failure as modification state From 1.44.86 * api-change:`bedrock-agentcore-control`: Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * enhancement:configure: Added aws_security_token to the list of keys that are written to the shared credentials file when using aws configure set. From 1.44.85 * api-change:`datazone`: Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: Rename `get-o-tel-enrichment`, `start-o-tel- enrichment`, and `stop-o-tel-enrichment` commands to `get-otel-enrichment`, `start-otel-enrichment`, and `stop-otel-enrichment`. The old names are kept as hidden aliases for backward compatibility. From 1.44.84 * api-change:`batch`: Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iotwireless`: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * enhancement:`s3`: Add support for xxhash3, xxhash64, xxhash128, and sha512 algorithms to the high level s3 sync and cp commands From 1.44.83 * api-change:`cognito-idp`: Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * enhancement:`S3`: Add support for creating S3 account regional namespace buckets with `aws s3 mb`. The command now automatically detects bucket names matching the account-regional naming pattern and sets the required `x-amz- bucket-namespace` header. From 1.44.82 * api-change:`application-signals`: Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: Expanded support for new suppression rule fields. * api-change:`kafka`: Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. From 1.44.81 * api-change:`cleanrooms`: This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations * UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: Improving Documentation for Neptune * api-change:`quicksight`: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. From 1.44.80 * api-change:`appstream`: Add content redirection to Update Stack * api-change:`autoscaling`: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: Added error handling for service quota limits * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: Launching SMUS IAM domain SDK support * api-change:`devops-agent`: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: Updating regex for identification of AWS Regions. * api-change:`logs`: Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. From 1.44.79 * api-change:`customer-profiles`: This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key- value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high-speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. From 1.44.78 * api-change:`connect`: Conversational Analytics for Email * api-change:`devops-agent`: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: Minor updates to exceptions for completeness * api-change:`imagebuilder`: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * bugfix:codedeploy: Tighten file permissions for CodeDeploy configuration file From 1.44.77 * api-change:`bcm-dashboards`: Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: Adds support for MediaLive Channel-type Router Inputs. * api-change:`redshift-data`: The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: Release support for g7e instance types for SageMaker HyperPod * bugfix:s3, streaming output: Output files created by S3 Select and streaming output commands are now created with owner-only permissions (0600). Existing files are also tightened to 0600 when overwritten. From 1.44.76 * api-change:`backup`: Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`ivs-realtime`: Adds support for Amazon IVS real-time streaming redundant ingest. * api-change:`marketplace-discovery`: AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * bugfix:CodeArtifact: Tighten file permissions when writing credentials in CodeArtifact login * bugfix:`iam`: Tighten file permissions for virtual MFA bootstrap output From 1.44.75 * api-change:`accessanalyzer`: Revert previous additions of API changes. * api-change:`bedrock-agentcore`: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`lambda`: Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. From 1.44.74 * api-change:`accessanalyzer`: Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: Migrated to Smithy. No functional changes * api-change:`lightsail`: This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. From 1.44.73 * api-change:`bedrock`: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: Add support for tagging of Alarm resource type * api-change:`logs`: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions From 1.44.72 * api-change:`appstream`: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects * api-change:`bedrock-runtime`: Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. From 1.44.71 * api-change:`bedrock`: Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * bugfix:`s3`: Fix handling of SSE-C keys when copying unencrypted to encrypted objects or objects with different encryption keys From 1.44.70 * api-change:`acm`: Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: AWS DevOps Agent service General Availability release. * api-change:`dms`: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-maps`: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * bugfix:Configuration: Update `configure set` command to return an error when newline or carriage-return characters are specified in the value. From 1.44.69 * api-change:`appstream`: Add support for URL Redirection * api-change:`autoscaling`: Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: AWS DevOps Agent General Availability. * api-change:`ecs`: Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Update CreateScript API documentation. * api-change:`lakeformation`: Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re- verification without requiring manual intervention from support teams. * api-change:`sagemaker`: Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: Added support for opting out of Amazon S3 Express session authentication via the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. From 1.44.68 * api-change:`bedrock-agentcore`: Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. From 1.44.67 * api-change:`bcm-data-exports`: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * enhancement:emr: Add support for StepExecutionRoleArn parameter in RunJobFlow API. From 1.44.66 * api-change:`apigatewayv2`: Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`marketplace-agreement`: The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. From 1.44.65 * api-change:`bedrock-agentcore-control`: Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: Adds support for updating the vector options field for existing collections. * api-change:`pcs`: This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. From 1.44.64 * api-change:`batch`: AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: Add support for tagging of ContactMethod resource type * api-change:`omics`: Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. From 1.44.63 * api-change:`backup`: Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`opensearch`: Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. From 1.44.62 * api-change:`batch`: AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 1. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. From 1.44.61 * api-change:`ec2`: The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: This update adds additional bitrate options for Dolby AC-4 audio outputs. From 1.44.60 * api-change:`bedrock-agentcore-control`: Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * enhancement:emr: Add support for S3LoggingConfiguration in \--monitoring- configuration parameter of the emr create-cluster command. From 1.44.59 * api-change:`bedrock`: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. From 1.44.58 * api-change:`apigateway`: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: The change adds a new capability named ManageSharedFolders in Custom Permissions From 1.44.57 * api-change:`datasync`: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`s3`: Add support for specifying tags on buckets during bucket creation using the `aws s3 mb` command via a new `--tags` flag. From 1.44.56 * api-change:`customer-profiles`: Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`polly`: Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: Added WINDOWS SERVER 2025 OperatingSystemName. From 1.44.55 * api-change:`bedrock-agentcore-control`: Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kafka`: Add dual stack endpoint to SDK * api-change:`lexv2-models`: This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. From 1.44.54 * api-change:`iam`: Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. From 1.44.53 * api-change:`appintegrations`: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. From 1.44.52 * api-change:`connecthealth`: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * Update to 1.44.51 * api-change:`connect`: Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: Adding support for DeploymentStrategyOptions * api-change:`quicksight`: Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * from version 1.44.50 * api-change:`bedrock-agentcore-control`: Support for AgentCore Policy GA * api-change:`datazone`: Adding QueryGraph operation to DataZone SDK * api-change:`logs`: CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.44.49 * api-change:`arc-region-switch`: Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.44.48 * api-change:`backup-gateway`: This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.44.47 * api-change:`batch`: AWS Batch documentation update for service job capacity units. * api-change:`ec2`: Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: Neptune global clusters now supports tags * api-change:`wafv2`: AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.44.46 * api-change:`cloudwatch`: This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.44.45 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: Add workflow properties support to connections APIs * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`mediatailor`: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.44.44 * api-change:`appstream`: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`sagemaker-runtime`: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * bugfix:cloudtrail: Fixed edge case in validate-logs where digest validation could fail with "public key not found" when the end time lands near a key rotation boundary * from version 1.44.43 * api-change:`bcm-dashboards`: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * from version 1.44.42 * api-change:`cleanrooms`: This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: Correcting in-app notifications API documentation. * from version 1.44.41 * api-change:`ec2`: Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`grafana`: This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`rds`: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: Adds support for branding customization without requiring a custom wallpaper. * from version 1.44.40 * api-change:`arc-region-switch`: Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: Documentation updates for EC2 Secondary Networks * api-change:`ecr`: Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: Update MessageType enum to include missing types. * from version 1.44.39 * api-change:`cloudwatch`: Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * from version 1.44.38 * api-change:`ec2`: Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * enhancement:cli-history: Create local history files with specific permissions * from version 1.44.37 * api-change:`batch`: Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * enhancement:cloudtrail: Added support for validating backfill digest files in `validate-logs` command * from version 1.44.36 * api-change:`bedrock-agentcore`: Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.44.35 * api-change:`connectcampaignsv2`: Add the missing event type for WhatsApp * api-change:`ec2`: Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: Allow cross account v5 in put data lake settings * api-change:`neptunedata`: Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.44.34 * api-change:`bedrock-data-automation-runtime`: Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: Adding g7e instance support in Sagemaker Training * from version 1.44.33 * api-change:`arc-region-switch`: Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: Minor neptune-graph documentation changes * api-change:`ram`: Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: Added support for 12 new graphics-optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * from version 1.44.32 * api-change:`bedrock-runtime`: Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: Amazon Connect Cases now supports larger, multi- line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: Update delete cluster description * api-change:`medialive`: AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * from version 1.44.31 * api-change:`batch`: AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-maps`: Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: Updated the CloseAccount description. * api-change:`sso-admin`: Added new Region management APIs to support multi- Region replication in IAM Identity Center. * from version 1.44.30 * api-change:`bedrock-agentcore-control`: Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.44.29 * api-change:`connect`: This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.44.28 * api-change:`ec2`: G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.44.27 * api-change:`cognito-idp`: This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL- CODECS tag in HLS manifests. * api-change:`s3`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.44.26 * api-change:`connect`: Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * enhancement:`gamelift`: Add `--tags` parameter to `upload-build` command. * from version 1.44.25 * api-change:`connectcases`: Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: Adds support for AWS Ground Station Telemetry. * bugfix:documentation: Fixed shorthand example generation in documentation. * from version 1.44.24 * api-change:`connect`: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: Added api for deleting data export configuration for a domain * api-change:`qconnect`: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.44.23 * api-change:`autoscaling`: This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gamelift`: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: Adding new enum value for ScanStatusReason * api-change:`health`: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.44.22 * api-change:`bedrock-agentcore`: Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.44.21 * api-change:`autoscaling`: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.44.20 * api-change:`connect`: Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: Adding security consideration comments for lcc accessing execution role under root access * from version 1.44.19 * api-change:`cleanrooms`: This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * from version 1.44.18 * api-change:`ce`: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: no feature changes. model migrated to Smithy * api-change:`redshift`: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update to 1.44.17 * api-change:`bedrock`: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.44.16 * api-change:`billing`: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * enhancement:`s3`: Adds new parameter `--case-conflict` that configures how case conflicts are handled on case-insensitive filesystems * from version 1.44.15 * api-change:`bedrock-agentcore-control`: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: Adding MaterializedViews task run APIs * api-change:`medialive`: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: Adds waiters to Amazon Transcribe. * from version 1.44.14 * api-change:`workspaces`: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.44.13 * api-change:`ce`: This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.44.12 * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.44.11 * bugfix:`s3`: Reverts addition of `--case-conflict` feature which caused a performance regression when copying from S3 to large local directories * from version 1.44.10 * api-change:`cleanrooms`: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.44.9 * api-change:`connect`: Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kafkaconnect`: This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect- fips as the service name. This is done to match the Kafka endpoints. * from version 1.44.8 * api-change:`connect`: Changes for Contact for Global Search * api-change:`quicksight`: This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.44.7 * api-change:`medialive`: AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.44.6 * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`geo-places`: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: Add additional validation to Outpost bucket names. * enhancement:`s3`: Adds new parameter `--case-conflict` that configures how case conflicts are handled on case-insensitive filesystems * from version 1.44.5 * api-change:`config`: Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.44.4 * api-change:`arc-region-switch`: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: It is a internal bug fix for region expansion * api-change:`wickr`: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: Add support for WebAuthn under user settings. * from version 1.44.3 * api-change:`appstream`: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: Adds support for ECR Create On Push * api-change:`ecs`: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iot`: This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: Added "Stopping" for the HANA Database Status. * enhancement:cloudtrail: Fixed performance issue in cloudtrail validate-logs command by scoping S3 digest file listing to the trail's region instead of processing digest files from all regions. * from version 1.44.2 * api-change:`gameliftstreams`: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: Add support for dbiResourceId in finding. * api-change:`inspector-scan`: Adds an additional OutputFormat * api-change:`kafkaconnect`: Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.44.1 * api-change:`iot`: Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.44.0 * api-change:`bedrock-agentcore-control`: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`entityresolution`: Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: Add support for SQ Dashboard Api * feature:Migration: Implement a `--v2-debug` flag and `AWS_CLI_UPGRADE_DEBUG_MODE` environment variable that detects breaking changes for AWS CLI v2 for entered commands. * from version 1.43.15 * api-change:`bcm-recommended-actions`: Added new freetier action types to RecommendedAction.type. * api-change:`connect`: Amazon Connect now offers automated post-chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.43.14 * api-change:`lambda`: Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: Add SortBy parameter to ListSecrets * api-change:`sesv2`: Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.43.13 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: Adds support for Signer GetRevocationStatus with updated endpoints * Update to 1.43.12 * api-change:`account`: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.43.11 * api-change:`ce`: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: Update Mail Manager Archive ARN validation * from version 1.43.10 * api-change:`ecs`: Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * from version 1.43.9 * api-change:`lambda`: Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.43.8 * api-change:`bedrock`: Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.43.7 * api-change:`bedrock`: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: GPU-acceleration helps you build large- scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: New S3 Storage Class FSX_ONTAP * api-change:`s3control`: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: Added support for Amazon Database Savings Plans * api-change:`securityhub`: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.43.6 * api-change:`appintegrations`: This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: AWS Clean Rooms now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: This release adds support for EKS Capabilities * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi- product solutions. * api-change:`partnercentral-account`: Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * from version 1.43.5 * api-change:`bedrock-runtime`: Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.43.4 * api-change:`ec2`: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: Network Firewall release of the Proxy feature. * api-change:`organizations`: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: Adds support for new route53 feature: accelerated recovery. * Update to 1.43.3 * api-change:`cloudfront`: Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * from version 1.43.2 * api-change:`apigateway`: API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: Add support for ECR managed signing * api-change:`eks`: Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`invoicing`: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: This release adds support for Tiered Storage * api-change:`kms`: Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: Add support for resources in the aws-eusc partition. * api-change:`marketplace-entitlement`: Endpoint update for new region * api-change:`mediapackagev2`: Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: Endpoint update for new region * api-change:`odb`: Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: Add support for Upgrade Rollout Order * api-change:`redshift`: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: Adds support for creating Webapps accessible from a VPC. * from version 1.43.1 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large- scale distributed applications. * api-change:`autoscaling`: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: Bedrock Data Automation Runtime Sync API * api-change:`braket`: Add support for Braket spending limits. * api-change:`budgets`: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: Add support for environment variables and an IAM execution role. * api-change:`dms`: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. * api-change:`networkmanager`: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: Add support for EBS volume in Recycle Bin * api-change:`rds`: Add support for VPC Encryption Controls. * api-change:`redshift-data`: Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.43.0 * api-change:`apigateway`: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: Support for API Gateway portals and portal products. * api-change:`backup`: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: This release includes support for Search Results. * api-change:`billing`: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: Release ListEfficiencyMetrics API * api-change:`datazone`: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: Add support for scanning and viewing scan results for backup resource types * api-change:`health`: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: Initial GA launch of Partner Central Channel * api-change:`route53`: Add dual-stack endpoint support for Route53 * api-change:`rum`: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.42.76 * api-change:`autoscaling`: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. * api-change:`iam`: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.42.75 * api-change:`appstream`: Adding support for additional instances and extended storage * api-change:`backup`: AWS Backup now supports specifying a logically air- gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.42.74 * api-change:`datazone`: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * from version 1.42.73 * api-change:`cloudformation`: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`iotwireless`: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: Updated endpoint and service metadata * api-change:`sagemaker`: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.42.72 * api-change:`amp`: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.42.71 * api-change:`batch`: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`medical-imaging`: Added new fields in existing APIs. * api-change:`rtbfabric`: Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.42.70 * api-change:`acm-pca`: Private Certificate Authority service now supports ML- DSA key algorithms. * api-change:`appstream`: AWS Appstream support for IPv6 * api-change:`backup`: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.42.69 * api-change:`controltower`: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.42.68 * api-change:`accessanalyzer`: New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: Add Amazon EC2 R8a instance types * api-change:`gamelift`: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: Support for New Data Prep Experience * api-change:`s3tables`: Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: Provides NoLongerSupportedException error message * from version 1.42.67 * api-change:`cloudfront`: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: Added support for Project Resource Tags * api-change:`ec2`: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.42.66 * api-change:`pinpoint-sms-voice-v2`: This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: Fix the AWS Budgets endpoint for the aws-eusc partition. * api-change:`ec2`: Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kinesis`: Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.42.64 * api-change:`connectcases`: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fms`: Update endpoint ruleset parameters casing * api-change:`fsx`: Update endpoint ruleset parameters casing * api-change:`health`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: Update endpoint ruleset parameters casing * api-change:`mediaconvert`: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: Update endpoint ruleset parameters casing * api-change:`textract`: Update endpoint ruleset parameters casing * api-change:`waf`: Update endpoint ruleset parameters casing * from version 1.42.63 * api-change:`amp`: Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: Update endpoint ruleset parameters casing * api-change:`appconfig`: Update endpoint ruleset parameters casing * api-change:`appflow`: Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: Update endpoint ruleset parameters casing * api-change:`appmesh`: Update endpoint ruleset parameters casing * api-change:`appsync`: Update endpoint ruleset parameters casing * api-change:`artifact`: Update endpoint ruleset parameters casing * api-change:`auditmanager`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: Update endpoint ruleset parameters casing * api-change:`cleanrooms`: Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: Update endpoint ruleset parameters casing * api-change:`clouddirectory`: Update endpoint ruleset parameters casing * api-change:`cloudsearch`: Update endpoint ruleset parameters casing * api-change:`cloudwatch`: Update endpoint ruleset parameters casing * api-change:`codecatalyst`: Update endpoint ruleset parameters casing * api-change:`codecommit`: Update endpoint ruleset parameters casing * api-change:`codedeploy`: Update endpoint ruleset parameters casing * api-change:`cognito-sync`: Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: Update endpoint ruleset parameters casing * api-change:`connectcases`: Update endpoint ruleset parameters casing * api-change:`deadline`: Update endpoint ruleset parameters casing * api-change:`devops-guru`: Update endpoint ruleset parameters casing * api-change:`docdb`: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: Update endpoint ruleset parameters casing * api-change:`elasticache`: Update endpoint ruleset parameters casing * api-change:`emr-serverless`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`firehose`: Update endpoint ruleset parameters casing * api-change:`frauddetector`: Update endpoint ruleset parameters casing * api-change:`geo-places`: Update endpoint ruleset parameters casing * api-change:`glue`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: Update endpoint ruleset parameters casing * api-change:`iotevents-data`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: Update endpoint ruleset parameters casing * api-change:`kms`: Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: Update endpoint ruleset parameters casing * api-change:`neptune`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: RTB Fabric documentation update. * api-change:`s3outposts`: Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: Update endpoint ruleset parameters casing * api-change:`schemas`: Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: Update endpoint ruleset parameters casing * api-change:`servicecatalog`: Update endpoint ruleset parameters casing * api-change:`sso`: Update endpoint ruleset parameters casing * api-change:`sts`: Update endpoint ruleset parameters casing * from version 1.42.62 * api-change:`bedrock-runtime`: Add support for system tool and web citation response. * from version 1.42.61 * api-change:`apigatewayv2`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: Update endpoint ruleset parameters casing * api-change:`cloud9`: Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: Update endpoint ruleset parameters casing * api-change:`codeconnections`: Update endpoint ruleset parameters casing * api-change:`codeguru-security`: Update endpoint ruleset parameters casing * api-change:`detective`: Update endpoint ruleset parameters casing * api-change:`ec2`: This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: Update endpoint ruleset parameters casing * api-change:`emr-containers`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`gameliftstreams`: Add stream group expiration date and expired status * api-change:`glacier`: Update endpoint ruleset parameters casing * api-change:`groundstation`: Enable use of AzEl ephemerides * api-change:`inspector-scan`: Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: Update endpoint ruleset parameters casing * api-change:`kendra`: Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: Update endpoint ruleset parameters casing * api-change:`lambda`: Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: Update endpoint ruleset parameters casing * api-change:`notifications`: Update endpoint ruleset parameters casing * api-change:`opensearch`: Update endpoint ruleset parameters casing * api-change:`organizations`: Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: Update endpoint ruleset parameters casing * api-change:`pipes`: Update endpoint ruleset parameters casing * api-change:`ram`: Update endpoint ruleset parameters casing * api-change:`resource-groups`: Update endpoint ruleset parameters casing * api-change:`s3`: Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: Update endpoint ruleset parameters casing * api-change:`security-ir`: Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: Update endpoint ruleset parameters casing * api-change:`sqs`: Update endpoint ruleset parameters casing * api-change:`support-app`: Update endpoint ruleset parameters casing * api-change:`taxsettings`: Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: Update endpoint ruleset parameters casing * api-change:`xray`: Update endpoint ruleset parameters casing * from version 1.42.60 * api-change:`accessanalyzer`: Update endpoint ruleset parameters casing * api-change:`aiops`: Update endpoint ruleset parameters casing * api-change:`athena`: Update endpoint ruleset parameters casing * api-change:`backup-gateway`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: Update endpoint ruleset parameters casing * api-change:`braket`: Update endpoint ruleset parameters casing * api-change:`ce`: Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: Update endpoint ruleset parameters casing * api-change:`codeartifact`: Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: Update endpoint ruleset parameters casing * api-change:`cognito-idp`: Update endpoint ruleset parameters casing * api-change:`comprehend`: Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: Update endpoint ruleset parameters casing * api-change:`controltower`: Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: Update endpoint ruleset parameters casing * api-change:`dax`: Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`entityresolution`: Update endpoint ruleset parameters casing * api-change:`forecast`: Update endpoint ruleset parameters casing * api-change:`greengrass`: Update endpoint ruleset parameters casing * api-change:`iam`: Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: Update endpoint ruleset parameters casing * api-change:`lex-runtime`: Update endpoint ruleset parameters casing * api-change:`managedblockchain`: Update endpoint ruleset parameters casing * api-change:`mturk`: Update endpoint ruleset parameters casing * api-change:`neptune-graph`: Update endpoint ruleset parameters casing * api-change:`outposts`: Update endpoint ruleset parameters casing * api-change:`pinpoint`: Update endpoint ruleset parameters casing * api-change:`rbin`: Update endpoint ruleset parameters casing * api-change:`rds-data`: Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: Update endpoint ruleset parameters casing * api-change:`rekognition`: Update endpoint ruleset parameters casing * api-change:`repostspace`: Update endpoint ruleset parameters casing * api-change:`route53profiles`: Update endpoint ruleset parameters casing * api-change:`route53resolver`: Update endpoint ruleset parameters casing * api-change:`s3vectors`: Update endpoint ruleset parameters casing * api-change:`scheduler`: Update endpoint ruleset parameters casing * api-change:`secretsmanager`: Update endpoint ruleset parameters casing * api-change:`ses`: Update endpoint ruleset parameters casing * api-change:`shield`: Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: Update endpoint ruleset parameters casing * api-change:`socialmessaging`: Update endpoint ruleset parameters casing * api-change:`ssm-sap`: Update endpoint ruleset parameters casing * api-change:`sso-admin`: Update endpoint ruleset parameters casing * api-change:`stepfunctions`: Update endpoint ruleset parameters casing * api-change:`waf-regional`: Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: Update endpoint ruleset parameters casing * from version 1.42.59 * api-change:`acm`: Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Update endpoint ruleset parameters casing * api-change:`billing`: Update endpoint ruleset parameters casing * api-change:`budgets`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: Update endpoint ruleset parameters casing * api-change:`cloudtrail`: Update endpoint ruleset parameters casing * api-change:`codepipeline`: Update endpoint ruleset parameters casing * api-change:`datapipeline`: Update endpoint ruleset parameters casing * api-change:`datazone`: This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: Update endpoint ruleset parameters casing * api-change:`eks`: Update endpoint ruleset parameters casing * api-change:`elb`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`evs`: Update endpoint ruleset parameters casing * api-change:`fis`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Update endpoint ruleset parameters casing * api-change:`iotwireless`: Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: Update endpoint ruleset parameters casing * api-change:`location`: Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: Update endpoint ruleset parameters casing * api-change:`mediapackage`: Update endpoint ruleset parameters casing * api-change:`mediastore`: Update endpoint ruleset parameters casing * api-change:`mediastore-data`: Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: Update endpoint ruleset parameters casing * api-change:`mq`: Update endpoint ruleset parameters casing * api-change:`panorama`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: Update endpoint ruleset parameters casing * api-change:`qbusiness`: Update endpoint ruleset parameters casing * api-change:`robomaker`: Update endpoint ruleset parameters casing * api-change:`route53domains`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Add support for custom rate limits. * api-change:`s3tables`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Added inference components model data caching feature * api-change:`sagemaker-metrics`: Update endpoint ruleset parameters casing * api-change:`securityhub`: Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: Update endpoint ruleset parameters casing * api-change:`snow-device-management`: Update endpoint ruleset parameters casing * api-change:`sso-oidc`: Update endpoint ruleset parameters casing * api-change:`supplychain`: Update endpoint ruleset parameters casing * api-change:`translate`: Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: Update endpoint ruleset parameters casing * api-change:`wisdom`: Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: Update endpoint ruleset parameters casing * from version 1.42.58 * api-change:`account`: Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: Fixing the service documentation name * api-change:`bedrock-agentcore-control`: Fixing the service documentation name * api-change:`chime-sdk-voice`: Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: Update endpoint ruleset parameters casing * api-change:`codebuild`: Update endpoint ruleset parameters casing * api-change:`codestar-connections`: Update endpoint ruleset parameters casing * api-change:`config`: Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: Update endpoint ruleset parameters casing * api-change:`cur`: Update endpoint ruleset parameters casing * api-change:`discovery`: Update endpoint ruleset parameters casing * api-change:`dms`: Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: Update endpoint ruleset parameters casing * api-change:`drs`: Update endpoint ruleset parameters casing * api-change:`dsql`: Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: Update endpoint ruleset parameters casing * api-change:`ecr`: Update endpoint ruleset parameters casing * api-change:`ecr-public`: Update endpoint ruleset parameters casing * api-change:`healthlake`: Update endpoint ruleset parameters casing * api-change:`internetmonitor`: Update endpoint ruleset parameters casing * api-change:`iotevents`: Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: Update endpoint ruleset parameters casing * api-change:`mediatailor`: Update endpoint ruleset parameters casing * api-change:`mgh`: Update endpoint ruleset parameters casing * api-change:`mgn`: Update endpoint ruleset parameters casing * api-change:`mpa`: Update endpoint ruleset parameters casing * api-change:`neptunedata`: Update endpoint ruleset parameters casing * api-change:`networkmonitor`: Update endpoint ruleset parameters casing * api-change:`odb`: Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: Update endpoint ruleset parameters casing * api-change:`personalize-events`: Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: Update endpoint ruleset parameters casing * api-change:`resiliencehub`: Update endpoint ruleset parameters casing * api-change:`rum`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: Update endpoint ruleset parameters casing * api-change:`savingsplans`: Update endpoint ruleset parameters casing * api-change:`securitylake`: Update endpoint ruleset parameters casing * api-change:`sesv2`: Update endpoint ruleset parameters casing * api-change:`storagegateway`: Update endpoint ruleset parameters casing * api-change:`synthetics`: Update endpoint ruleset parameters casing * from version 1.42.57 * api-change:`appfabric`: Update endpoint ruleset parameters casing * api-change:`autoscaling`: Update endpoint ruleset parameters casing * api-change:`b2bi`: Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: Update endpoint ruleset parameters casing * api-change:`ce`: Update endpoint ruleset parameters casing * api-change:`chatbot`: Update endpoint ruleset parameters casing * api-change:`cloudformation`: Update endpoint ruleset parameters casing * api-change:`cloudhsm`: Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: Update endpoint ruleset parameters casing * api-change:`cognito-identity`: Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: Update endpoint ruleset parameters casing * api-change:`connect`: This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: Update endpoint ruleset parameters casing * api-change:`devicefarm`: This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: Update endpoint ruleset parameters casing * api-change:`ds-data`: Update endpoint ruleset parameters casing * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`forecastquery`: Update endpoint ruleset parameters casing * api-change:`iam`: Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: Update endpoint ruleset parameters casing * api-change:`iot`: Update endpoint ruleset parameters casing * api-change:`iotanalytics`: Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: Update endpoint ruleset parameters casing * api-change:`iotsitewise`: Update endpoint ruleset parameters casing * api-change:`ivschat`: Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: Update endpoint ruleset parameters casing * api-change:`lexv2-models`: Update endpoint ruleset parameters casing * api-change:`mailmanager`: Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: Update endpoint ruleset parameters casing * api-change:`medialive`: Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: Update endpoint ruleset parameters casing * api-change:`oam`: Update endpoint ruleset parameters casing * api-change:`pcs`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: Update endpoint ruleset parameters casing * api-change:`redshift-data`: Update endpoint ruleset parameters casing * api-change:`route53`: Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: Update endpoint ruleset parameters casing * api-change:`sns`: Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: Update endpoint ruleset parameters casing * api-change:`workdocs`: Update endpoint ruleset parameters casing * api-change:`workmail`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Update endpoint ruleset parameters casing * from version 1.42.56 * api-change:`dynamodb`: Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`mediaconvert`: This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * enhancement:timestamps: Add `wire` as a valid value for `cli_timestamp_format`. * from version 1.42.55 * api-change:`amp`: Update endpoint ruleset parameters casing * api-change:`amplifybackend`: Update endpoint ruleset parameters casing * api-change:`appconfigdata`: Update endpoint ruleset parameters casing * api-change:`appintegrations`: Update endpoint ruleset parameters casing * api-change:`application-insights`: Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: Update endpoint ruleset parameters casing * api-change:`cloudfront`: Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: Update endpoint ruleset parameters casing * api-change:`controlcatalog`: Update endpoint ruleset parameters casing * api-change:`datasync`: Update endpoint ruleset parameters casing * api-change:`ds`: Update endpoint ruleset parameters casing * api-change:`dsql`: Update endpoint ruleset parameters casing * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Update endpoint ruleset parameters casing * api-change:`events`: Update endpoint ruleset parameters casing * api-change:`evidently`: Update endpoint ruleset parameters casing * api-change:`finspace`: Update endpoint ruleset parameters casing * api-change:`finspace-data`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: Update endpoint ruleset parameters casing * api-change:`iot-data`: Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: Update endpoint ruleset parameters casing * api-change:`lakeformation`: Update endpoint ruleset parameters casing * api-change:`license-manager`: Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: Update endpoint ruleset parameters casing * api-change:`network-firewall`: Update endpoint ruleset parameters casing * api-change:`networkmanager`: Update endpoint ruleset parameters casing * api-change:`organizations`: Update endpoint ruleset parameters casing * api-change:`pi`: Update endpoint ruleset parameters casing * api-change:`qapps`: Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: Update endpoint ruleset parameters casing * api-change:`signer`: Update endpoint ruleset parameters casing * api-change:`swf`: Releasing minor endpoint updates. * api-change:`timestream-write`: Update endpoint ruleset parameters casing * api-change:`tnb`: Update endpoint ruleset parameters casing * api-change:`wellarchitected`: Update endpoint ruleset parameters casing * from version 1.42.54 * api-change:`acm-pca`: Update endpoint ruleset parameters casing * api-change:`amplify`: Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: Update endpoint ruleset parameters casing * api-change:`apprunner`: Update endpoint ruleset parameters casing * api-change:`apptest`: Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: Update endpoint ruleset parameters casing * api-change:`billingconductor`: New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: Update endpoint ruleset parameters casing * api-change:`databrew`: Update endpoint ruleset parameters casing * api-change:`dataexchange`: Update endpoint ruleset parameters casing * api-change:`dlm`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`freetier`: Update endpoint ruleset parameters casing * api-change:`gamelift`: Update endpoint ruleset parameters casing * api-change:`geo-routes`: Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: Update endpoint ruleset parameters casing * api-change:`grafana`: Update endpoint ruleset parameters casing * api-change:`identitystore`: Update endpoint ruleset parameters casing * api-change:`ivs`: Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: Update endpoint ruleset parameters casing * api-change:`kafka`: Update endpoint ruleset parameters casing * api-change:`keyspaces`: Update endpoint ruleset parameters casing * api-change:`kms`: Update endpoint ruleset parameters casing * api-change:`lex-models`: Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: Update endpoint ruleset parameters casing * api-change:`m2`: Update endpoint ruleset parameters casing * api-change:`machinelearning`: Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: Update endpoint ruleset parameters casing * api-change:`medical-imaging`: Update endpoint ruleset parameters casing * api-change:`memorydb`: Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: Update endpoint ruleset parameters casing * api-change:`osis`: Update endpoint ruleset parameters casing * api-change:`personalize`: Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: Update endpoint ruleset parameters casing * api-change:`polly`: Update endpoint ruleset parameters casing * api-change:`pricing`: Update endpoint ruleset parameters casing * api-change:`qldb`: Update endpoint ruleset parameters casing * api-change:`qldb-session`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: Update endpoint ruleset parameters casing * api-change:`ssm`: Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: Update endpoint ruleset parameters casing * api-change:`timestream-query`: Update endpoint ruleset parameters casing * api-change:`voice-id`: Update endpoint ruleset parameters casing * api-change:`workspaces-web`: Update endpoint ruleset parameters casing * from version 1.42.53 * api-change:`bedrock`: Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.42.52 * api-change:`appstream`: This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: This release adds support for creating instant, point-in- time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: Move UntagResource API body member to query parameter * api-change:`transfer`: SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.42.51 * api-change:`bedrock-agentcore`: Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update to 1.42.50 * api-change:`bedrock-agentcore`: Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update to 1.42.49 * api-change:`quicksight`: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.42.48 * api-change:`bedrock-agentcore-control`: Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: Released support for IPv6 and dual-stack active directories * api-change:`outposts`: This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.42.47 * api-change:`proton`: Deprecating APIs in AWS Proton namespace. * from version 1.42.46 * api-change:`backup`: Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: Add new AWS Resource Explorer APIs * from version 1.42.45 * api-change:`cleanrooms`: Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.42.44 * api-change:`cloudformation`: Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`guardduty`: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: Adds support to configure canaries with pre- configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.42.43 * api-change:`chime-sdk-meetings`: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.42.42 * api-change:`application-signals`: Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: AWS Directory service now supports IPv6-native and dual- stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: added warnings to a few CLI pages * api-change:`rds`: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: Add support for updating server identity provider type * enhancement:`eks`: Add `proxy-url` to `aws eks update-kubeconfig`. * from version 1.42.41 * api-change:`bedrock`: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.42.40 * api-change:`bedrock-agent-runtime`: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: Support for payer account dimension and billing view health status. * api-change:`connect`: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`redshift`: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.42.39 * api-change:`glue`: Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.42.38 * api-change:`appstream`: G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kms`: Documentation only updates for KMS. * api-change:`neptune`: Doc-only update to address customer use. * from version 1.42.37 * api-change:`cleanrooms`: Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: This release includes exception definition and documentation updates. * from version 1.42.36 * api-change:`batch`: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.42.35 * api-change:`bedrock-agentcore-control`: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: Added support for cross- account Active Directories. * api-change:`medialive`: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sqs`: Update invalid character handling documentation for SQS SendMessage API * from version 1.42.34 * api-change:`bedrock`: Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.42.33 * api-change:`ec2`: Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: Add support for Amazon EC2 Capacity Blocks for ML * from version 1.42.32 * api-change:`budgets`: Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.42.31 * api-change:`ce`: Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * from version 1.42.30 * api-change:`payment-cryptography`: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.42.29 * api-change:`amp`: Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: adding IAM principal id to IAM user profile details * api-change:`ecs`: This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS- related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.42.28 * api-change:`networkflowmonitor`: Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.42.27 * api-change:`autoscaling`: Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: SDK release for user defined predefined attributes. * api-change:`datazone`: Adds support for custom blueprints * api-change:`mediapackagev2`: Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.42.26 * api-change:`iotsitewise`: Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * from version 1.42.25 * api-change:`ecs`: This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.42.24 * api-change:`cleanrooms`: Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.42.23 * api-change:`cleanrooms`: Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.42.22 * api-change:`ec2`: MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.42.21 * api-change:`bedrock-runtime`: Fixed stop sequence limit for converse API. * api-change:`ec2`: Release shows new route types such as filtered and advertisement. * api-change:`xray`: AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.42.20 * api-change:`applicationcostprofiler`: Remove incorrect endpoint tests * api-change:`apprunner`: Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: Remove incorrect endpoint tests * api-change:`cloud9`: Remove incorrect endpoint tests * api-change:`cloudhsmv2`: Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: Remove incorrect endpoint tests * api-change:`codedeploy`: Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: Remove incorrect endpoint tests * api-change:`connect`: AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`ec2`: This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fis`: Remove incorrect endpoint tests * api-change:`fms`: Remove incorrect endpoint tests * api-change:`geo-maps`: Remove incorrect endpoint tests * api-change:`glue`: Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: Remove incorrect endpoint tests * api-change:`mediastore-data`: Remove incorrect endpoint tests * api-change:`mturk`: Remove incorrect endpoint tests * api-change:`omics`: Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: Remove incorrect endpoint tests * api-change:`rds`: Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: Remove incorrect endpoint tests * api-change:`savingsplans`: Remove incorrect endpoint tests * api-change:`scheduler`: Remove incorrect endpoint tests * api-change:`ses`: Remove incorrect endpoint tests * api-change:`ssm-sap`: Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: Remove incorrect endpoint tests * api-change:`timestream-query`: Remove incorrect endpoint tests * api-change:`waf`: Remove incorrect endpoint tests * api-change:`workmailmessageflow`: Remove incorrect endpoint tests * api-change:`xray`: Remove incorrect endpoint tests * from version 1.42.19 * api-change:`amplifybackend`: Remove incorrect endpoint tests * api-change:`application-insights`: Remove incorrect endpoint tests * api-change:`batch`: Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: Remove incorrect endpoint tests * api-change:`codeguruprofiler`: Remove incorrect endpoint tests * api-change:`datapipeline`: Remove incorrect endpoint tests * api-change:`discovery`: Remove incorrect endpoint tests * api-change:`ds`: Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`evidently`: Remove incorrect endpoint tests * api-change:`frauddetector`: Remove incorrect endpoint tests * api-change:`inspector`: Remove incorrect endpoint tests * api-change:`kinesisvideo`: Remove incorrect endpoint tests * api-change:`kinesis-video-media`: Remove incorrect endpoint tests * api-change:`lakeformation`: Remove incorrect endpoint tests * api-change:`lex-models`: Remove incorrect endpoint tests * api-change:`migrationhub-config`: Remove incorrect endpoint tests * api-change:`neptune-graph`: Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`personalize`: Remove incorrect endpoint tests * api-change:`pi`: Remove incorrect endpoint tests * api-change:`qldb-session`: Remove incorrect endpoint tests * api-change:`redshift`: Remove incorrect endpoint tests * api-change:`robomaker`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: Remove incorrect endpoint tests * api-change:`snow-device-management`: Remove incorrect endpoint tests * api-change:`timestream-write`: Remove incorrect endpoint tests * api-change:`voice-id`: Remove incorrect endpoint tests * api-change:`workdocs`: Remove incorrect endpoint tests * api-change:`workmail`: Remove incorrect endpoint tests * from version 1.42.18 * api-change:`apprunner`: Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: Remove incorrect endpoint tests * api-change:`codestar-connections`: Remove incorrect endpoint tests * api-change:`comprehendmedical`: Remove incorrect endpoint tests * api-change:`connectparticipant`: Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: Remove incorrect endpoint tests * api-change:`ec2`: Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`finspace`: Remove incorrect endpoint tests * api-change:`geo-routes`: Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: Remove incorrect endpoint tests * api-change:`globalaccelerator`: Remove incorrect endpoint tests * api-change:`greengrass`: Remove incorrect endpoint tests * api-change:`identitystore`: Remove incorrect endpoint tests * api-change:`imagebuilder`: Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: Remove incorrect endpoint tests * api-change:`kafka`: Remove incorrect endpoint tests * api-change:`lookoutvision`: Remove incorrect endpoint tests * api-change:`mgh`: Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: Remove incorrect endpoint tests * api-change:`mq`: Remove incorrect endpoint tests * api-change:`personalize-events`: Remove incorrect endpoint tests * api-change:`pinpoint`: Remove incorrect endpoint tests * api-change:`ram`: Remove incorrect endpoint tests * api-change:`rbin`: Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: Remove incorrect endpoint tests * api-change:`signer`: Remove incorrect endpoint tests * api-change:`waf-regional`: Remove incorrect endpoint tests * from version 1.42.17 * api-change:`appflow`: Remove incorrect endpoint tests * api-change:`b2bi`: Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: Remove incorrect endpoint tests * api-change:`cloudsearch`: Remove incorrect endpoint tests * api-change:`cloudtrail-data`: Remove incorrect endpoint tests * api-change:`codeartifact`: Remove incorrect endpoint tests * api-change:`codeguru-security`: Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: Remove incorrect endpoint tests * api-change:`cur`: Remove incorrect endpoint tests * api-change:`datazone`: Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: Remove incorrect endpoint tests * api-change:`devops-guru`: Remove incorrect endpoint tests * api-change:`ec2`: Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`finspace-data`: Remove incorrect endpoint tests * api-change:`forecast`: Remove incorrect endpoint tests * api-change:`iotfleethub`: Remove incorrect endpoint tests * api-change:`kendra`: Remove incorrect endpoint tests * api-change:`kinesisanalytics`: Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: Remove incorrect endpoint tests * api-change:`lex-runtime`: Remove incorrect endpoint tests * api-change:`lookoutequipment`: Remove incorrect endpoint tests * api-change:`mediaconvert`: This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: Remove incorrect endpoint tests * api-change:`mediastore`: Remove incorrect endpoint tests * api-change:`personalize-runtime`: Remove incorrect endpoint tests * api-change:`qbusiness`: The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: Remove incorrect endpoint tests * api-change:`sagemaker-edge`: Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: Remove incorrect endpoint tests * api-change:`serverlessrepo`: Remove incorrect endpoint tests * api-change:`shield`: Remove incorrect endpoint tests * api-change:`snowball`: Remove incorrect endpoint tests * api-change:`sqs`: Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: Remove incorrect endpoint tests * api-change:`support-app`: Remove incorrect endpoint tests * api-change:`timestream-influxdb`: Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: Remove incorrect endpoint tests * api-change:`wellarchitected`: Remove incorrect endpoint tests * from version 1.42.16 * api-change:`clouddirectory`: Remove incorrect endpoint tests * api-change:`cognito-sync`: Remove incorrect endpoint tests * api-change:`docdb`: Remove incorrect endpoint tests * api-change:`elb`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`healthlake`: Remove incorrect endpoint tests * api-change:`iotanalytics`: Remove incorrect endpoint tests * api-change:`macie2`: Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: Remove incorrect endpoint tests * api-change:`medialive`: AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: Remove incorrect endpoint tests * api-change:`proton`: Remove incorrect endpoint tests * api-change:`qconnect`: Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: Remove incorrect endpoint tests * api-change:`rds`: Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: Remove incorrect endpoint tests * api-change:`sagemaker`: Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: Remove incorrect endpoint tests * api-change:`simspaceweaver`: Remove incorrect endpoint tests * api-change:`synthetics`: Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: test and verified, safe to release * from version 1.42.15 * api-change:`apigatewaymanagementapi`: Remove incorrect endpoint tests * api-change:`appfabric`: Remove incorrect endpoint tests * api-change:`backup-gateway`: Remove incorrect endpoint tests * api-change:`cloudhsm`: Remove incorrect endpoint tests * api-change:`cognito-identity`: Remove incorrect endpoint tests * api-change:`comprehend`: Remove incorrect endpoint tests * api-change:`ebs`: Remove incorrect endpoint tests * api-change:`ecr-public`: Remove incorrect endpoint tests * api-change:`ecs`: This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`es`: Remove incorrect endpoint tests * api-change:`forecastquery`: Remove incorrect endpoint tests * api-change:`gameliftstreams`: The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: Remove incorrect endpoint tests * api-change:`guardduty`: Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: Remove incorrect endpoint tests * api-change:`iotevents`: Remove incorrect endpoint tests * api-change:`iotevents-data`: Remove incorrect endpoint tests * api-change:`iotthingsgraph`: Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: Remove incorrect endpoint tests * api-change:`lexv2-runtime`: Remove incorrect endpoint tests * api-change:`lookoutmetrics`: Remove incorrect endpoint tests * api-change:`managedblockchain`: Remove incorrect endpoint tests * api-change:`mediapackage`: Remove incorrect endpoint tests * api-change:`panorama`: Remove incorrect endpoint tests * api-change:`pinpoint-email`: Remove incorrect endpoint tests * api-change:`resource-groups`: Remove incorrect endpoint tests * api-change:`s3outposts`: Remove incorrect endpoint tests * api-change:`ssm-contacts`: Doc-only updates for Incident Manager Contacts August 2025 * from version 1.42.14 * api-change:`bedrock-runtime`: Launch CountTokens API to allow token counting * api-change:`billing`: Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: This release supports policy grant identifier for cloud formation integration * api-change:`detective`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`eks`: EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`kinesisanalyticsv2`: Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.42.13 * api-change:`cleanrooms`: Support error message configuration for analysis templates * api-change:`ec2`: Add support for "warning" volume status. * api-change:`polly`: Added support for new output format - Opus. * from version 1.42.12 * api-change:`batch`: Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`s3control`: Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * from version 1.42.11 * api-change:`amp`: Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.42.10 * api-change:`arc-region-switch`: Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`fsx`: Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: Added support for entity lists. * api-change:`medialive`: CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.42.9 * api-change:`braket`: Add support for Braket program sets. * api-change:`datazone`: Adds support for account pools and project profile account decoupling * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: Add Tagging Support for Opportunity resources * api-change:`sagemaker`: This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * bugfix:`dynamodb`: Correct Scan and Scanned Count values when resuming a scan or query with a `--starting-token` * from version 1.42.8 * api-change:`backupsearch`: Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.42.7 * api-change:`bedrock`: This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: Updating SearchUserHierarchyGroups API * api-change:`deadline`: Adds support for Wait and Save feature in service- managed fleets * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: Added support for managing user background session for applications * from version 1.42.6 * api-change:`connect`: This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * from version 1.42.5 * api-change:`batch`: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: AWS CodeBuild now supports comment-based pull request control. * api-change:`gameliftstreams`: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.42.4 * api-change:`appstream`: Added support for G6 instances * api-change:`budgets`: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.42.3 * api-change:`bedrock`: This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: Add support for deletion protection on EKS clusters * api-change:`rds`: Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.42.2 * api-change:`bedrock-agentcore`: Remove superfluous field from API * api-change:`codeconnections`: New integration with Azure DevOps provider type. * api-change:`evs`: TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.42.1 * api-change:`acm-pca`: Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: This is the initial SDK release for Region switch * api-change:`auditmanager`: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: Release new resource detail type CodeRepository * api-change:`sns`: Amazon SNS support for Amazon SQS fair queues * from version 1.42.0 * api-change:`customer-profiles`: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: Added Impala connector support * api-change:`s3control`: Add Tags field to CreateAccessPoint * api-change:`sesv2`: This release introduces support for Multi-tenant management * api-change:`workspaces-web`: Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.41.17 * api-change:`cloudfront`: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.41.16 * api-change:`batch`: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: Adds support for tag management on monitors. * api-change:`location`: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. * api-change:`opensearchserverless`: This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.41.15 * api-change:`directconnect`: Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * from version 1.41.14 * api-change:`appintegrations`: Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross- contact), and run background applications (service). * api-change:`budgets`: Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: Documentation updates for Amazon SQS fair queues feature. * from version 1.41.13 * api-change:`datazone`: This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: Add Git integration and README support for HealthOmics workflows * from version 1.41.12 * api-change:`ec2`: Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: Added the lastUserId parameter to the ListDevices and GetDevice API. * from version 1.41.11 * api-change:`ecr`: Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: This release updates the supported regions for Neptune API to include current AWS regions. * enhancement:EMR: Updated create-cluster and describe-cluster commands to support \--extended-support and --no-extended-support arguments * from version 1.41.10 * api-change:`cloudfront`: Add dualstack endpoint support * api-change:`deadline`: Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * enhancement:cloudfront: This release adds automatic pagination to the list- origin-access-controls command. To disable this behavior, please use the --no-paginate flag. * from version 1.41.9 * api-change:`auditmanager`: Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: July 2025 doc-only updates for Systems Manager. * from version 1.41.8 * api-change:`cleanroomsml`: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: Align input with style guidelines. * api-change:`synthetics`: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.41.7 * api-change:`bedrock`: This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: document update to support on demand custom model. * api-change:`datasync`: AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.41.6 * api-change:`ecs`: This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.41.5 * api-change:`bedrock-agent`: Add support for S3 Vectors as a vector store. * api-change:`datazone`: Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: Introduced custom instructions for topics. * api-change:`repostspace`: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.41.4 * api-change:`ec2`: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: Removing content that refers to an S3 bucket that is no longer in use. * from version 1.41.3 * api-change:`customer-profiles`: This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.41.2 * api-change:`connectcases`: This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * from version 1.41.1 * api-change:`cleanroomsml`: This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: Add support for the new optional domain-unit-id parameter in the UpdateProject API. * api-change:`ec2`: Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: Updated field validation requirements for InstanceGroups. * from version 1.41.0 * api-change:`arc-zonal-shift`: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: Added support for UNKNOWN drift status. * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.40.45 * api-change:`config`: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: Adding UnauthorizedException to public SDK * api-change:`rds`: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: Added support for new SES regions * from version 1.40.44 * api-change:`deadline`: Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.40.43 * api-change:`ecs`: Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: Remove Tags field from Get API responses * from version 1.40.42 * api-change:`aiops`: Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real- time network latency for multiplayer games. * api-change:`license-manager`: AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: This Feature Adds Support for the "et-EE" Locale for Batch Operations * from version 1.40.41 * api-change:`glue`: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: Added support for Amazon WorkSpaces Instances API * from version 1.40.40 * api-change:`bedrock`: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: Add ECS support for Windows Server 2025 * api-change:`geo-places`: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.40.39 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON-formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.40.38 * api-change:`aiops`: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: Added paginators for `imagebuilder`. * api-change:`logs`: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.40.37 * api-change:`accessanalyzer`: We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: Adds support for Exportable Public Certificates * api-change:`backup`: AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: Release of Active Threat Defense in Network Firewall * api-change:`organizations`: Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.40.36 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.40.35 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: Fixed regex patterns for ARN fields. * from version 1.40.34 * api-change:`controlcatalog`: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: WAF now provides two DDoS protection options: resource- level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * from version 1.40.33 * api-change:`gameliftstreams`: Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.40.32 * api-change:`appsync`: Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: Support dual-stack endpoints for ce api * api-change:`customer-profiles`: This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: Add ConflictException to UpdateEnvironment API * enhancement:`cloudformation`: High-level Cloudformation commands such as `deploy` and `package` will now fallback to SHA256 for checksumming if MD5 isn't present on the host * from version 1.40.31 * api-change:`bedrock-agent-runtime`: This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: S3 Tables now supports getting details about a table via its table ARN. * from version 1.40.30 * api-change:`bcm-pricing-calculator`: Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.40.29 * api-change:`amplify`: Update documentation for cacheConfig in CreateApp API * api-change:`evs`: Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.40.28 * api-change:`apigateway`: Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.40.27 * api-change:`athena`: Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: Add support for generating match IDs in near real-time. * api-change:`pcs`: Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: Support for Java runtime handler pattern. * from version 1.40.26 * api-change:`emr-serverless`: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.40.25 * api-change:`amplify`: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.40.24 * api-change:`cost-optimization-hub`: This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.40.23 * api-change:`ce`: This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update to 1.40.22 * api-change:`ec2`: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.40.21 * api-change:`amp`: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: Features: support for customer managed encryption keys * api-change:`glue`: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.40.20 * api-change:`application-autoscaling`: Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.40.19 * api-change:`datasync`: Remove Discovery APIs from the DataSync service * api-change:`ec2`: This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`rds`: This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.40.18 * api-change:`dsql`: CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: This release adds support for DVB-DASH, EBU- TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.40.17 * api-change:`bedrock-data-automation`: Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: This release introduces CreateSupportCase operation to SDK. * from version 1.40.16 * api-change:`bedrock-agent`: Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: Introduces Data Resync feature to describe-table- statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.40.15 * api-change:`cognito-idp`: Add exceptions to WebAuthn operations. * api-change:`firehose`: This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.40.14 * api-change:`bedrock`: Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: Changes for enhanced metadata in trace * api-change:`controltower`: AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi-Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.40.13 * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: Add support to the AV1 rate control mode * api-change:`mediatailor`: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.40.12 * api-change:`athena`: Minor API documentation updates * api-change:`logs`: We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.40.11 * api-change:`cloudfront`: Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: Updated description of a data structure. * api-change:`sso-admin`: Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.40.10 * api-change:`ec2`: This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.40.9 * api-change:`ec2`: This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: Add dualstack endpoints support. * from version 1.40.8 * api-change:`datazone`: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.40.7 * api-change:`bedrock-data-automation`: Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: Doc only update - fixed typos. * api-change:`kinesis`: Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.40.6 * api-change:`appconfig`: Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.40.5 * api-change:`bedrock`: You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.40.4 * api-change:`connectcases`: Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * bugfix:bundled-installer: Fix installing setup dependencies on newer versions of pip * from version 1.40.3 * api-change:`acm`: Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: Doc only update for GSI descriptions. * api-change:`imagebuilder`: Add integration with SSM Parameter Store to Image Builder. * from version 1.40.2 * api-change:`bedrock-runtime`: You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.40.1 * api-change:`apprunner`: AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: Add data source support to Event APIs * api-change:`bedrock-data-automation`: Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: Remove redundant validation check. * api-change:`dynamodb`: Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: Documentation only release for Amazon ECS * api-change:`pcs`: Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update to 1.40.0 * api-change:`codebuild`: Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`resource-explorer-2`: Documentation-only update for CreateView option correction * feature:`eks`: Add assume-role-arn option to update-kubeconfig command for cross-account access * from version 1.39.0 * api-change:`account`: AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: This release adds refresh token rotation. * api-change:`ec2`: Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: Fix endpoint resolution test cases * feature:Python: End of support for Python 3.8 * feature:Python: End of support for Python 3.8 * from version 1.38.38 * api-change:`arc-zonal-shift`: Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.38.37 * api-change:`qconnect`: This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.38.36 * api-change:`accessanalyzer`: Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: Add versioning for HealthOmics workflows * from version 1.38.35 * api-change:`connectcases`: This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer-managed keys. * api-change:`servicecatalog`: Updated default value for the access-level- filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * bugfix:Formatter: Update JSON formatter to encode raw bytes as UTF-8. * from version 1.38.34 * api-change:`entityresolution`: This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: Indonesia SOR Tax Registration Launch * from version 1.38.33 * api-change:`connect-contact-lens`: Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: Add support for Detective DualStack endpoints * api-change:`dynamodb`: Doc only update for API descriptions. * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * from version 1.38.32 * api-change:`application-autoscaling`: Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: Add support to analysis and sheet level highlighting in QuickSight. * from version 1.38.31 * api-change:`controlcatalog`: The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: Documentation update for secondary indexes and Create_Table. * api-change:`glue`: The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: Support tagging Agents and adjust input field validations * api-change:`transfer`: This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.38.30 * api-change:`bedrock-runtime`: This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: Documentation updates for AWS Security Hub. * api-change:`storagegateway`: Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: Uzbekistan Launch on TaxSettings Page * from version 1.38.29 * api-change:`bedrock`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: Add input validations for multiple Glue APIs * api-change:`medialive`: AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.38.28 * api-change:`ds-data`: Doc only update - fixed broken links. * api-change:`ec2`: Doc-only updates for Amazon EC2 * api-change:`events`: Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: Updated max size of Prefixes parameter of Scope data type. * from version 1.38.27 * api-change:`bedrock-agent`: Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: Improve descriptions for various API commands and data types. * api-change:`route53`: Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: This Feature Adds Support for the "zh-HK" Locale for Batch Operations * from version 1.38.26 * api-change:`application-signals`: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.38.25 * api-change:`cleanrooms`: This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.38.24 * api-change:`bedrock-runtime`: Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: Add dual-stack support to global endpoints. * api-change:`transfer`: Add WebAppEndpointPolicy support for WebApps * from version 1.38.23 * api-change:`apigateway`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.38.22 * api-change:`batch`: This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: bedrock flow now support node action trace. * api-change:`cloudformation`: Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.38.21 * api-change:`arc-zonal-shift`: Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.38.20 * api-change:`bedrock-agent`: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: Minor updates to improve developer experience. * api-change:`keyspaces`: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: Deprecate tags field in Get API responses * from version 1.38.19 * api-change:`iotwireless`: Mark EutranCid under LteNmr optional. * api-change:`pcs`: ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: Provides the correct value for supported model ID. * api-change:`ssm`: This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.38.18 * api-change:`bedrock`: A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt- in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.38.17 * api-change:`amplify`: Added appId field to Webhook responses * api-change:`bedrock`: With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.38.16 * api-change:`bedrock`: Support custom prompt routers for evaluation jobs * api-change:`ec2`: Doc-only updates for EC2 for March 2025. * api-change:`lambda`: Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.38.15 * api-change:`appsync`: Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.38.14 * api-change:`application-signals`: This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.38.13 * api-change:`cognito-identity`: Updated API model build artifacts for identity pools * api-change:`cognito-idp`: Minor description updates to API parameters * api-change:`glue`: This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.38.12 * api-change:`acm-pca`: Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: This release adds support to update projects and environments * api-change:`dynamodb`: Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * from version 1.38.11 * api-change:`ec2`: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: Adding componentArn to network reachability details * api-change:`medialive`: Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.38.10 * api-change:`bedrock-agent`: Add support for computer use tools * api-change:`bedrock-agent-runtime`: Add support for computer use tools * api-change:`ce`: Releasing minor partition endpoint updates. * api-change:`connect`: Add support for contact transfers in external voice systems. * api-change:`medialive`: Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: This release updates the default value of pprof-disabled from false to true. * from version 1.38.9 * api-change:`bedrock-agent`: Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: Documentation updates for Amazon CloudFront. * api-change:`ec2`: Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: Several small updates to resolve customer requests. * from version 1.38.8 * api-change:`bedrock`: This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: Doc-only update for CloudTrail. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.38.7 * api-change:`bedrock-runtime`: This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.38.6 * api-change:`elasticache`: Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: AWS IoT SiteWise now supports MQTT-enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: Note support for Database Insights for Amazon RDS. * from version 1.38.5 * api-change:`cognito-idp`: Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: Update the DescribeVpcs response * api-change:`qbusiness`: Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: Add DomainId to CreateDomainResponse * api-change:`transcribe`: Updating documentation for post call analytics job queueing. * from version 1.38.4 * api-change:`bedrock-agent`: This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: Systems Manager doc-only updates for Feb. 2025. * from version 1.38.3 * api-change:`bedrock-agent-runtime`: Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: Definition update for EbsConfiguration. * api-change:`qbusiness`: This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.38.2 * api-change:`application-signals`: This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk- mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk- voice. * api-change:`cloudfront`: Documentation update for VPC origin config. * api-change:`ec2`: Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * from version 1.38.1 * api-change:`codebuild`: Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.38.0 * api-change:`bedrock-agent`: This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: Documentation update, adding clarity and rephrasing. * feature:Endpoints: Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account-id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.37.26 * api-change:`appstream`: Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.37.25 * api-change:`codebuild`: Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: Add support for toolbar configuration under user settings. * from version 1.37.24 * api-change:`codepipeline`: Add environment variables to codepipeline action declaration. * api-change:`ecs`: This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: Documentation updates for Amazon Lightsail. * api-change:`location`: Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.37.23 * api-change:`batch`: This documentation-only update corrects some typos. * api-change:`emr-containers`: EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.37.22 * api-change:`amplify`: Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: This release introduces APIs to manage DbClusters and adds support for read replicas * from version 1.37.21 * api-change:`codebuild`: Added test suite names to test case metadata * api-change:`connect`: Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: Add support for Stop DB feature. * api-change:`s3`: Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: Update Environment and Device name field definitions * from version 1.37.20 * api-change:`accessanalyzer`: This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.37.19 * api-change:`b2bi`: Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: Support for in-place Lustre version upgrades * api-change:`medialive`: Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * from version 1.37.18 * api-change:`acm-pca`: Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: Add support for operation level caching * api-change:`ec2`: Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.37.17 * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`cloudfront`: Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.37.16 * api-change:`ecr`: Adds support to handle the new basic scanning daily quota. * api-change:`eks`: Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.37.15 * api-change:`cloudformation`: We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * from version 1.37.14 * api-change:`rds`: Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.37.13 * api-change:`datasync`: Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: IPv6 support for Hyperpod clusters * from version 1.37.12 * api-change:`mediatailor`: Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * from version 1.37.11 * api-change:`amp`: Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.37.10 * api-change:`appstream`: Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: Add a 'reason' field to InternalServerException * api-change:`ecr`: Temporarily updating dualstack endpoint support * api-change:`ecr-public`: Temporarily updating dualstack endpoint support * api-change:`mediatailor`: Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: Adds Cedar JSON format support for entities and context data in authorization requests * from version 1.37.9 * api-change:`bcm-pricing-calculator`: Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: Add support for Dualstack and Dualstack-with-FIPS Endpoints * api-change:`ecr-public`: Add support for Dualstack Endpoints * api-change:`mailmanager`: This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.37.8 * api-change:`appsync`: Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.37.7 * api-change:`bedrock-agent`: Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * from version 1.37.6 * api-change:`cloudtrail`: This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: Fixed typos in the descriptions. * api-change:`transfer`: Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.37.5 * api-change:`ec2`: Added "future" allocation type for future dated capacity reservation * from version 1.37.4 * api-change:`bedrock-agent-runtime`: Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: Docs Update for timeout changes * api-change:`medialive`: AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.37.3 * api-change:`batch`: Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt- in. * api-change:`logs`: Documentation-only update to address doc errors * api-change:`quicksight`: Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update to 1.37.2 * api-change:`bedrock-runtime`: Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: Doc only update for Detective documentation. * api-change:`ec2`: Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.37.1 * api-change:`ecs`: The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.37.0 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: Now supports streaming for inline agents. * api-change:`cognito-identity`: corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: Mark type in MaintenanceWindow as required. * feature:`s3`: The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.36.40 * api-change:`gamelift`: Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.36.39 * api-change:`artifact`: Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.36.38 * api-change:`redshift`: Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: Fixed typos in the descriptions. * from version 1.36.37 * api-change:`codebuild`: AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.36.36 * api-change:`rds`: Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.36.35 * api-change:`cloudhsmv2`: Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: This release makes Amazon DynamoDB point-in-time- recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * enhancement:`s3 ls`: Expose low-level `ListBuckets` parameters`Prefix`and`BucketRegion`to high-level`s3 ls`command as`\--bucket- name-prefix`and`\--bucket-region``. * from version 1.36.34 * api-change:`iotsecuretunneling`: Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: Allow vanity DNS domain when creating a new ASC instance * from version 1.36.33 * api-change:`ecs`: Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.36.32 * api-change:`appsync`: Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in- progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: In-flight message typo fix from 20k to 120k. * from version 1.36.31 * api-change:`ecr`: Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: Restoring custom endpoint functionality for ECR Public * from version 1.36.30 * api-change:`rds`: Updates Amazon RDS documentation to correct various descriptions. * from version 1.36.29 * api-change:`bcm-pricing-calculator`: Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: Add support for Dualstack Endpoints * api-change:`network-firewall`: Dual-stack endpoints are now supported. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.36.28 * api-change:`ecr`: Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: Add support for Dualstack endpoints * api-change:`eks`: This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.36.27 * api-change:`bedrock-agent`: Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: Added new API's for defining and fetching Billing Views. * api-change:`ce`: Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: This release expands the catalog of upgrade insight checks * api-change:`macie2`: This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.36.26 * api-change:`appstream`: Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: MediaLive is releasing ListVersions api * api-change:`qconnect`: Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.36.25 * api-change:`amplify`: Added WAF Configuration to Amplify Apps * api-change:`budgets`: Releasing minor partition endpoint updates * api-change:`connect`: This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.36.24 * api-change:`account`: Update endpoint configuration. * api-change:`backup`: Add Support for Backup Indexing * api-change:`backupsearch`: Add support for searching backups * api-change:`batch`: This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.36.23 * api-change:`cloud9`: Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.36.22 * api-change:`cloudhsmv2`: Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.36.21 * api-change:`connect`: Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: Improved descriptions for certain APIs. * api-change:`route53domains`: This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.36.20 * api-change:`artifact`: Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: Doc-only updates for CloudTrail. * api-change:`cognito-idp`: Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.36.19 * api-change:`application-autoscaling`: Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update to 1.36.18 * api-change:`appsync`: Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: Added text to clarify case-sensitivity * from version 1.36.17 * api-change:`partnercentral-selling`: Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.36.16 * api-change:`bedrock`: Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.36.15 * api-change:`athena`: Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: Support for configuring AiOps investigation as alarm action * api-change:`datazone`: Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.36.14 * api-change:`bedrock-runtime`: Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: Added support for passing role arn corresponding to the supported event destination * from version 1.36.13 * api-change:`bedrock`: Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for Multi- Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: Add new Multi Domain Correlation findings. * api-change:`security-ir`: AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.36.12 * api-change:`bedrock-agent`: Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.36.11 * api-change:`bedrock-agent`: Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: Private sharing, file upload and data collection feature support for Q Apps * from version 1.36.10 * api-change:`directconnect`: Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.36.9 * api-change:`autoscaling`: Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: Add ProvisionedPollerConfig to Lambda event-source- mapping API. * api-change:`mailmanager`: Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.36.8 * api-change:`apigateway`: Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: Add support for the Amazon Bedrock Runtime. * api-change:`ce`: This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: Adds metadata property to an AffectedEntity. * api-change:`iot`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.36.7 * api-change:`autoscaling`: With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: Added data protection settings with support for inline data redaction. * from version 1.36.6 * api-change:`b2bi`: Add new X12 transactions sets and versions * api-change:`ec2`: This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: Add support for the new parameters in EFS replication APIs * api-change:`glue`: AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.36.5 * api-change:`appconfig`: AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adding request and response elements for managed resources. * api-change:`ecs`: This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.36.4 * api-change:`cloudwatch`: Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.36.3 * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.36.2 * api-change:`accessanalyzer`: Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update to 1.36.1 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.36.0 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * feature:shorthand: Adds support to shorthand syntax for loading parameters from files via the `@=` assignment operator. * from version 1.35.24 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.23 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.22 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.21 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * from version 1.35.20 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.19 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.18 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.17 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.16 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.15 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.14 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields * bugfix:shorthand: Improve performance when parsing invalid shorthand syntax. * Update to 1.35.13 * api-change:`bedrock`: Doc updates for supporting converse * api-change:`connect`: Amazon Connect Service Feature: Add support to start screen sharing for a web calling contact. * api-change:`ec2`: Amazon EC2 X8g, C8g and M8g instances are powered by AWS Graviton4 processors. X8g provide the lowest cost per GiB of memory among Graviton4 instances. C8g provide the best price performance for compute- intensive workloads. M8g provide the best price performance in for general purpose workloads. * api-change:`mwaa`: Introducing InvokeRestApi which allows users to invoke the Apache Airflow REST API on the webserver with the specified inputs. * api-change:`payment-cryptography`: Add support for ECC P-256 and P-384 Keys. * api-change:`payment-cryptography-data`: Add ECDH support on PIN operations. * from version 1.35.12 * api-change:`bedrock-runtime`: Updating invoke regex to support imported models for converse API * api-change:`imagebuilder`: Add macOS platform and instance placement options * api-change:`m2`: Add AuthSecretsManagerArn optional parameter to batch job APIs, expand batch parameter limits, and introduce clientToken constraints. * api-change:`rds`: Global clusters now expose the Endpoint attribute as one of its fields. It is a Read/Write endpoint for the global cluster which resolves to the Global Cluster writer instance. * api-change:`repostspace`: Adds the BatchAddRole and BatchRemoveRole APIs. * api-change:`timestream-query`: This release adds support for Query Insights, a feature that provides details of query execution, enabling users to identify areas for improvement to optimize their queries, resulting in improved query performance and lower query costs. * from version 1.35.11 * api-change:`application-insights`: This feature enables customers to specify SNS Topic ARN. CloudWatch Application Insights (CWAI) will utilize this ARN to send problem notifications. * api-change:`autoscaling`: Adds support for removing the PlacementGroup setting on an Auto Scaling Group through the UpdateAutoScalingGroup API. * api-change:`bedrock-agent-runtime`: Knowledge Bases for Amazon Bedrock now supports custom prompts and model parameters in the orchestrationConfiguration of the RetrieveAndGenerate API. The modelArn field accepts Custom Models and Imported Models ARNs. * api-change:`dms`: Added support for tagging in StartReplicationTaskAssessmentRun API and introduced IsLatestTaskAssessmentRun and ResultStatistic fields for enhanced tracking and assessment result statistics. * api-change:`ec2`: Amazon EC2 now allows you to create network interfaces with just the EFA driver and no ENA driver by specifying the network interface type as efa-only. * api-change:`eks`: This release adds support for Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift with EKS that enhances the resiliency of multi-AZ cluster environments * api-change:`fms`: Update AWS WAF policy - add the option to retrofit existing web ACLs instead of creating all new web ACLs. * api-change:`payment-cryptography-data`: Adding new API to generate authenticated scripts for EMV pin change use cases. * api-change:`wafv2`: Add a property to WebACL to indicate whether it's been retrofitted by Firewall Manager. * from version 1.35.10 * api-change:`athena`: Removing FEDERATED from Create/List/Delete/GetDataCatalog API * api-change:`bedrock`: Adding converse support to CMI API's * api-change:`bedrock-runtime`: Added converse support for custom imported models * api-change:`datazone`: Adding the following project member designations: PROJECT_CATALOG_VIEWER, PROJECT_CATALOG_CONSUMER and PROJECT_CATALOG_STEWARD in the CreateProjectMembership API and PROJECT_CATALOG_STEWARD designation in the AddPolicyGrant API. * api-change:`ec2`: RequestSpotInstances and RequestSpotFleet feature release. * from version 1.35.9 * api-change:`bedrock-agent`: Removing support for topK property in PromptModelInferenceConfiguration object, Making PromptTemplateConfiguration property as required, Limiting the maximum PromptVariant to 1 * api-change:`dataexchange`: This release adds Data Grant support, through which customers can programmatically create data grants to share with other AWS accounts and accept data grants from other AWS accounts. * api-change:`ecs`: This is an Amazon ECS documentation only update to address tickets. * api-change:`pinpoint-sms-voice-v2`: Added the registrations status of REQUIRES_AUTHENTICATION * api-change:`pipes`: This release adds validation to require specifying a SecurityGroup and Subnets in the Vpc object under PipesSourceSelfManagedKafkaParameters. It also adds support for iso-e, iso-f, and other non-commercial partitions in ARN parameters. * api-change:`quicksight`: Add StartDashboardSnapshotJobSchedule API. RestoreAnalysis now supports restoring analysis to folders. * api-change:`rds`: Updates Amazon RDS documentation for TAZ IAM support * api-change:`workspaces`: Updated the DomainName pattern for Active Directory * from version 1.35.8 * api-change:`s3`: Add support for the new optional bucket-region and prefix query parameters in the ListBuckets API. For ListBuckets requests that express pagination, Amazon S3 will now return both the bucket names and associated AWS regions in the response. * from version 1.35.7 * api-change:`amplify`: Added sourceUrlType field to StartDeployment request * api-change:`cloudformation`: Documentation update for AWS CloudFormation API Reference. * api-change:`codebuild`: Enable proxy for reserved capacity fleet. * api-change:`ivs`: On a channel that you own, you can now replace an ongoing stream with a new stream by streaming up with the priority parameter appended to the stream key. * api-change:`qbusiness`: Amazon Q Business now supports embedding the Amazon Q Business web experience on third-party websites. * api-change:`redshift`: This release launches the CreateIntegration, DeleteIntegration, DescribeIntegrations and ModifyIntegration APIs to create and manage Amazon Redshift Zero-ETL Integrations. * api-change:`resiliencehub`: AWS Resilience Hub now integrates with the myApplications platform, enabling customers to easily assess the resilience of applications defined in myApplications. The new Resiliency widget provides visibility into application resilience and actionable recommendations for improvement. * api-change:`sesv2`: This release adds support for email maximum delivery seconds that allows senders to control the time within which their emails are attempted for delivery. * from version 1.35.6 * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support automatically retrying failed stages and skipping stage for failed entry conditions. * api-change:`mailmanager`: Mail Manager support for viewing and exporting metadata of archived messages. * api-change:`securitylake`: This release updates request validation regex for resource ARNs. * api-change:`supplychain`: This release adds AWS Supply Chain instance management functionality. Specifically adding CreateInstance, DeleteInstance, GetInstance, ListInstances, and UpdateInstance APIs. * api-change:`transfer`: This release enables customers using SFTP connectors to query the transfer status of their files to meet their monitoring needs as well as orchestrate post transfer actions. * from version 1.35.5 * api-change:`appflow`: Doc only updates for clarification around OAuth2GrantType for Salesforce. * api-change:`elbv2`: Add zonal_shift.config.enabled attribute. Add new AdministrativeOverride construct in the describe-target-health API response to include information about the override status applied to a target. * api-change:`emr`: This release provides new parameter "Context" in instance fleet clusters. * api-change:`guardduty`: Added a new field for network connection details. * api-change:`robomaker`: Documentation update: added support notices to each API action. * from version 1.35.4 * api-change:`acm-pca`: Documentation updates for AWS Private CA. * api-change:`dms`: Introduces DescribeDataMigrations, CreateDataMigration, ModifyDataMigration, DeleteDataMigration, StartDataMigration, StopDataMigration operations to SDK. Provides FailedDependencyFault error message. * api-change:`ec2`: This release adds support for assigning the billing of shared Amazon EC2 On-Demand Capacity Reservations. * api-change:`ecs`: This is a documentation only release that updates to documentation to let customers know that Amazon Elastic Inference is no longer available. * api-change:`elastic-inference`: Elastic Inference - Documentation update to add service shutdown notice. * api-change:`iotfleetwise`: Refine campaign related API validations * api-change:`neptune-graph`: Support for 16 m-NCU graphs available through account allowlisting * api-change:`outposts`: Adding new "DELIVERED" enum value for Outposts Order status * api-change:`route53resolver`: Route 53 Resolver Forwarding Rules can now include a server name indication (SNI) in the target address for rules that use the DNS-over-HTTPS (DoH) protocol. When a DoH-enabled Outbound Resolver Endpoint forwards a request to a DoH server, it will provide the SNI in the TLS handshake. * api-change:`socialmessaging`: This release for AWS End User Messaging includes a public SDK, providing a suite of APIs that enable sending WhatsApp messages to end users. * api-change:`timestream-influxdb`: This release updates our regex based validation rules in regards to valid DbInstance and DbParameterGroup name. * from version 1.35.3 * api-change:`codepipeline`: AWS CodePipeline introduces a Compute category * from version 1.35.2 * api-change:`elasticache`: AWS ElastiCache SDK now supports using APIs with newly launched Valkey engine. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for newly launched Valkey engine. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * enhancement:`s3`: Adds logic to gracefully handle invalid timestamps returned in the Expires header. * from version 1.35.1 * api-change:`deadline`: Add support for using the template from a previous job during job creation and listing parameter definitions for a job. * api-change:`marketplace-reporting`: Documentation-only update for AWS Marketplace Reporting API. * api-change:`qconnect`: This release adds support for the following capabilities: Configuration of the Gen AI system via AIAgent and AIPrompts. Integration support for Bedrock Knowledge Base. * api-change:`redshift`: Add validation pattern to S3KeyPrefix on the EnableLogging API * from version 1.35.0 * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`iot-data`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * feature:s3: Adds `--checksum-mode` and `--checksum-algorithm` parameters to high-level `s3` commands. * from version 1.34.33 * api-change:`codepipeline`: AWS CodePipeline introduces Commands action that enables you to easily run shell commands as part of your pipeline execution. * api-change:`connect`: Public GetMetricDataV2 Grouping increase from 3 to 4 * api-change:`ec2`: This release includes a new API for modifying instance cpu-options after launch. * api-change:`iot`: This release adds support for Custom Authentication with X.509 Client Certificates, support for Custom Client Certificate validation, and support for selecting application protocol and authentication type without requiring TLS ALPN for customer's AWS IoT Domain Configurations. * api-change:`marketplace-reporting`: The AWS Marketplace Reporting service introduces the GetBuyerDashboard API. This API returns a dashboard that provides visibility into your organization's AWS Marketplace agreements and associated spend across the AWS accounts in your organization. * api-change:`mediapackagev2`: Added support for ClipStartTime on the FilterConfiguration object on OriginEndpoint manifest settings objects. Added support for EXT-X-START tags on produced HLS child playlists. * api-change:`quicksight`: QuickSight: Add support for exporting and importing folders in AssetBundle APIs * from version 1.34.32 * api-change:`appstream`: Added support for Automatic Time Zone Redirection on Amazon AppStream 2.0 * api-change:`b2bi`: Added and updated APIs to support outbound EDI transformations * api-change:`bedrock-agent-runtime`: Added raw model response and usage metrics to PreProcessing and PostProcessing Trace * api-change:`bedrock-runtime`: Added new fields to Amazon Bedrock Guardrails trace * api-change:`iotdeviceadvisor`: Add clientToken attribute and implement idempotency for CreateSuiteDefinition. * api-change:`ivs-realtime`: Adds new Stage Health EventErrorCodes applicable to RTMP(S) broadcasts. Bug Fix: Enforces that EncoderConfiguration Video height and width must be even-number values. * api-change:`s3`: This release introduces a header representing the minimum object size limit for Lifecycle transitions. * api-change:`sagemaker`: releasing builtinlcc to public * api-change:`workspaces`: WSP is being rebranded to become DCV. * from version 1.34.31 * api-change:`bedrock-agent`: This release adds support to stop an ongoing ingestion job using the StopIngestionJob API in Agents for Amazon Bedrock. * api-change:`codeartifact`: Add support for the dual stack endpoints. * api-change:`rds`: This release provides additional support for enabling Aurora Limitless Database DB clusters. * from version 1.34.30 * api-change:`bedrock`: Add support for custom models via provisioned throughput for Bedrock Model Evaluation * api-change:`clouddirectory`: Add examples for API operations in model. * api-change:`connect`: Amazon Connect introduces StartOutboundChatContact API allowing customers to initiate outbound chat contacts * api-change:`pricing`: Add examples for API operations in model. * api-change:`resource-groups`: This update includes new APIs to support application groups and to allow users to manage resource tag-sync tasks in applications. * api-change:`supplychain`: Release DataLakeDataset, DataIntegrationFlow and ResourceTagging APIs for AWS Supply Chain * api-change:`timestream-influxdb`: Timestream for InfluxDB now supports port configuration and additional customer-modifiable InfluxDB v2 parameters. This release adds Port to the CreateDbInstance and UpdateDbInstance API, and additional InfluxDB v2 parameters to the CreateDbParameterGroup API. * api-change:`verifiedpermissions`: Add examples for API operations in model. * from version 1.34.29 * api-change:`customer-profiles`: Introduces optional RoleArn parameter for PutIntegration request and includes RoleArn in the response of PutIntegration, GetIntegration and ListIntegrations * api-change:`quicksight`: Adding personalization in QuickSight data stories. Admins can enable or disable personalization through QuickSight settings. * api-change:`securityhub`: Documentation updates for AWS Security Hub * api-change:`sesv2`: This release adds support for engagement tracking over Https using custom domains. * from version 1.34.28 * api-change:`chatbot`: Return State and StateReason fields for Chatbot Channel Configurations. * api-change:`lambda`: Reverting Lambda resource-based policy and block public access APIs. * api-change:`organizations`: Add support for policy operations on the CHATBOT_POLICY policy type. * api-change:`pcs`: AWS PCS API documentation - Edited the description of the iamInstanceProfileArn parameter of the CreateComputeNodeGroup and UpdateComputeNodeGroup actions; edited the description of the SlurmCustomSetting data type to list the supported parameters for clusters and compute node groups. * api-change:`rds-data`: Documentation update for RDS Data API to reflect support for Aurora MySQL Serverless v2 and Provisioned DB clusters. * api-change:`sagemaker`: Adding `TagPropagation` attribute to Sagemaker API * from version 1.34.27 * api-change:`cloudtrail`: Doc-only update for CloudTrail network activity events release (in preview) * api-change:`ec2`: Updates to documentation for the transit gateway security group referencing feature. * api-change:`fsx`: Doc-only update to address Lustre S3 hard-coded names. * from version 1.34.26 * api-change:`bedrock`: Add support for Cross Region Inference in Bedrock Model Evaluations. * api-change:`budgets`: Releasing minor partitional endpoint updates * api-change:`kinesis`: This release includes support to add tags when creating a stream * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging SMS-Voice V2 has added support for resource policies. Use the three new APIs to create, view, edit, and delete resource policies. * api-change:`sagemaker`: Adding `HiddenInstanceTypes` and `HiddenSageMakerImageVersionAliases` attribute to SageMaker API * from version 1.34.25 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`athena`: List/Get/Update/Delete/CreateDataCatalog now integrate with AWS Glue connections. Users can create a Glue connection through Athena or use a Glue connection to define their Athena federated parameters. * api-change:`bedrock-agent`: Amazon Bedrock Prompt Flows and Prompt Management now supports using inference profiles to increase throughput and improve resilience. * api-change:`ec2`: Amazon EC2 G6e instances powered by NVIDIA L40S Tensor Core GPUs are the most cost-efficient GPU instances for deploying generative AI models and the highest performance GPU instances for spatial computing workloads. * api-change:`emr-serverless`: This release adds support for job concurrency and queuing configuration at Application level. * api-change:`glue`: Added AthenaProperties parameter to Glue Connections, allowing Athena to store service specific properties on Glue Connections. * api-change:`rds`: Support ComputeRedundancy parameter in ModifyDBShardGroup API. Add DBShardGroupArn in DBShardGroup API response. Remove InvalidMaxAcuFault from CreateDBShardGroup and ModifyDBShardGroup API. Both API will throw InvalidParameterValueException for invalid ACU configuration. * api-change:`resource-explorer-2`: AWS Resource Explorer released ListResources feature which allows customers to list all indexed AWS resources within a view. * from version 1.34.24 * api-change:`dynamodb`: Generate account endpoint for DynamoDB requests when the account ID is available * api-change:`neptune`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`sagemaker`: Amazon SageMaker now supports using manifest files to specify the location of uncompressed model artifacts within Model Packages * api-change:`sagemaker-metrics`: This release introduces support for the SageMaker Metrics BatchGetMetrics API. * api-change:`workspaces`: Releasing new ErrorCodes for SysPrep failures during ImageImport and CreateImage process * enhancement:paginator: Add warning when a non-positive value is provided for the max-items pagination parameter. * from version 1.34.23 * api-change:`codeconnections`: This release adds the PullRequestComment field to CreateSyncConfiguration API input, UpdateSyncConfiguration API input, GetSyncConfiguration API output and ListSyncConfiguration API output * api-change:`glue`: This change is for releasing TestConnection api SDK model * api-change:`lambda`: Tagging support for Lambda event source mapping, and code signing configuration resources. * api-change:`mediaconvert`: This release provides support for additional DRM configurations per SPEKE Version 2.0. * api-change:`medialive`: Adds Bandwidth Reduction Filtering for HD AVC and HEVC encodes, multiplex container settings. * api-change:`quicksight`: QuickSight: 1. Add new API - ListFoldersForResource. 2. Commit mode adds visibility configuration of Apply button on multi-select controls for authors. * api-change:`sagemaker`: Introduced support for G6e instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`workspaces-web`: WorkSpaces Secure Browser now enables Administrators to view and manage end-user browsing sessions via Session Management APIs. * from version 1.34.22 * api-change:`ce`: This release extends the GetReservationPurchaseRecommendation API to support recommendations for Amazon DynamoDB reservations. * api-change:`ds`: Added new APIs for enabling, disabling, and describing access to the AWS Directory Service Data API * api-change:`ds-data`: Added new AWS Directory Service Data API, enabling you to manage data stored in AWS Directory Service directories. This includes APIs for creating, reading, updating, and deleting directory users, groups, and group memberships. * api-change:`guardduty`: Add `launchType` and `sourceIPs` fields to GuardDuty findings. * api-change:`mailmanager`: Introduce a new RuleSet condition evaluation, where customers can set up a StringExpression with a MimeHeader condition. This condition will perform the necessary validation based on the X-header provided by customers. * api-change:`rds`: Updates Amazon RDS documentation with information upgrading snapshots with unsupported engine versions for RDS for MySQL and RDS for PostgreSQL. * api-change:`s3`: Added SSE-KMS support for directory buckets. * Update to 1.34.21 * api-change:`codebuild`: GitLab Enhancements - Add support for Self-Hosted GitLab runners in CodeBuild. Add group webhooks * api-change:`ecr`: The `DescribeImageScanning` API now includes `fixAvailable`, `exploitAvailable`, and `fixedInVersion` fields to provide more detailed information about the availability of fixes, exploits, and fixed versions for identified image vulnerabilities. * api-change:`ecs`: This is a documentation only release to address various tickets. * api-change:`lambda`: Support for JSON resource-based policies and block public access * api-change:`rds`: Updates Amazon RDS documentation with configuration information about the BYOL model for RDS for Db2. * api-change:`ssm`: Support for additional levels of cross-account, cross- Region organizational units in Automation. Various documentation updates. * from version 1.34.20 * api-change:`bedrock`: This feature adds cross account s3 bucket and VPC support to ModelInvocation jobs. To use a cross account bucket, pass in the accountId of the bucket to s3BucketOwner in the ModelInvocationJobInputDataConfig or ModelInvocationJobOutputDataConfig. * api-change:`iot`: This release adds additional enhancements to AWS IoT Device Management Software Package Catalog and Jobs. It also adds SBOM support in Software Package Version. * api-change:`medialive`: Removing the ON_PREMISE enum from the input settings field. * api-change:`organizations`: Doc only update for AWS Organizations that fixes several customer-reported issues * api-change:`pca-connector-scep`: This is a general availability (GA) release of Connector for SCEP, a feature of AWS Private CA. Connector for SCEP links your SCEP-enabled and mobile device management systems to AWS Private CA for digital signature installation and certificate management. * api-change:`rds`: Launching Global Cluster tagging. * from version 1.34.19 * api-change:`amplify`: Doc only update to Amplify to explain platform setting for Next.js 14 SSG only applications * api-change:`ivs`: Updates to all tags descriptions. * api-change:`ivschat`: Updates to all tags descriptions. * from version 1.34.18 * api-change:`cognito-idp`: Added email MFA option to user pools with advanced security features. * api-change:`elbv2`: Correct incorrectly mapped error in ELBv2 waiters * api-change:`emr`: Update APIs to allow modification of ODCR options, allocation strategy, and InstanceTypeConfigs on running InstanceFleet clusters. * api-change:`glue`: AWS Glue is introducing two new optimizers for Apache Iceberg tables: snapshot retention and orphan file deletion. Customers can enable these optimizers and customize their configurations to perform daily maintenance tasks on their Iceberg tables based on their specific requirements. * api-change:`mediaconvert`: This release includes support for dynamic video overlay workflows, including picture-in-picture and squeezeback * api-change:`rds`: This release adds support for the os-upgrade pending maintenance action for Amazon Aurora DB clusters. * api-change:`storagegateway`: The S3 File Gateway now supports DSSE-KMS encryption. A new parameter EncryptionType is added to these APIs: CreateSmbFileShare, CreateNfsFileShare, UpdateSmbFileShare, UpdateNfsFileShare, DescribeSmbFileShares, DescribeNfsFileShares. Also, in favor of EncryptionType, KmsEncrypted is deprecated. * api-change:`synthetics`: This release introduces two features. The first is tag replication, which allows for the propagation of canary tags onto Synthetics related resources, such as Lambda functions. The second is a limit increase in canary name length, which has now been increased from 21 to 255 characters. * from version 1.34.17 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using inference profiles to increase throughput and improve resilience. * api-change:`bedrock-agent-runtime`: Amazon Bedrock Knowledge Bases now supports using inference profiles to increase throughput and improve resilience. * api-change:`ecr`: Added KMS_DSSE to EncryptionType * api-change:`guardduty`: Add support for new statistic types in GetFindingsStatistics. * api-change:`lexv2-models`: Support new Polly voice engines in VoiceSettings: long-form and generative * api-change:`medialive`: Adds AV1 Codec support, SRT ouputs, and MediaLive Anywhere support. * from version 1.34.16 * api-change:`chime-sdk-voice`: Documentation-only update that clarifies the ValidateE911Address action of the Amazon Chime SDK Voice APIs. * api-change:`cognito-identity`: This release adds sensitive trait to some required shapes. * api-change:`pipes`: This release adds support for customer managed KMS keys in Amazon EventBridge Pipe * api-change:`securityhub`: Documentation update for Security Hub * from version 1.34.15 * api-change:`dynamodb`: Doc-only update for DynamoDB. Added information about async behavior for TagResource and UntagResource APIs and updated the description of ResourceInUseException. * api-change:`elbv2`: Add paginators for the ELBv2 DescribeListenerCertificates and DescribeRules APIs. Fix broken waiter for the ELBv2 DescribeLoadBalancers API. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to broadcast to Stages using RTMP(S). * api-change:`kafka`: Amazon MSK Replicator can now replicate data to identically named topics between MSK clusters within the same AWS Region or across different AWS Regions. * api-change:`sagemaker`: Amazon Sagemaker supports orchestrating SageMaker HyperPod clusters with Amazon EKS * api-change:`sagemaker-runtime`: AWS SageMaker Runtime feature: Add sticky routing to support stateful inference models. * from version 1.34.14 * api-change:`qapps`: Adds UpdateLibraryItemMetadata api to change status of app for admin verification feature and returns isVerified field in any api returning the app or library item. * from version 1.34.13 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives using a new calculation type. Users can now create SLOs which are configured with request-based SLIs to help meet their specific business requirements. * api-change:`codepipeline`: Updates to add recent notes to APIs and to replace example S3 bucket names globally. * api-change:`connect`: Amazon Connect Custom Vocabulary now supports Catalan (Spain), Danish (Denmark), Dutch (Netherlands), Finnish (Finland), Indonesian (Indonesia), Malay (Malaysia), Norwegian Bokmal (Norway), Polish (Poland), Swedish (Sweden), and Tagalog/Filipino (Philippines). * api-change:`gamelift`: Amazon GameLift provides additional events for tracking the fleet creation process. * api-change:`kinesisanalyticsv2`: Support for Flink 1.20 in Managed Service for Apache Flink * api-change:`sagemaker`: Amazon SageMaker now supports idle shutdown of JupyterLab and CodeEditor applications on SageMaker Studio. * from version 1.34.12 * api-change:`appsync`: Adds new logging levels (INFO and DEBUG) for additional log output control * api-change:`bedrock-agent`: Add support for user metadata inside PromptVariant. * api-change:`finspace`: Updates Finspace documentation for smaller instances. * api-change:`fis`: This release adds safety levers, a new mechanism to stop all running experiments and prevent new experiments from starting. * api-change:`logs`: Update to support new APIs for delivery of logs from AWS services. * api-change:`s3control`: Amazon Simple Storage Service /S3 Access Grants / Features : This release launches new Access Grants API - ListCallerAccessGrants. * from version 1.34.11 * api-change:`connect`: Release ReplicaConfiguration as part of DescribeInstance * api-change:`datazone`: Add support to let data publisher specify a subset of the data asset that a subscriber will have access to based on the asset filters provided, when accepting a subscription request. * api-change:`elbv2`: This release adds support for configuring TCP idle timeout on NLB and GWLB listeners. * api-change:`mediaconnect`: AWS Elemental MediaConnect introduces thumbnails for Flow source monitoring. Thumbnails provide still image previews of the live content feeding your MediaConnect Flow allowing you to easily verify that your source is operating as expected. * api-change:`medialive`: Added MinQP as a Rate Control option for H264 and H265 encodes. * api-change:`sagemaker`: Amazon SageMaker now supports automatic mounting of a user's home folder in the Amazon Elastic File System (EFS) associated with the SageMaker Studio domain to their Studio Spaces to enable users to share data between their own private spaces. * api-change:`timestream-influxdb`: Timestream for InfluxDB now supports compute scaling and deployment type conversion. This release adds the DbInstanceType and DeploymentType parameters to the UpdateDbInstance API. * Update to 1.34.10 * api-change:`backup`: The latest update introduces two new attributes, VaultType and VaultState, to the DescribeBackupVault and ListBackupVaults APIs. The VaultState attribute reflects the current status of the vault, while the VaultType attribute indicates the specific category of the vault. * api-change:`datazone`: Amazon DataZone now adds new governance capabilities of Domain Units for organization within your Data Domains, and Authorization Policies for tighter controls. * api-change:`logs`: This release introduces a new optional parameter: Entity, in PutLogEvents request * api-change:`redshift-data`: The release include the new Redshift DataAPI feature for session use, customer execute query with --session-keep-alive- seconds parameter and can submit follow-up queries to same sessions with returned`session-id` * from version 1.34.9 * api-change:`bedrock-agent-runtime`: Lifting the maximum length on Bedrock KnowledgeBase RetrievalFilter array * api-change:`bedrock-runtime`: Add support for imported-model in invokeModel and InvokeModelWithResponseStream. * api-change:`personalize`: This releases ability to update automatic training scheduler for customer solutions * api-change:`quicksight`: Increased Character Limit for Dataset Calculation Field expressions * api-change:`stepfunctions`: This release adds support for static analysis to ValidateStateMachineDefinition API, which can now return optional WARNING diagnostics for semantic errors on the definition of an Amazon States Language (ASL) state machine. * api-change:`wafv2`: The minimum request rate for a rate-based rule is now 10. Before this, it was 100. * from version 1.34.8 * api-change:`appconfig`: This release adds support for deletion protection, which is a safety guardrail to prevent the unintentional deletion of a recently used AWS AppConfig Configuration Profile or Environment. This also includes a change to increase the maximum length of the Name parameter in UpdateConfigurationProfile. * api-change:`datazone`: Update regex to include dot character to be consistent with IAM role creation in the authorized principal field for create and update subscription target. * api-change:`devicefarm`: This release removed support for Calabash, UI Automation, Built-in Explorer, remote access record, remote access replay, and web performance profile framework in ScheduleRun API. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now allows customers to provision IPv4 CIDR blocks and allocate Elastic IP Addresses directly from IPAM pools with public IPv4 space * api-change:`internetmonitor`: Adds new querying types to show overall traffic suggestion information for monitors * api-change:`pcs`: Introducing AWS Parallel Computing Service (AWS PCS), a new service makes it easy to setup and manage high performance computing (HPC) clusters, and build scientific and engineering models at virtually any scale on AWS. * api-change:`workspaces`: Documentation-only update that clarifies the StartWorkspaces and StopWorkspaces actions, and a few other minor edits. * from version 1.34.7 * api-change:`bedrock`: Amazon Bedrock SDK updates for Inference Profile. * api-change:`bedrock-runtime`: Amazon Bedrock SDK updates for Inference Profile. * api-change:`chatbot`: Update documentation to be consistent with the API docs * api-change:`omics`: Adds data provenance to import jobs from read sets and references * api-change:`polly`: Amazon Polly adds 2 new voices: Jitka (cs-CZ) and Sabrina (de-CH). * from version 1.34.6 * api-change:`iotsitewise`: AWS IoT SiteWise now supports versioning for asset models. It enables users to retrieve active version of their asset model and perform asset model writes with optimistic lock. * api-change:`workspaces`: This release adds support for creating and managing directories that use AWS IAM Identity Center as user identity source. Such directories can be used to create non-Active Directory domain joined WorkSpaces Personal.Updated RegisterWorkspaceDirectory and DescribeWorkspaceDirectories APIs. * from version 1.34.5 * api-change:`bedrock-agent`: Releasing the support for Action User Confirmation. * api-change:`bedrock-agent-runtime`: Releasing the support for Action User Confirmation. * api-change:`codebuild`: Added support for the MAC_ARM environment type for CodeBuild fleets. * api-change:`organizations`: Releasing minor partitional endpoint updates. * api-change:`qbusiness`: Amazon QBusiness: Enable support for SAML and OIDC federation through AWS IAM Identity Provider integration. * api-change:`supplychain`: Update API documentation to clarify the event SLA as well as the data model expectations * from version 1.34.4 * api-change:`autoscaling`: Amazon EC2 Auto Scaling now provides EBS health check to manage EC2 instance replacement * api-change:`bedrock`: Amazon Bedrock Evaluation BatchDeleteEvaluationJob API allows customers to delete evaluation jobs under terminated evaluation job statuses - Stopped, Failed, or Completed. Customers can submit a batch of 25 evaluation jobs to be deleted at once. * api-change:`emr-containers`: Correct endpoint for FIPS is configured for US Gov Regions. * api-change:`inspector2`: Add enums for Agentless scan statuses and EC2 enablement error states * api-change:`quicksight`: Explicit query for authors and dashboard viewing sharing for embedded users * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Malaysia) Region (ap-southeast-5) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * from version 1.34.3 * api-change:`ec2`: DescribeInstanceStatus now returns health information on EBS volumes attached to Nitro instances * api-change:`entityresolution`: Increase the mapping attributes in Schema to 35. * api-change:`glue`: Add optional field JobRunQueuingEnabled to CreateJob and UpdateJob APIs. * api-change:`lambda`: Release FilterCriteria encryption for Lambda EventSourceMapping, enabling customers to encrypt their filter criteria using a customer-owned KMS key. * api-change:`securityhub`: Security Hub documentation and definition updates * api-change:`ses`: Enable email receiving customers to provide SES with access to their S3 buckets via an IAM role for "Deliver to S3 Action" * from version 1.34.2 * api-change:`ecs`: Documentation only release to address various tickets * api-change:`opensearchserverless`: Added FailureCode and FailureMessage to BatchGetCollectionResponse for BatchGetVPCEResponse for non-Active Collection and VPCE. * api-change:`s3`: Amazon Simple Storage Service / Features : Add support for conditional writes for PutObject and CompleteMultipartUpload APIs. * from version 1.34.1 * api-change:`bedrock`: Amazon Bedrock Batch Inference/ Model Invocation is a feature which allows customers to asynchronously run inference on a large set of records/files stored in S3. * api-change:`codebuild`: AWS CodeBuild now supports creating fleets with macOS platform for running builds. * api-change:`deadline`: This release adds additional search fields and provides sorting by multiple fields. * api-change:`lambda`: Release Lambda FunctionRecursiveConfig, enabling customers to turn recursive loop detection on or off on individual functions. This release adds two new APIs, GetFunctionRecursionConfig and PutFunctionRecursionConfig. * api-change:`ssm-sap`: Add new attributes to the outputs of GetApplication and GetDatabase APIs. * from version 1.34.0 * api-change:`batch`: Improvements of integration between AWS Batch and EC2. * api-change:`inspector2`: Update the correct format of key and values for resource tags * api-change:`quicksight`: Amazon QuickSight launches Customer Managed Key (CMK) encryption for Data Source metadata * api-change:`sagemaker`: Introduce Endpoint and EndpointConfig Arns in sagemaker:ListPipelineExecutionSteps API response * api-change:`sesv2`: Marking use case description field of account details as deprecated. * enhancement:`codeartifact`: Update login command error message. * from version 1.33.44 * api-change:`docdb`: This release adds Global Cluster Failover capability which enables you to change your global cluster's primary AWS region, the region that serves writes, during a regional outage. Performing a failover action preserves your Global Cluster setup. * api-change:`ecs`: This release introduces a new ContainerDefinition configuration to support the customer-managed keys for ECS container restart feature. * api-change:`iam`: Make the LastUsedDate field in the GetAccessKeyLastUsed response optional. This may break customers who only call the API for access keys with a valid LastUsedDate. This fixes a deserialization issue for access keys without a LastUsedDate, because the field was marked as required but could be null. * api-change:`s3`: Amazon Simple Storage Service / Features : Adds support for pagination in the S3 ListBuckets API. * from version 1.33.43 * api-change:`codebuild`: AWS CodeBuild now supports using Secrets Manager to store git credentials and using multiple source credentials in a single project. * from version 1.33.42 * api-change:`amplify`: Add a new field "cacheConfig" that enables users to configure the CDN cache settings for an App * api-change:`appstream`: This release includes following new APIs: CreateThemeForStack, DescribeThemeForStack, UpdateThemeForStack, DeleteThemeForStack to support custom branding programmatically. * api-change:`fis`: This release adds support for additional error information on experiment failure. It adds the error code, location, and account id on relevant failures to the GetExperiment and ListExperiment API responses. * api-change:`glue`: Add AttributesToGet parameter support for Glue GetTables * api-change:`neptune-graph`: Amazon Neptune Analytics provides a new option for customers to load data into a graph using the RDF (Resource Description Framework) NTRIPLES format. When loading NTRIPLES files, use the value `convertToIri` for the `blankNodeHandling` parameter. * from version 1.33.41 * api-change:`compute-optimizer`: Doc only update for Compute Optimizer that fixes several customer-reported issues relating to ECS finding classifications * api-change:`config`: Documentation update for the OrganizationConfigRuleName regex pattern. * api-change:`ec2`: This release adds new capabilities to manage On-Demand Capacity Reservations including the ability to split your reservation, move capacity between reservations, and modify the instance eligibility of your reservation. * api-change:`eks`: Added support for new AL2023 GPU AMIs to the supported AMITypes. * api-change:`groundstation`: Updating documentation for OEMEphemeris to link to AWS Ground Station User Guide * api-change:`medialive`: AWS Elemental MediaLive now supports now supports editing the PID values for a Multiplex. * api-change:`sagemaker`: Releasing large data support as part of CreateAutoMLJobV2 in SageMaker Autopilot and CreateDomain API for SageMaker Canvas. * from version 1.33.40 * api-change:`cognito-idp`: Fixed a description of AdvancedSecurityAdditionalFlows in Amazon Cognito user pool configuration. * api-change:`connect`: This release supports adding RoutingCriteria via UpdateContactRoutingData public API. * api-change:`ssm`: Systems Manager doc-only updates for August 2024. * from version 1.33.39 * api-change:`cognito-idp`: Added support for threat protection for custom authentication in Amazon Cognito user pools. * api-change:`connect`: This release fixes a regression in number of access control tags that are allowed to be added to a security profile in Amazon Connect. You can now add up to four access control tags on a single security profile. * api-change:`ec2`: Launch of private IPv6 addressing for VPCs and Subnets. VPC IPAM supports the planning and monitoring of private IPv6 usage. * api-change:`glue`: This release adds support to retrieve the validation status when creating or updating Glue Data Catalog Views. Also added is support for BasicCatalogTarget partition keys. * from version 1.33.38 * api-change:`appintegrations`: Updated CreateDataIntegration and CreateDataIntegrationAssociation API to support bulk data export from Amazon Connect Customer Profiles to the customer S3 bucket. * api-change:`glue`: Introducing AWS Glue Data Quality anomaly detection, a new functionality that uses ML-based solutions to detect data anomalies users have not explicitly defined rules for. * from version 1.33.37 * api-change:`bedrock-agent-runtime`: Introduce model invocation output traces for orchestration traces, which contain the model's raw response and usage. * api-change:`cognito-idp`: Advanced security feature updates to include password history and log export for Cognito user pools. * api-change:`cost-optimization-hub`: This release adds savings percentage support to the ListRecommendationSummaries API. * api-change:`workspaces`: Added support for BYOL_GRAPHICS_G4DN_WSP IngestionProcess * from version 1.33.36 * api-change:`datazone`: This releases Data Product feature. Data Products allow grouping data assets into cohesive, self-contained units for ease of publishing for data producers, and ease of finding and accessing for data consumers. * api-change:`ecr`: Released two new APIs along with documentation updates. The GetAccountSetting API is used to view the current basic scan type version setting for your registry, while the PutAccountSetting API is used to update the basic scan type version for your registry. * api-change:`kinesis-video-webrtc-storage`: Add JoinStorageSessionAsViewer API * api-change:`pi`: Added a description for the Dimension db.sql.tokenized_id on the DimensionGroup data type page. * from version 1.33.35 * api-change:`cloudwatch`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`kinesis`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`resiliencehub`: Customers are presented with the grouping recommendations and can determine if the recommendations are accurate and apply to their case. This feature simplifies onboarding by organizing resources into appropriate AppComponents. * api-change:`route53`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`waf-regional`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.34 * api-change:`bedrock`: API and Documentation for Bedrock Model Copy feature. This feature lets you share and copy a custom model from one region to another or one account to another. * api-change:`controlcatalog`: AWS Control Tower provides two new public APIs controlcatalog:ListControls and controlcatalog:GetControl under controlcatalog service namespace, which enable customers to programmatically retrieve control metadata of available controls. * api-change:`controltower`: Updated Control Tower service documentation for controlcatalog control ARN support with existing Control Tower public APIs * api-change:`iam`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`memorydb`: Doc only update for changes to deletion API. * api-change:`rds`: This release adds support for specifying optional MinACU parameter in CreateDBShardGroup and ModifyDBShardGroup API. DBShardGroup response will contain MinACU if specified. * api-change:`sagemaker`: This release adds support for Amazon EMR Serverless applications in SageMaker Studio for running data processing jobs. * api-change:`ssm-quicksetup`: This release adds API support for the QuickSetup feature of AWS Systems Manager * api-change:`support`: Doc only updates to CaseDetails * from version 1.33.33 * api-change:`appstream`: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0 * api-change:`autoscaling`: Increase the length limit for VPCZoneIdentifier from 2047 to 5000 * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements. * api-change:`elasticache`: Doc only update for changes to deletion API. * api-change:`elb`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`events`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`lexv2-models`: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base. * api-change:`logs`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`rolesanywhere`: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile. * api-change:`tnb`: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation. * api-change:`workspaces`: Removing multi-session as it isn't supported for pools * bugfix:`s3`: Disable usage of mb command with S3 Express directory buckets. * from version 1.33.32 * api-change:`elasticache`: Renaming full service name as it appears in developer documentation. * api-change:`memorydb`: Renaming full service name as it appears in developer documentation. * from version 1.33.31 * api-change:`application-autoscaling`: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics. * api-change:`application-signals`: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability. * api-change:`bedrock-runtime`: Provides ServiceUnavailableException error message * api-change:`codecommit`: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository. * api-change:`datazone`: Introduces GetEnvironmentCredentials operation to SDK * api-change:`ec2`: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types. * api-change:`ecr`: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template. * api-change:`eks`: This release adds support for EKS cluster to manage extended support. * api-change:`elbv2`: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager. * api-change:`network-firewall`: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging. * api-change:`outposts`: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses * api-change:`stepfunctions`: This release adds support to customer managed KMS key encryption in AWS Step Functions. * from version 1.33.30 * api-change:`cleanrooms`: Three enhancements to the AWS Clean Rooms: Disallowed Output Columns, Flexible Result Receivers, SQL as a Seed * api-change:`dynamodb`: DynamoDB doc only update for July * api-change:`iotsitewise`: Adds support for creating SiteWise Edge gateways that run on a Siemens Industrial Edge Device. * api-change:`mediapackagev2`: This release adds support for Irdeto DRM encryption in DASH manifests. * api-change:`medical-imaging`: CopyImageSet API adds copying selected instances between image sets, and overriding inconsistent metadata with a force parameter. UpdateImageSetMetadata API enables reverting to prior versions; updates to Study, Series, and SOP Instance UIDs; and updates to private elements, with a force parameter. * api-change:`pinpoint-sms-voice-v2`: Update for rebrand to AWS End User Messaging SMS and Voice. * from version 1.33.29 * api-change:`appsync`: Adding support for paginators in AppSync list APIs * api-change:`cleanrooms`: This release adds AWS Entity Resolution integration to associate ID namespaces & ID mapping workflow resources as part of ID namespace association and ID mapping table in AWS Clean Rooms. It also introduces a new ID_MAPPING_TABLE analysis rule to manage the protection on ID mapping table. * api-change:`cleanroomsml`: Adds SQL query as the source of seed audience for audience generation job. * api-change:`connect`: Added PostContactSummary segment type on ListRealTimeContactAnalysisSegmentsV2 API * api-change:`connect-contact-lens`: Added PostContactSummary segment type on ListRealTimeContactAnalysisSegments API * api-change:`datazone`: This release removes the deprecated dataProductItem field from Search API output. * api-change:`entityresolution`: Support First Party ID Mapping * from version 1.33.28 * api-change:`datazone`: This release adds 1/ support of register S3 locations of assets in AWS Lake Formation hybrid access mode for DefaultDataLake blueprint. 2/ support of CRUD operations for Asset Filters. * api-change:`ivs`: Documentation update for IVS Low Latency API Reference. * api-change:`neptune-graph`: Amazon Neptune Analytics provides new options for customers to start with smaller graphs at a lower cost. CreateGraph, CreaateGraphImportTask, UpdateGraph and StartImportTask APIs will now allow 32 and 64 for `provisioned-memory` * api-change:`redshift-serverless`: Adds dualstack support for Redshift Serverless workgroup. * from version 1.33.27 * api-change:`acm-pca`: Fix broken waiters for the acm-pca client. Waiters broke in version * from version 1.13.144 of the Boto3 SDK. * api-change:`connect`: Amazon Connect expands search API coverage for additional resources. Search for hierarchy groups by name, ID, tag, or other criteria (new endpoint). Search for agent statuses by name, ID, tag, or other criteria (new endpoint). Search for users by their assigned proficiencies (enhanced endpoint) * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports Bring- Your-Own-IP (BYOIP) for IP addresses registered with any Internet Registry. This feature uses DNS TXT records to validate ownership of a public IP address range. * api-change:`firehose`: This release 1) Add configurable buffering hints for Snowflake as destination. 2) Add ReadFromTimestamp for MSK As Source. Firehose will start reading data from MSK Cluster using offset associated with this timestamp. 3) Gated public beta release to add Apache Iceberg tables as destination. * api-change:`ivschat`: Documentation update for IVS Chat API Reference. * api-change:`medialive`: AWS Elemental MediaLive now supports the SRT protocol via the new SRT Caller input type. * api-change:`rds`: Updates Amazon RDS documentation to specify an eventual consistency model for DescribePendingMaintenanceActions. * api-change:`sagemaker`: SageMaker Training supports R5, T3 and R5D instances family. And SageMaker Processing supports G5 and R5D instances family. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`taxsettings`: Set default endpoint for aws partition. Requests from all regions in aws partition will be forward to us-east-1 endpoint. * api-change:`timestream-query`: Doc-only update for TimestreamQuery. Added guidance about the accepted valid value for the QueryPricingModel parameter. * api-change:`workspaces-thin-client`: Documentation update for WorkSpaces Thin Client. * Update to 1.33.26 * api-change:`acm-pca`: Minor refactoring of C2J model for AWS Private CA * api-change:`arc-zonal-shift`: Adds the option to subscribe to get notifications when a zonal autoshift occurs in a region. * api-change:`globalaccelerator`: This feature adds exceptions to the Customer API to avoid throwing Internal Service errors * api-change:`pinpoint`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`quicksight`: Vega ally control options and Support for Reviewed Answers in Topics * from version 1.33.25 * api-change:`batch`: This feature allows AWS Batch Jobs with EKS container orchestration type to be run as Multi-Node Parallel Jobs. * api-change:`bedrock`: Add support for contextual grounding check for Guardrails for Amazon Bedrock. * api-change:`bedrock-agent`: Introduces new data sources and chunking strategies for Knowledge bases, advanced parsing logic using FMs, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources. * api-change:`bedrock-agent-runtime`: Introduces query decomposition, enhanced Agents integration with Knowledge bases, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources for end-to-end solutions. * api-change:`bedrock-runtime`: Add support for contextual grounding check and ApplyGuardrail API for Guardrails for Amazon Bedrock. * api-change:`ec2`: Add parameters to enable provisioning IPAM BYOIPv4 space at a Local Zone Network Border Group level * api-change:`glue`: Add recipe step support for recipe node * api-change:`groundstation`: Documentation update specifying OEM ephemeris units of measurement * api-change:`license-manager-linux-subscriptions`: Add support for third party subscription providers, starting with RHEL subscriptions through Red Hat Subscription Manager (RHSM). Additionally, add support for tagging subscription provider resources, and detect when an instance has more than one Linux subscription and notify the customer. * api-change:`mediaconnect`: AWS Elemental MediaConnect introduces the ability to disable outputs. Disabling an output allows you to keep the output attached to the flow, but stop streaming to the output destination. A disabled output does not incur data transfer costs. * from version 1.33.24 * api-change:`datazone`: This release deprecates dataProductItem field from SearchInventoryResultItem, along with some unused DataProduct shapes * api-change:`fsx`: Adds support for FSx for NetApp ONTAP 2nd Generation file systems, and FSx for OpenZFS Single AZ HA file systems. * api-change:`opensearch`: This release adds support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains, and provides visibility into the current state of the setup or tear-down. * api-change:`sagemaker`: This release 1/ enables optimization jobs that allows customers to perform Ahead-of-time compilation and quantization. 2/ allows customers to control access to Amazon Q integration in SageMaker Studio. 3/ enables AdditionalModelDataSources for CreateModel action. * from version 1.33.23 * api-change:`codedeploy`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`devicefarm`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`dms`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`elasticbeanstalk`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`es`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`firehose`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`gamelift`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`qapps`: This is a general availability (GA) release of Amazon Q Apps, a capability of Amazon Q Business. Q Apps leverages data sources your company has provided to enable users to build, share, and customize apps within your organization. * api-change:`route53resolver`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`ses`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.22 * api-change:`acm`: Documentation updates, including fixes for xml formatting, broken links, and ListCertificates description. * api-change:`ecr`: This release for Amazon ECR makes change to bring the SDK into sync with the API. * api-change:`payment-cryptography-data`: Added further restrictions on logging of potentially sensitive inputs and outputs. * api-change:`qbusiness`: Add personalization to Q Applications. Customers can enable or disable personalization when creating or updating a Q application with the personalization configuration. * from version 1.33.21 * api-change:`application-autoscaling`: Doc only update for Application Auto Scaling that fixes resource name. * api-change:`directconnect`: This update includes documentation for support of new native 400 GBps ports for Direct Connect. * api-change:`organizations`: Added a new reason under ConstraintViolationException in RegisterDelegatedAdministrator API to prevent registering suspended accounts as delegated administrator of a service. * api-change:`rekognition`: This release adds support for tagging projects and datasets with the CreateProject and CreateDataset APIs. * api-change:`workspaces`: Fix create workspace bundle RootStorage/UserStorage to accept non null values * Update to 1.33.20 * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`fms`: Increases Customer API's ManagedServiceData length * api-change:`s3`: Added response overrides to Head Object requests. * from version 1.33.19 * api-change:`apigateway`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`cognito-identity`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`connect`: Authentication profiles are Amazon Connect resources (in gated preview) that allow you to configure authentication settings for users in your contact center. This release adds support for new ListAuthenticationProfiles, DescribeAuthenticationProfile and UpdateAuthenticationProfile APIs. * api-change:`docdb`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`eks`: Updates EKS managed node groups to support EC2 Capacity Blocks for ML * api-change:`payment-cryptography`: Added further restrictions on logging of potentially sensitive inputs and outputs. * api-change:`payment-cryptography-data`: Adding support for dynamic keys for encrypt, decrypt, re-encrypt and translate pin functions. With this change, customers can use one-time TR-31 keys directly in dataplane operations without the need to first import them into the service. * api-change:`stepfunctions`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`swf`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`wafv2`: JSON body inspection: Update documentation to clarify that JSON parsing doesn't include full validation. * from version 1.33.18 * api-change:`acm-pca`: Added CCPC_LEVEL_1_OR_HIGHER KeyStorageSecurityStandard and SM2 KeyAlgorithm and SM3WITHSM2 SigningAlgorithm for China regions. * api-change:`cloudhsmv2`: Added 3 new APIs to support backup sharing: GetResourcePolicy, PutResourcePolicy, and DeleteResourcePolicy. Added BackupArn to the output of the DescribeBackups API. Added support for BackupArn in the CreateCluster API. * api-change:`connect`: This release supports showing PreferredAgentRouting step via DescribeContact API. * api-change:`emr`: This release provides the support for new allocation strategies i.e. CAPACITY_OPTIMIZED_PRIORITIZED for Spot and PRIORITIZED for On-Demand by taking input of priority value for each instance type for instance fleet clusters. * api-change:`glue`: Added AttributesToGet parameter to Glue GetDatabases, allowing caller to limit output to include only the database name. * api-change:`kinesisanalyticsv2`: Support for Flink 1.19 in Managed Service for Apache Flink * api-change:`opensearch`: This release removes support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains. * api-change:`pi`: Noting that the filter db.sql.db_id isn't available for RDS for SQL Server DB instances. * api-change:`workspaces`: Added support for Red Hat Enterprise Linux 8 on Amazon WorkSpaces Personal. * from version 1.33.17 * api-change:`application-autoscaling`: Amazon WorkSpaces customers can now use Application Auto Scaling to automatically scale the number of virtual desktops in a WorkSpaces pool. * api-change:`chime-sdk-media-pipelines`: Added Amazon Transcribe multi language identification to Chime SDK call analytics. Enabling customers sending single stream audio to generate call recordings using Chime SDK call analytics * api-change:`cloudfront`: Doc only update for CloudFront that fixes customer- reported issue * api-change:`datazone`: This release supports the data lineage feature of business data catalog in Amazon DataZone. * api-change:`elasticache`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`mq`: This release makes the EngineVersion field optional for both broker and configuration and uses the latest available version by default. The AutoMinorVersionUpgrade field is also now optional for broker creation and defaults to 'true'. * api-change:`qconnect`: Adds CreateContentAssociation, ListContentAssociations, GetContentAssociation, and DeleteContentAssociation APIs. * api-change:`quicksight`: Adding support for Repeating Sections, Nested Filters * api-change:`rds`: Updates Amazon RDS documentation for TAZ export to S3. * api-change:`sagemaker`: Add capability for Admins to customize Studio experience for the user by showing or hiding Apps and MLTools. * api-change:`workspaces`: Added support for WorkSpaces Pools. * from version 1.33.16 * api-change:`controltower`: Added ListLandingZoneOperations API. * api-change:`eks`: Added support for disabling unmanaged addons during cluster creation. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to upload public keys for customer vended participant tokens. * api-change:`kinesisanalyticsv2`: This release adds support for new ListApplicationOperations and DescribeApplicationOperation APIs. It adds a new configuration to enable system rollbacks, adds field ApplicationVersionCreateTimestamp for clarity and improves support for pagination for APIs. * api-change:`opensearch`: This release adds support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains, and provides visibility into the current state of the setup or tear-down. * from version 1.33.15 * api-change:`autoscaling`: Doc only update for Auto Scaling's TargetTrackingMetricDataQuery * api-change:`ec2`: This release is for the launch of the new u7ib-12tb.224xlarge, R8g, c7gn.metal and mac2-m1ultra.metal instance types * api-change:`networkmanager`: This is model changes & documentation update for the Asynchronous Error Reporting feature for AWS Cloud WAN. This feature allows customers to view errors that occur while their resources are being provisioned, enabling customers to fix their resources without needing external support. * api-change:`workspaces-thin-client`: This release adds the deviceCreationTags field to CreateEnvironment API input, UpdateEnvironment API input and GetEnvironment API output. * from version 1.33.14 * api-change:`bedrock-runtime`: Increases Converse API's document name length * api-change:`customer-profiles`: This release includes changes to ProfileObjectType APIs, adds functionality top set and get capacity for profile object types. * api-change:`ec2`: Fix EC2 multi-protocol info in models. * api-change:`qbusiness`: Allow enable/disable Q Apps when creating/updating a Q application; Return the Q Apps enablement information when getting a Q application. * api-change:`ssm`: Add sensitive trait to SSM IPAddress property for CloudTrail redaction * api-change:`workspaces-web`: Added ability to enable DeepLinking functionality on a Portal via UserSettings as well as added support for IdentityProvider resource tagging. * from version 1.33.13 * api-change:`bedrock-runtime`: This release adds document support to Converse and ConverseStream APIs * api-change:`codeartifact`: Add support for the Cargo package format. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon RDS MySQL and RDS PostgreSQL. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon RDS MySQL and RDS PostgreSQL. * api-change:`dynamodb`: Doc-only update for DynamoDB. Fixed Important note in 6 Global table APIs - CreateGlobalTable, DescribeGlobalTable, DescribeGlobalTableSettings, ListGlobalTables, UpdateGlobalTable, and UpdateGlobalTableSettings. * api-change:`glue`: Fix Glue paginators for Jobs, JobRuns, Triggers, Blueprints and Workflows. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to record individual stage participants to S3. * api-change:`sagemaker`: Adds support for model references in Hub service, and adds support for cross-account access of Hubs * api-change:`securityhub`: Documentation updates for Security Hub * from version 1.33.12 * api-change:`artifact`: This release adds an acceptanceType field to the ReportSummary structure (used in the ListReports API response). * api-change:`athena`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`cur`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`directconnect`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`elastictranscoder`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`opensearch`: This release enables customers to use JSON Web Tokens (JWT) for authentication on their Amazon OpenSearch Service domains. * from version 1.33.11 * api-change:`bedrock-runtime`: This release adds support for using Guardrails with the Converse and ConverseStream APIs. * api-change:`cloudtrail`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`config`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`eks`: This release adds support to surface async fargate customer errors from async path to customer through describe-fargate-profile API response. * api-change:`lightsail`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`polly`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`rekognition`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`sagemaker`: Launched a new feature in SageMaker to provide managed MLflow Tracking Servers for customers to track ML experiments. This release also adds a new capability of attaching additional storage to SageMaker HyperPod cluster instances. * api-change:`shield`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`snowball`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.10 * api-change:`acm-pca`: Doc-only update that adds name constraints as an allowed extension for ImportCertificateAuthorityCertificate. * api-change:`batch`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`codebuild`: AWS CodeBuild now supports global and organization GitHub webhooks * api-change:`cognito-idp`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`ds`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`efs`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`glue`: This release introduces a new feature, Usage profiles. Usage profiles allow the AWS Glue admin to create different profiles for various classes of users within the account, enforcing limits and defaults for jobs and sessions. * api-change:`mediaconvert`: This release includes support for creating I-frame only video segments for DASH trick play. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`waf`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.9 * api-change:`datazone`: This release introduces a new default service blueprint for custom environment creation. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`macie2`: This release adds support for managing the status of automated sensitive data discovery for individual accounts in an organization, and determining whether individual S3 buckets are included in the scope of the analyses. * api-change:`mediaconvert`: This release adds the ability to search for historical job records within the management console using a search box and/or via the SDK/CLI with partial string matching search on input file name. * api-change:`route53domains`: Add v2 smoke tests and smithy smokeTests trait for SDK testing. * from version 1.33.8 * api-change:`cloudhsmv2`: Added support for hsm type hsm2m.medium. Added supported for creating a cluster in FIPS or NON_FIPS mode. * api-change:`glue`: This release adds support for configuration of evaluation method for composite rules in Glue Data Quality rulesets. * api-change:`iotwireless`: Add RoamingDeviceSNR and RoamingDeviceRSSI to Customer Metrics. * api-change:`kms`: This feature allows customers to use their keys stored in KMS to derive a shared secret which can then be used to establish a secured channel for communication, provide proof of possession, or establish trust with other parties. * api-change:`mediapackagev2`: This release adds support for CMAF ingest (DASH-IF live media ingest protocol interface 1) * from version 1.33.7 * api-change:`apptest`: AWS Mainframe Modernization Application Testing is an AWS Mainframe Modernization service feature that automates functional equivalence testing for mainframe application modernization and migration to AWS, and regression testing. * api-change:`ec2`: Tagging support for Traffic Mirroring FilterRule resource * api-change:`osis`: SDK changes for self-managed vpc endpoint to OpenSearch ingestion pipelines. * api-change:`redshift`: Updates to remove DC1 and DS2 node types. * api-change:`secretsmanager`: Introducing RotationToken parameter for PutSecretValue API * api-change:`securitylake`: This release updates request validation regex to account for non-commercial aws partitions. * api-change:`sesv2`: This release adds support for Amazon EventBridge as an email sending events destination. * from version 1.33.6 * api-change:`accessanalyzer`: IAM Access Analyzer now provides policy recommendations to help resolve unused permissions for IAM roles and users. Additionally, IAM Access Analyzer now extends its custom policy checks to detect when IAM policies grant public access or access to critical resources ahead of deployments. * api-change:`guardduty`: Added API support for GuardDuty Malware Protection for S3. * api-change:`networkmanager`: This is model changes & documentation update for Service Insertion feature for AWS Cloud WAN. This feature allows insertion of AWS/3rd party security services on Cloud WAN. This allows to steer inter/intra segment traffic via security appliances and provide visibility to the route updates. * api-change:`pca-connector-scep`: Connector for SCEP allows you to use a managed, cloud CA to enroll mobile devices and networking gear. SCEP is a widely-adopted protocol used by mobile device management (MDM) solutions for enrolling mobile devices. With the connector, you can use AWS Private CA with popular MDM solutions. * api-change:`sagemaker`: Introduced Scope and AuthenticationRequestExtraParams to SageMaker Workforce OIDC configuration; this allows customers to modify these options for their private Workforce IdP integration. Model Registry Cross-account model package groups are discoverable. * from version 1.33.5 * api-change:`application-signals`: This is the initial SDK release for Amazon CloudWatch Application Signals. Amazon CloudWatch Application Signals provides curated application performance monitoring for developers to monitor and troubleshoot application health using pre-built dashboards and Service Level Objectives. * api-change:`ecs`: This release introduces a new cluster configuration to support the customer-managed keys for ECS managed storage encryption. * api-change:`imagebuilder`: This release updates the regex pattern for Image Builder ARNs. * Update to 1.33.4 * api-change:`auditmanager`: New feature: common controls. When creating custom controls, you can now use pre-grouped AWS data sources based on common compliance themes. Also, the awsServices parameter is deprecated because we now manage services in scope for you. If used, the input is ignored and an empty list is returned. * api-change:`b2bi`: Added exceptions to B2Bi List operations and ConflictException to B2Bi StartTransformerJob operation. Also made capabilities field explicitly required when creating a Partnership. * api-change:`codepipeline`: CodePipeline now supports overriding S3 Source Object Key during StartPipelineExecution, as part of Source Overrides. * api-change:`sagemaker`: This release introduces a new optional parameter: InferenceAmiVersion, in ProductionVariant. * api-change:`verifiedpermissions`: This release adds OpenIdConnect (OIDC) configuration support for IdentitySources, allowing for external IDPs to be used in authorization requests. * from version 1.33.3 * api-change:`account`: This release adds 3 new APIs (AcceptPrimaryEmailUpdate, GetPrimaryEmail, and StartPrimaryEmailUpdate) used to centrally manage the root user email address of member accounts within an AWS organization. * api-change:`firehose`: Adds integration with Secrets Manager for Redshift, Splunk, HttpEndpoint, and Snowflake destinations * api-change:`fsx`: This release adds support to increase metadata performance on FSx for Lustre file systems beyond the default level provisioned when a file system is created. This can be done by specifying MetadataConfiguration during the creation of Persistent_2 file systems or by updating it on demand. * api-change:`glue`: This release adds support for creating and updating Glue Data Catalog Views. * api-change:`iotwireless`: Adds support for wireless device to be in Conflict FUOTA Device Status due to a FUOTA Task, so it couldn't be attached to a new one. * api-change:`location`: Added two new APIs, VerifyDevicePosition and ForecastGeofenceEvents. Added support for putting larger geofences up to 100,000 vertices with Geobuf fields. * api-change:`sns`: Doc-only update for SNS. These changes include customer- reported issues and TXC3 updates. * api-change:`sqs`: Doc only updates for SQS. These updates include customer- reported issues and TCX3 modifications. * api-change:`storagegateway`: Adds SoftwareUpdatePreferences to DescribeMaintenanceStartTime and UpdateMaintenanceStartTime, a structure which contains AutomaticUpdatePolicy. * from version 1.33.2 * api-change:`globalaccelerator`: This release contains a new optional ip- addresses input field for the update accelerator and update custom routing accelerator apis. This input enables consumers to replace IPv4 addresses on existing accelerators with addresses provided in the input. * api-change:`glue`: AWS Glue now supports native SaaS connectivity: Salesforce connector available now * api-change:`s3`: Added new params copySource and key to copyObject API for supporting S3 Access Grants plugin. These changes will not change any of the existing S3 API functionality. * bugfix:emr customization: Update the EC2 service principal when creating the trust policy for EMR default roles to always be ec2.amazonaws.com. * from version 1.33.1 * api-change:`ec2`: U7i instances with up to 32 TiB of DDR5 memory and 896 vCPUs are now available. C7i-flex instances are launched and are lower- priced variants of the Amazon EC2 C7i instances that offer a baseline level of CPU performance with the ability to scale up to the full compute performance 95% of the time. * api-change:`pipes`: This release adds Timestream for LiveAnalytics as a supported target in EventBridge Pipes * api-change:`sagemaker`: Extend DescribeClusterNode response with private DNS hostname and IP address, and placement information about availability zone and availability zone ID. * api-change:`taxsettings`: Initial release of AWS Tax Settings API * from version 1.33.0 * api-change:`amplify`: This doc-only update identifies fields that are specific to Gen 1 and Gen 2 applications. * api-change:`batch`: This release adds support for the AWS Batch GetJobQueueSnapshot API operation. * api-change:`eks`: Adds support for EKS add-ons pod identity associations integration * api-change:`iottwinmaker`: Support RESET_VALUE UpdateType for PropertyUpdates to reset property value to default or null * feature:logs start-live-tail: Adds support for starting a live tail streaming session for one or more log groups. * from version 1.32.117 * api-change:`codebuild`: AWS CodeBuild now supports Self-hosted GitHub Actions runners for Github Enterprise * api-change:`codeguru-security`: This release includes minor model updates and documentation updates. * api-change:`elasticache`: Update to attributes of TestFailover and minor revisions. * api-change:`launch-wizard`: This release adds support for describing workload deployment specifications, deploying additional workload types, and managing tags for Launch Wizard resources with API operations. * from version 1.32.116 * api-change:`acm`: add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`bedrock-agent`: With this release, Knowledge bases for Bedrock adds support for Titan Text Embedding v2. * api-change:`bedrock-runtime`: This release adds Converse and ConverseStream APIs to Bedrock Runtime * api-change:`cloudtrail`: CloudTrail Lake returns PartitionKeys in the GetEventDataStore API response. Events are grouped into partitions based on these keys for better query performance. For example, the calendarday key groups events by day, while combining the calendarday key with the hour key groups them by day and hour. * api-change:`connect`: Adding associatedQueueIds as a SearchCriteria and response field to the SearchRoutingProfiles API * api-change:`emr-serverless`: The release adds support for spark structured streaming. * api-change:`rds`: Updates Amazon RDS documentation for Aurora Postgres DBname. * api-change:`sagemaker`: Adds Model Card information as a new component to Model Package. Autopilot launches algorithm selection for TimeSeries modality to generate AutoML candidates per algorithm. * bugfix:`ssm start-session`: Only provide profile name to session-manager- plugin if provided using --profile flag * from version 1.32.115 * api-change:`athena`: Throwing validation errors on CreateNotebook with Name containing `/`,`:`,`\` * api-change:`codebuild`: AWS CodeBuild now supports manually creating GitHub webhooks * api-change:`connect`: This release includes changes to DescribeContact API's response by including ConnectedToSystemTimestamp, RoutingCriteria, Customer, Campaign, AnsweringMachineDetectionStatus, CustomerVoiceActivity, QualityMetrics, DisconnectDetails, and SegmentAttributes information from a contact in Amazon Connect. * api-change:`glue`: Add optional field JobMode to CreateJob and UpdateJob APIs. * api-change:`securityhub`: Add ROOT type for TargetType model * from version 1.32.114 * api-change:`dynamodb`: Doc-only update for DynamoDB. Specified the IAM actions needed to authorize a user to create a table with a resource-based policy. * api-change:`ec2`: Providing support to accept BgpAsnExtended attribute * api-change:`kafka`: Adds ControllerNodeInfo in ListNodes response to support Raft mode for MSK * api-change:`swf`: This release adds new APIs for deleting activity type and workflow type resources. * from version 1.32.113 * api-change:`dynamodb`: Documentation only updates for DynamoDB. * api-change:`iotfleetwise`: AWS IoT FleetWise now supports listing vehicles with attributes filter, ListVehicles API is updated to support additional attributes filter. * api-change:`managedblockchain`: This is a minor documentation update to address the impact of the shut down of the Goerli and Polygon networks. * from version 1.32.112 * api-change:`emr-serverless`: This release adds the capability to run interactive workloads using Apache Livy Endpoint. * api-change:`opsworks`: Documentation-only update for OpsWorks Stacks. * from version 1.32.111 * api-change:`chatbot`: This change adds support for tagging Chatbot configurations. * api-change:`cloudformation`: Added DeletionMode FORCE_DELETE_STACK for deleting a stack that is stuck in DELETE_FAILED state due to resource deletion failure. * api-change:`kms`: This release includes feature to import customer's asymmetric (RSA, ECC and SM2) and HMAC keys into KMS in China. * api-change:`opensearch`: This release adds support for enabling or disabling a data source configured as part of Zero-ETL integration with Amazon S3, by setting its status. * api-change:`wafv2`: You can now use Security Lake to collect web ACL traffic data. * from version 1.32.110 * api-change:`cloudfront`: Model update; no change to SDK functionality. * api-change:`glue`: Add Maintenance window to CreateJob and UpdateJob APIs and JobRun response. Add a new Job Run State for EXPIRED. * api-change:`lightsail`: This release adds support for Amazon Lightsail instances to switch between dual-stack or IPv4 only and IPv6-only public IP address types. * api-change:`mailmanager`: This release includes a new Amazon SES feature called Mail Manager, which is a set of email gateway capabilities designed to help customers strengthen their organization's email infrastructure, simplify email workflow management, and streamline email compliance control. * api-change:`pi`: Performance Insights added a new input parameter called AuthorizedActions to support the fine-grained access feature. Performance Insights also restricted the acceptable input characters. * api-change:`rds`: Updates Amazon RDS documentation for Db2 license through AWS Marketplace. * api-change:`storagegateway`: Added new SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode enforces encryption and disables AES 128-bit algorithums. * from version 1.32.109 * api-change:`bedrock-agent`: This release adds support for using Guardrails with Bedrock Agents. * api-change:`bedrock-agent-runtime`: This release adds support for using Guardrails with Bedrock Agents. * api-change:`controltower`: Added ListControlOperations API and filtering support for ListEnabledControls API. Updates also includes added metadata for enabled controls and control operations. * api-change:`osis`: Add support for creating an OpenSearch Ingestion pipeline that is attached to a provided VPC. Add information about the destinations of an OpenSearch Ingestion pipeline to the GetPipeline and ListPipelines APIs. * api-change:`rds`: This release adds support for EngineLifecycleSupport on DBInstances, DBClusters, and GlobalClusters. * api-change:`secretsmanager`: add v2 smoke tests and smithy smokeTests trait for SDK testing * from version 1.32.108 * api-change:`application-autoscaling`: add v2 smoke tests and smithy smokeTests trait for SDK testing. * api-change:`codebuild`: Aws CodeBuild now supports 36 hours build timeout * api-change:`elbv2`: This release adds dualstack-without-public-ipv4 IP address type for ALB. * api-change:`lakeformation`: Introduces a new API, GetDataLakePrincipal, that returns the identity of the invoking principal * api-change:`transfer`: Enable use of CloudFormation traits in Smithy model to improve generated CloudFormation schema from the Smithy API model. * from version 1.32.107 * api-change:`acm-pca`: This release adds support for waiters to fail on AccessDeniedException when having insufficient permissions * api-change:`connect`: Adding Contact Flow metrics to the GetMetricDataV2 API * api-change:`kafka`: AWS MSK support for Broker Removal. * api-change:`mwaa`: Amazon MWAA now supports Airflow web server auto scaling to automatically handle increased demand from REST APIs, Command Line Interface (CLI), or more Airflow User Interface (UI) users. Customers can specify maximum and minimum web server instances during environment creation and update workflow. * api-change:`quicksight`: This release adds DescribeKeyRegistration and UpdateKeyRegistration APIs to manage QuickSight Customer Managed Keys (CMK). * api-change:`sagemaker`: Introduced WorkerAccessConfiguration to SageMaker Workteam. This allows customers to configure resource access for workers in a workteam. * api-change:`secretsmanager`: Documentation updates for AWS Secrets Manager * from version 1.32.106 * api-change:`bedrock-agent-runtime`: Updating Bedrock Knowledge Base Metadata & Filters feature with two new filters listContains and stringContains * api-change:`codebuild`: CodeBuild Reserved Capacity VPC Support * api-change:`datasync`: Task executions now display a CANCELLING status when an execution is in the process of being cancelled. * api-change:`grafana`: This release adds new ServiceAccount and ServiceAccountToken APIs. * api-change:`medical-imaging`: Added support for importing medical imaging data from Amazon S3 buckets across accounts and regions. * api-change:`securityhub`: Documentation-only update for AWS Security Hub * Update to 1.32.105 * api-change:`connect`: Amazon Connect provides enhanced search capabilities for flows & flow modules on the Connect admin website and programmatically using APIs. You can search for flows and flow modules by name, description, type, status, and tags, to filter and identify a specific flow in your Connect instances. * api-change:`s3`: Updated a few x-id in the http uri traits * from version 1.32.104 * api-change:`events`: Amazon EventBridge introduces KMS customer-managed key (CMK) encryption support for custom and partner events published on EventBridge Event Bus (including default bus) and UpdateEventBus API. * api-change:`vpc-lattice`: This release adds TLS Passthrough support. It also increases max number of target group per rule to 10. * from version 1.32.103 * api-change:`discovery`: add v2 smoke tests and smithy smokeTests trait for SDK testing * api-change:`greengrassv2`: Mark ComponentVersion in ComponentDeploymentSpecification as required. * api-change:`sagemaker`: Introduced support for G6 instance types on Sagemaker Notebook Instances and on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sso-oidc`: Updated request parameters for PKCE support. * from version 1.32.102 * api-change:`bedrock-agent-runtime`: This release adds support to provide guardrail configuration and modify inference parameters that are then used in RetrieveAndGenerate API in Agents for Amazon Bedrock. * api-change:`pinpoint`: This release adds support for specifying email message headers for Email Templates, Campaigns, Journeys and Send Messages. * api-change:`route53resolver`: Update the DNS Firewall settings to correct a spelling issue. * api-change:`ssm-sap`: Added support for application-aware start/stop of SAP applications running on EC2 instances, with SSM for SAP * api-change:`verifiedpermissions`: Adds policy effect and actions fields to Policy API's. * from version 1.32.101 * api-change:`cognito-idp`: Add EXTERNAL_PROVIDER enum value to UserStatusType. * api-change:`ec2`: Adding Precision Hardware Clock (PHC) to public API DescribeInstanceTypes * api-change:`ecr`: This release adds pull through cache rules support for GitLab container registry in Amazon ECR. * api-change:`fms`: The policy scope resource tag is always a string value, either a non-empty string or an empty string. * api-change:`polly`: Add new engine - generative - that builds the most expressive conversational voices. * api-change:`sqs`: This release adds MessageSystemAttributeNames to ReceiveMessageRequest to replace AttributeNames. * from version 1.32.100 * api-change:`b2bi`: Documentation update to clarify the MappingTemplate definition. * api-change:`budgets`: This release adds tag support for budgets and budget actions. * api-change:`resiliencehub`: AWS Resilience Hub has expanded its drift detection capabilities by introducing a new type of drift detection - application resource drift. This new enhancement detects changes, such as the addition or deletion of resources within the application's input sources. * api-change:`route53profiles`: Doc only update for Route 53 profiles that fixes some link issues * from version 1.32.99 * api-change:`medialive`: AWS Elemental MediaLive now supports configuring how SCTE 35 passthrough triggers segment breaks in HLS and MediaPackage output groups. Previously, messages triggered breaks in all these output groups. The new option is to trigger segment breaks only in groups that have SCTE 35 passthrough enabled. * from version 1.32.98 * api-change:`bedrock-agent`: This release adds support for using Provisioned Throughput with Bedrock Agents. * api-change:`connect`: This release adds 5 new APIs for managing attachments: StartAttachedFileUpload, CompleteAttachedFileUpload, GetAttachedFile, BatchGetAttachedFileMetadata, DeleteAttachedFile. These APIs can be used to programmatically upload and download attachments to Connect resources, like cases. * api-change:`connectcases`: This feature supports the release of Files related items * api-change:`datasync`: Updated guidance on using private or self-signed certificate authorities (CAs) with AWS DataSync object storage locations. * api-change:`inspector2`: This release adds CSV format to GetCisScanReport for Inspector v2 * api-change:`sagemaker`: Amazon SageMaker Inference now supports m6i, c6i, r6i, m7i, c7i, r7i and g5 instance types for Batch Transform Jobs * api-change:`sesv2`: Adds support for specifying replacement headers per BulkEmailEntry in SendBulkEmail in SESv2. * from version 1.32.97 * api-change:`dynamodb`: This release adds support to specify an optional, maximum OnDemandThroughput for DynamoDB tables and global secondary indexes in the CreateTable or UpdateTable APIs. You can also override the OnDemandThroughput settings by calling the ImportTable, RestoreFromPointInTime, or RestoreFromBackup APIs. * api-change:`ec2`: This release includes a new API for retrieving the public endorsement key of the EC2 instance's Nitro Trusted Platform Module (NitroTPM). * api-change:`personalize`: This releases ability to delete users and their data, including their metadata and interactions data, from a dataset group. * api-change:`redshift-serverless`: Update Redshift Serverless List Scheduled Actions Output Response to include Namespace Name. * from version 1.32.96 * api-change:`bedrock-agent`: This release adds support for using MongoDB Atlas as a vector store when creating a knowledge base. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`personalize-runtime`: This release adds support for a Reason attribute for predicted items generated by User-Personalization-v2. * api-change:`securityhub`: Updated CreateMembers API request with limits. * api-change:`sesv2`: Fixes ListContacts and ListImportJobs APIs to use POST instead of GET. * from version 1.32.95 * api-change:`chime-sdk-voice`: Due to changes made by the Amazon Alexa service, GetSipMediaApplicationAlexaSkillConfiguration and PutSipMediaApplicationAlexaSkillConfiguration APIs are no longer available for use. For more information, refer to the Alexa Smart Properties page. * api-change:`codeartifact`: Add support for the Ruby package format. * api-change:`fms`: AWS Firewall Manager now supports the network firewall service stream exception policy feature for accounts within your organization. * api-change:`omics`: Add support for workflow sharing and dynamic run storage * api-change:`opensearch`: This release enables customers to create Route53 A and AAAA alias record types to point custom endpoint domain to OpenSearch domain's dualstack search endpoint. * api-change:`pinpoint-sms-voice-v2`: Amazon Pinpoint has added two new features Multimedia services (MMS) and protect configurations. Use the three new MMS APIs to send media messages to a mobile phone which includes image, audio, text, or video files. Use the ten new protect configurations APIs to block messages to specific countries. * api-change:`qbusiness`: This is a general availability (GA) release of Amazon Q Business. Q Business enables employees in an enterprise to get comprehensive answers to complex questions and take actions through a unified, intuitive web-based chat experience - using an enterprise's existing content, data, and systems. * api-change:`quicksight`: New Q embedding supporting Generative Q&A * api-change:`route53resolver`: Release of FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall Rule. This allows customers to configure a DNS Firewall rule to inspect all the domains in the DNS redirection chain (default) , such as CNAME, ALIAS, DNAME, etc., or just the first domain and trust the rest. * api-change:`sagemaker`: Amazon SageMaker Training now supports the use of attribute-based access control (ABAC) roles for training job execution roles. Amazon SageMaker Inference now supports G6 instance types. * api-change:`signer`: Documentation updates for AWS Signer. Adds cross- account signing constraint and definitions for cross-account actions. * from version 1.32.94 * api-change:`amplify`: Updating max results limit for listing any resources (Job, Artifacts, Branch, BackendResources, DomainAssociation) to 50 with the exception of list apps that where max results can be up to 100. * api-change:`connectcases`: This feature releases DeleteField, DeletedLayout, and DeleteTemplate API's * api-change:`inspector2`: Update Inspector2 to include new Agentless API parameters. * api-change:`timestream-query`: This change allows users to update and describe account settings associated with their accounts. * api-change:`transcribe`: This update provides error messaging for generative call summarization in Transcribe Call Analytics * api-change:`trustedadvisor`: This release adds the BatchUpdateRecommendationResourceExclusion API to support batch updates of Recommendation Resource exclusion statuses and introduces a new exclusion status filter to the ListRecommendationResources and ListOrganizationRecommendationResources APIs. * from version 1.32.93 * api-change:`codepipeline`: Add ability to manually and automatically roll back a pipeline stage to a previously successful execution. * api-change:`cognito-idp`: Add LimitExceededException to SignUp errors * api-change:`connectcampaigns`: This release adds support for specifying if Answering Machine should wait for prompt sound. * api-change:`marketplace-entitlement`: Releasing minor endpoint updates. * api-change:`oam`: This release introduces support for Source Accounts to define which Metrics and Logs to share with the Monitoring Account * api-change:`rds`: SupportsLimitlessDatabase field added to describe-db- engine-versions to indicate whether the DB engine version supports Aurora Limitless Database. * api-change:`support`: Releasing minor endpoint updates. * enhancement:dependency: Bump upper bound of colorama to <0.4.7; fixes `#7086 <https://github.com/aws/aws-cli/issues/7086>`__ * from version 1.32.92 * api-change:`appsync`: UpdateGraphQLAPI documentation update and datasource introspection secret arn update * api-change:`fms`: AWS Firewall Manager adds support for network ACL policies to manage Amazon Virtual Private Cloud (VPC) network access control lists (ACLs) for accounts in your organization. * api-change:`ivs`: Bug Fix: IVS does not support arns with the `svs` prefix * api-change:`ivs-realtime`: Bug Fix: IVS Real Time does not support ARNs using the `svs` prefix. * api-change:`rds`: Updates Amazon RDS documentation for setting local time zones for RDS for Db2 DB instances. * api-change:`stepfunctions`: Add new ValidateStateMachineDefinition operation, which performs syntax checking on the definition of a Amazon States Language (ASL) state machine. * from version 1.32.91 * api-change:`datasync`: This change allows users to disable and enable the schedules associated with their tasks. * api-change:`ec2`: Launching capability for customers to enable or disable automatic assignment of public IPv4 addresses to their network interface * api-change:`emr-containers`: EMRonEKS Service support for SecurityConfiguration enforcement for Spark Jobs. * api-change:`entityresolution`: Support Batch Unique IDs Deletion. * api-change:`gamelift`: Amazon GameLift releases container fleets support for public preview. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`ssm`: Add SSM DescribeInstanceProperties API to public AWS SDK. * from version 1.32.90 * api-change:`bedrock`: This release introduces Model Evaluation and Guardrails for Amazon Bedrock. * api-change:`bedrock-agent`: Introducing the ability to create multiple data sources per knowledge base, specify S3 buckets as data sources from external accounts, and exposing levers to define the deletion behavior of the underlying vector store data. * api-change:`bedrock-agent-runtime`: This release introduces zero-setup file upload support for the RetrieveAndGenerate API. This allows you to chat with your data without setting up a Knowledge Base. * api-change:`bedrock-runtime`: This release introduces Guardrails for Amazon Bedrock. * api-change:`ce`: Added additional metadata that might be applicable to your reservation recommendations. * api-change:`ec2`: This release introduces EC2 AMI Deregistration Protection, a new AMI property that can be enabled by customers to protect an AMI against an unintended deregistration. This release also enables the AMI owners to view the AMI 'LastLaunchedTime' in DescribeImages API. * api-change:`pi`: Clarifies how aggregation works for GetResourceMetrics in the Performance Insights API. * api-change:`rds`: Fix the example ARN for ModifyActivityStreamRequest * api-change:`workspaces-web`: Added InstanceType and MaxConcurrentSessions parameters on CreatePortal and UpdatePortal Operations as well as the ability to read Customer Managed Key & Additional Encryption Context parameters on supported resources (Portal, BrowserSettings, UserSettings, IPAccessSettings) * from version 1.32.89 * api-change:`bedrock-agent`: Releasing the support for simplified configuration and return of control * api-change:`bedrock-agent-runtime`: Releasing the support for simplified configuration and return of control * api-change:`payment-cryptography`: Adding support to TR-31/TR-34 exports for optional headers, allowing customers to add additional metadata (such as key version and KSN) when exporting keys from the service. * api-change:`redshift-serverless`: Updates description of schedule field for scheduled actions. * api-change:`route53profiles`: Route 53 Profiles allows you to apply a central DNS configuration across many VPCs regardless of account. * api-change:`sagemaker`: This release adds support for Real-Time Collaboration and Shared Space for JupyterLab App on SageMaker Studio. * api-change:`servicediscovery`: This release adds examples to several Cloud Map actions. * api-change:`transfer`: Adding new API to support remote directory listing using SFTP connector * from version 1.32.88 * api-change:`glue`: Adding RowFilter in the response for GetUnfilteredTableMetadata API * api-change:`internetmonitor`: This update introduces the GetInternetEvent and ListInternetEvents APIs, which provide access to internet events displayed on the Amazon CloudWatch Internet Weather Map. * api-change:`personalize`: This releases auto training capability while creating a solution and automatically syncing latest solution versions when creating/updating a campaign * from version 1.32.87 * api-change:`drs`: Outpost ARN added to Source Server and Recovery Instance * api-change:`emr-serverless`: This release adds the capability to publish detailed Spark engine metrics to Amazon Managed Service for Prometheus (AMP) for enhanced monitoring for Spark jobs. * api-change:`guardduty`: Added IPv6Address fields for local and remote IP addresses * api-change:`quicksight`: This release adds support for the Cross Sheet Filter and Control features, and support for warnings in asset imports for any permitted errors encountered during execution * api-change:`rolesanywhere`: This release introduces the PutAttributeMapping and DeleteAttributeMapping APIs. IAM Roles Anywhere now provides the capability to define a set of mapping rules, allowing customers to specify which data is extracted from their X.509 end-entity certificates. * api-change:`sagemaker`: Removed deprecated enum values and updated API documentation. * api-change:`workspaces`: Adds new APIs for managing and sharing WorkSpaces BYOL configuration across accounts. * from version 1.32.86 * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`qbusiness`: This release adds support for IAM Identity Center (IDC) as the identity gateway for Q Business. It also allows users to provide an explicit intent for Q Business to identify how the Chat request should be handled. * from version 1.32.85 * api-change:`bedrock-agent`: For Create Agent API, the agentResourceRoleArn parameter is no longer required. * api-change:`emr-serverless`: This release adds support for shuffle optimized disks that allow larger disk sizes and higher IOPS to efficiently run shuffle heavy workloads. * api-change:`entityresolution`: Cross Account Resource Support . * api-change:`iotwireless`: Add PublicGateways in the GetWirelessStatistics call response, indicating the LoRaWAN public network accessed by the device. * api-change:`lakeformation`: This release adds Lake Formation managed RAM support for the 4 APIs * "DescribeLakeFormationIdentityCenterConfiguration", "CreateLakeFormationIdentityCenterConfiguration", "DescribeLakeFormationIdentityCenterConfiguration", and "DeleteLakeFormationIdentityCenterConfiguration" * api-change:`m2`: Adding new ListBatchJobRestartPoints API and support for restart batch job. * api-change:`mediapackagev2`: Dash v2 is a MediaPackage V2 feature to support egressing on DASH manifest format. * api-change:`outposts`: This release adds new APIs to allow customers to configure their Outpost capacity at order-time. * api-change:`wellarchitected`: AWS Well-Architected now has a Connector for Jira to allow customers to efficiently track workload risks and improvement efforts and create closed-loop mechanisms. * from version 1.32.84 * api-change:`cloudformation`: Adding support for the new parameter "IncludePropertyValues" in the CloudFormation DescribeChangeSet API. When this parameter is included, the DescribeChangeSet response will include more detailed information such as before and after values for the resource properties that will change. * api-change:`config`: Updates documentation for AWS Config * api-change:`glue`: Modifying request for GetUnfilteredTableMetadata for view-related fields. * api-change:`healthlake`: Added new CREATE_FAILED status for data stores. Added new errorCause to DescribeFHIRDatastore API and ListFHIRDatastores API response for additional insights into data store creation and deletion workflows. * api-change:`iotfleethub`: Documentation updates for AWS IoT Fleet Hub to clarify that Fleet Hub supports organization instance of IAM Identity Center. * api-change:`kms`: This feature supports the ability to specify a custom rotation period for automatic key rotations, the ability to perform on- demand key rotations, and visibility into your key material rotations. * api-change:`mediatailor`: Added InsertionMode to PlaybackConfigurations. This setting controls whether players can use stitched or guided ad insertion. The default for players that do not specify an insertion mode is stitched. * api-change:`neptune-graph`: Update to API documentation to resolve customer reported issues. * api-change:`outposts`: This release adds EXPEDITORS as a valid shipment carrier. * api-change:`redshift`: Adds support for Amazon Redshift DescribeClusterSnapshots API to include Snapshot ARN response field. * api-change:`transfer`: This change releases support for importing self signed certificates to the Transfer Family for sending outbound file transfers over TLS/HTTPS. * from version 1.32.83 * api-change:`batch`: This release adds the task properties field to attempt details and the name field on EKS container detail. * api-change:`cloudfront`: CloudFront origin access control extends support to AWS Lambda function URLs and AWS Elemental MediaPackage v2 origins. * api-change:`cloudwatch`: This release adds support for Metric Characteristics for CloudWatch Anomaly Detection. Anomaly Detector now takes Metric Characteristics object with Periodic Spikes boolean field that tells Anomaly Detection that spikes that repeat at the same time every week are part of the expected pattern. * api-change:`codebuild`: Support access tokens for Bitbucket sources * api-change:`iam`: For CreateOpenIDConnectProvider API, the ThumbprintList parameter is no longer required. * api-change:`medialive`: AWS Elemental MediaLive introduces workflow monitor, a new feature that enables the visualization and monitoring of your media workflows. Create signal maps of your existing workflows and monitor them by creating notification and monitoring template groups. * api-change:`omics`: This release adds support for retrieval of S3 direct access metadata on sequence stores and read sets, and adds support for SHA256up and SHA512up HealthOmics ETags. * api-change:`pipes`: LogConfiguration ARN validation fixes * api-change:`rds`: Updates Amazon RDS documentation for Standard Edition 2 support in RDS Custom for Oracle. * api-change:`s3control`: Documentation updates for Amazon S3-control. * from version 1.32.82 * api-change:`cleanrooms`: AWS Clean Rooms Differential Privacy is now fully available. Differential privacy protects against user-identification attempts. * api-change:`connect`: This release adds new Submit Auto Evaluation Action for Amazon Connect Rules. * api-change:`networkmonitor`: Examples were added to CloudWatch Network Monitor commands. * api-change:`qconnect`: This release adds a new QiC public API updateSession and updates an existing QiC public API createSession * api-change:`rekognition`: Added support for ContentType to content moderation detections. * api-change:`supplychain`: This release includes API SendDataIntegrationEvent for AWS Supply Chain * api-change:`workspaces-thin-client`: Adding tags field to SoftwareSet. Removing tags fields from Summary objects. Changing the list of exceptions in tagging APIs. Fixing an issue where the SDK returns empty tags in Get APIs. * from version 1.32.81 * api-change:`codebuild`: Add new webhook filter types for GitHub webhooks * api-change:`mediaconvert`: This release includes support for bringing your own fonts to use for burn-in or DVB-Sub captioning workflows. * api-change:`pinpoint`: The OrchestrationSendingRoleArn has been added to the email channel and is used to send emails from campaigns or journeys. * api-change:`rds`: This release adds support for specifying the CA certificate to use for the new db instance when restoring from db snapshot, restoring from s3, restoring to point in time, and creating a db instance read replica. * from version 1.32.80 * api-change:`controlcatalog`: This is the initial SDK release for AWS Control Catalog, a central catalog for AWS managed controls. This release includes 3 new APIs - ListDomains, ListObjectives, and ListCommonControls - that vend high-level data to categorize controls across the AWS platform. * api-change:`mgn`: Added USE_SOURCE as default option to LaunchConfigurationTemplate bootMode parameter. * api-change:`networkmonitor`: Updated the allowed monitorName length for CloudWatch Network Monitor. * from version 1.32.79 * api-change:`quicksight`: Adding IAMIdentityCenterInstanceArn parameter to CreateAccountSubscription * api-change:`resource-groups`: Added a new QueryErrorCode RESOURCE_TYPE_NOT_SUPPORTED that is returned by the ListGroupResources operation if the group query contains unsupported resource types. * api-change:`verifiedpermissions`: Adding BatchIsAuthorizedWithToken API which supports multiple authorization requests against a PolicyStore given a bearer token. * from version 1.32.78 * api-change:`b2bi`: Adding support for X12 5010 HIPAA EDI version and associated transaction sets. * api-change:`cleanrooms`: Feature: New schemaStatusDetails field to the existing Schema object that displays a status on Schema API responses to show whether a schema is queryable or not. New BatchGetSchemaAnalysisRule API to retrieve multiple schemaAnalysisRules using a single API call. * api-change:`ec2`: Amazon EC2 G6 instances powered by NVIDIA L4 Tensor Core GPUs can be used for a wide range of graphics-intensive and machine learning use cases. Gr6 instances also feature NVIDIA L4 GPUs and can be used for graphics workloads with higher memory requirements. * api-change:`emr-containers`: This release adds support for integration with EKS AccessEntry APIs to enable automatic Cluster Access for EMR on EKS. * api-change:`ivs`: API update to include an SRT ingest endpoint and passphrase for all channels. * api-change:`verifiedpermissions`: Adds GroupConfiguration field to Identity Source API's * from version 1.32.77 * api-change:`cleanroomsml`: The release includes a public SDK for AWS Clean Rooms ML APIs, making them globally available to developers worldwide. * api-change:`cloudformation`: This release would return a new field - PolicyAction in cloudformation's existed DescribeChangeSetResponse, showing actions we are going to apply on the physical resource (e.g., Delete, Retain) according to the user's template * api-change:`datazone`: This release supports the feature of dataQuality to enrich asset with dataQualityResult in Amazon DataZone. * api-change:`docdb`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`groundstation`: This release adds visibilityStartTime and visibilityEndTime to DescribeContact and ListContacts responses. * api-change:`lambda`: Add Ruby 3.3 (ruby3.3) support to AWS Lambda * api-change:`medialive`: Cmaf Ingest outputs are now supported in Media Live * api-change:`medical-imaging`: SearchImageSets API now supports following enhancements - Additional support for searching on UpdatedAt and SeriesInstanceUID - Support for searching existing filters between dates/times - Support for sorting the search result by Ascending/Descending - Additional parameters returned in the response * api-change:`transfer`: Add ability to specify Security Policies for SFTP Connectors * from version 1.32.76 * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`glue`: Adding View related fields to responses of read-only Table APIs. * api-change:`ivschat`: Doc-only update. Changed "Resources" to "Key Concepts" in docs and updated text. * api-change:`rolesanywhere`: This release increases the limit on the roleArns request parameter for the *Profile APIs that support it. This parameter can now take up to 250 role ARNs. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.32.75 * api-change:`cloudwatch`: This release adds support for CloudWatch Anomaly Detection on cross-account metrics. SingleMetricAnomalyDetector and MetricDataQuery inputs to Anomaly Detection APIs now take an optional AccountId field. * api-change:`datazone`: This release supports the feature of AI recommendations for descriptions to enrich the business data catalog in Amazon DataZone. * api-change:`deadline`: AWS Deadline Cloud is a new fully managed service that helps customers set up, deploy, and scale rendering projects in minutes, so they can improve the efficiency of their rendering pipelines and take on more projects. * api-change:`emr`: This release fixes a broken link in the documentation. * api-change:`lightsail`: This release adds support to upgrade the TLS version of the distribution. * from version 1.32.74 * api-change:`b2bi`: Supporting new EDI X12 transaction sets for X12 versions 4010, 4030, and 5010. * api-change:`codebuild`: Add new fleet status code for Reserved Capacity. * api-change:`codeconnections`: Duplicating the CodeStar Connections service into the new, rebranded AWS CodeConnections service. * api-change:`internetmonitor`: This release adds support to allow customers to track cross account monitors through ListMonitor, GetMonitor, ListHealthEvents, GetHealthEvent, StartQuery APIs. * api-change:`iotwireless`: Add support for retrieving key historical and live metrics for LoRaWAN devices and gateways * api-change:`marketplace-catalog`: This release enhances the ListEntities API to support ResaleAuthorizationId filter and sort for OfferEntity in the request and the addition of a ResaleAuthorizationId field in the response of OfferSummary. * api-change:`neptune-graph`: Add the new API Start-Import-Task for Amazon Neptune Analytics. * api-change:`sagemaker`: This release adds support for custom images for the CodeEditor App on SageMaker Studio * enhancement:`s3`: Add parameter to validate source and destination S3 URIs to the `mv` command. * from version 1.32.73 * api-change:`codecatalyst`: This release adds support for understanding pending changes to subscriptions by including two new response parameters for the GetSubscription API for Amazon CodeCatalyst. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate recommendations with a new customization preference, Memory Utilization. * api-change:`ec2`: Amazon EC2 C7gd, M7gd and R7gd metal instances with up to 3.8 TB of local NVMe-based SSD block-level storage have up to 45% improved real-time NVMe storage performance than comparable Graviton2-based instances. * api-change:`eks`: Add multiple customer error code to handle customer caused failure when managing EKS node groups * api-change:`guardduty`: Add EC2 support for GuardDuty Runtime Monitoring auto management. * api-change:`neptune-graph`: Update ImportTaskCancelled waiter to evaluate task state correctly and minor documentation changes. * api-change:`oam`: This release adds support for sharing AWS::InternetMonitor::Monitor resources. * api-change:`quicksight`: Amazon QuickSight: Adds support for setting up VPC Endpoint restrictions for accessing QuickSight Website. * from version 1.32.72 * api-change:`batch`: This feature allows AWS Batch to support configuration of imagePullSecrets and allowPrivilegeEscalation for jobs running on EKS * api-change:`bedrock-agent`: This changes introduces metadata documents statistics and also updates the documentation for bedrock agent. * api-change:`bedrock-agent-runtime`: This release introduces filtering support on Retrieve and RetrieveAndGenerate APIs. * api-change:`elasticache`: Added minimum capacity to Amazon ElastiCache Serverless. This feature allows customer to ensure minimum capacity even without current load * api-change:`secretsmanager`: Documentation updates for Secrets Manager * from version 1.32.71 * api-change:`bedrock-agent-runtime`: This release adds support to customize prompts sent through the RetrieveAndGenerate API in Agents for Amazon Bedrock. * api-change:`ce`: Adds support for backfill of cost allocation tags, with new StartCostAllocationTagBackfill and ListCostAllocationTagBackfillHistory API. * api-change:`ec2`: Documentation updates for Elastic Compute Cloud (EC2). * api-change:`ecs`: This is a documentation update for Amazon ECS. * api-change:`finspace`: Add new operation delete-kx-cluster-node and add status parameter to list-kx-cluster-node operation. * from version 1.32.70 * api-change:`codebuild`: Supporting GitLab and GitLab Self Managed as source types in AWS CodeBuild. * api-change:`ec2`: Added support for ModifyInstanceMetadataDefaults and GetInstanceMetadataDefaults to set Instance Metadata Service account defaults * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`emr-containers`: This release increases the number of supported job template parameters from 20 to 100. * api-change:`globalaccelerator`: AWS Global Accelerator now supports cross- account sharing for bring your own IP addresses. * api-change:`medialive`: Exposing TileMedia H265 options * api-change:`sagemaker`: Introduced support for the following new instance types on SageMaker Studio for JupyterLab and CodeEditor applications: m6i, m6id, m7i, c6i, c6id, c7i, r6i, r6id, r7i, and p5 * from version 1.32.69 * api-change:`firehose`: Updates Amazon Firehose documentation for message regarding Enforcing Tags IAM Policy. * api-change:`kendra`: Documentation update, March 2024. Corrects some docs for Amazon Kendra. * api-change:`pricing`: Add ResourceNotFoundException to ListPriceLists and GetPriceListFileUrl APIs * api-change:`rolesanywhere`: This release relaxes constraints on the durationSeconds request parameter for the *Profile APIs that support it. This parameter can now take on values that go up to 43200. * api-change:`securityhub`: Added new resource detail object to ASFF, including resource for LastKnownExploitAt * from version 1.32.68 * api-change:`codeartifact`: This release adds Package groups to CodeArtifact so you can more conveniently configure package origin controls for multiple packages. * from version 1.32.67 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for DynamoDB tables and streams. IAM Access Analyzer helps you author functional and secure resource-based policies and identify cross-account access. Updated service API, documentation, and paginators. * api-change:`codebuild`: This release adds support for new webhook events (RELEASED and PRERELEASED) and filter types (TAG_NAME and RELEASE_NAME). * api-change:`connect`: This release updates the *InstanceStorageConfig APIs to support a new ResourceType: REAL_TIME_CONTACT_ANALYSIS_CHAT_SEGMENTS. Use this resource type to enable streaming for real-time analysis of chat contacts and to associate a Kinesis stream where real-time analysis chat segments will be published. * api-change:`dynamodb`: This release introduces 3 new APIs ('GetResourcePolicy', 'PutResourcePolicy' and 'DeleteResourcePolicy') and modifies the existing 'CreateTable' API for the resource-based policy support. It also modifies several APIs to accept a 'TableArn' for the 'TableName' parameter. * api-change:`managedblockchain-query`: AMB Query: update GetTransaction to include transactionId as input * api-change:`savingsplans`: Introducing the Savings Plans Return feature enabling customers to return their Savings Plans within 7 days of purchase. * from version 1.32.66 * api-change:`cloudformation`: Documentation update, March 2024. Corrects some formatting. * api-change:`ec2`: This release adds the new DescribeMacHosts API operation for getting information about EC2 Mac Dedicated Hosts. Users can now see the latest macOS versions that their underlying Apple Mac can support without needing to be updated. * api-change:`finspace`: Adding new attributes readWrite and onDemand to dataview models for Database Maintenance operations. * api-change:`logs`: Update LogSamples field in Anomaly model to be a list of LogEvent * api-change:`managedblockchain-query`: Introduces a new API for Amazon Managed Blockchain Query: ListFilteredTransactionEvents. * from version 1.32.65 * api-change:`cloudformation`: This release supports for a new API ListStackSetAutoDeploymentTargets, which provider auto-deployment configuration as a describable resource. Customers can now view the specific combinations of regions and OUs that are being auto-deployed. * api-change:`kms`: Adds the ability to use the default policy name by omitting the policyName parameter in calls to PutKeyPolicy and GetKeyPolicy * api-change:`mediatailor`: This release adds support to allow customers to show different content within a channel depending on metadata associated with the viewer. * api-change:`rds`: This release launches the ModifyIntegration API and support for data filtering for zero-ETL Integrations. * api-change:`s3`: Fix two issues with response root node names. * api-change:`timestream-query`: Documentation updates, March 2024 * from version 1.32.64 * api-change:`backup`: This release introduces a boolean attribute ManagedByAWSBackupOnly as part of ListRecoveryPointsByResource api to filter the recovery points based on ownership. This attribute can be used to filter out the recovery points protected by AWSBackup. * api-change:`codebuild`: AWS CodeBuild now supports overflow behavior on Reserved Capacity. * api-change:`connect`: This release adds Hierarchy based Access Control fields to Security Profile public APIs and adds support for UserAttributeFilter to SearchUsers API. * api-change:`ec2`: Add media accelerator and neuron device information on the describe instance types API. * api-change:`kinesisanalyticsv2`: Support for Flink 1.18 in Managed Service for Apache Flink * api-change:`s3`: Documentation updates for Amazon S3. * api-change:`sagemaker`: Adds m6i, m6id, m7i, c6i, c6id, c7i, r6i r6id, r7i, p5 instance type support to Sagemaker Notebook Instances and miscellaneous wording fixes for previous Sagemaker documentation. * api-change:`workspaces-thin-client`: Removed unused parameter kmsKeyArn from UpdateDeviceRequest * from version 1.32.63 * api-change:`amplify`: Documentation updates for Amplify. Identifies the APIs available only to apps created using Amplify Gen 1. * api-change:`ec2-instance-connect`: This release includes a new exception type "SerialConsoleSessionUnsupportedException" for SendSerialConsoleSSHPublicKey API. * api-change:`elbv2`: This release allows you to configure HTTP client keep- alive duration for communication between clients and Application Load Balancers. * api-change:`fis`: This release adds support for previewing target resources before running a FIS experiment. It also adds resource ARNs for actions, experiments, and experiment templates to API responses. * api-change:`rds`: Updates Amazon RDS documentation for EBCDIC collation for RDS for Db2. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`timestream-influxdb`: This is the initial SDK release for Amazon Timestream for InfluxDB. Amazon Timestream for InfluxDB is a new time-series database engine that makes it easy for application developers and DevOps teams to run InfluxDB databases on AWS for near real-time time-series applications using open source APIs. * from version 1.32.62 * api-change:`ivs-realtime`: adds support for multiple new composition layout configuration options (grid, pip) * api-change:`kinesisanalyticsv2`: Support new RuntimeEnvironmentUpdate parameter within UpdateApplication API allowing callers to change the Flink version upon which their application runs. * api-change:`s3`: This release makes the default option for S3 on Outposts request signing to use the SigV4A algorithm when using AWS Common Runtime (CRT). * from version 1.32.61 * api-change:`cloudformation`: CloudFormation documentation update for March, 2024 * api-change:`connect`: This release increases MaxResults limit to 500 in request for SearchUsers, SearchQueues and SearchRoutingProfiles APIs of Amazon Connect. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`kafka`: Added support for specifying the starting position of topic replication in MSK-Replicator. * api-change:`ssm`: March 2024 doc-only updates for Systems Manager. * from version 1.32.60 * api-change:`codestar-connections`: Added a sync configuration enum to disable publishing of deployment status to source providers (PublishDeploymentStatus). Added a sync configuration enum (TriggerStackUpdateOn) to only trigger changes. * api-change:`elasticache`: Revisions to API text that are now to be carried over to SDK text, changing usages of "SFO" in code examples to "us-west-1", and some other typos. * api-change:`mediapackagev2`: This release enables customers to safely update their MediaPackage v2 channel groups, channels and origin endpoints using entity tags. * from version 1.32.59 * api-change:`batch`: This release adds JobStateTimeLimitActions setting to the Job Queue API. It allows you to configure an action Batch can take for a blocking job in front of the queue after the defined period of time. The new parameter applies for ECS, EKS, and FARGATE Job Queues. * api-change:`bedrock-agent-runtime`: Documentation update for Bedrock Runtime Agent * api-change:`cloudtrail`: Added exceptions to CreateTrail, DescribeTrails, and ListImportFailures APIs. * api-change:`codebuild`: This release adds support for a new webhook event: PULL_REQUEST_CLOSED. * api-change:`cognito-idp`: Add ConcurrentModificationException to SetUserPoolMfaConfig * api-change:`guardduty`: Add RDS Provisioned and Serverless Usage types * api-change:`transfer`: Added DES_EDE3_CBC to the list of supported encryption algorithms for messages sent with an AS2 connector. * from version 1.32.58 * api-change:`appconfig`: AWS AppConfig now supports dynamic parameters, which enhance the functionality of AppConfig Extensions by allowing you to provide parameter values to your Extensions at the time you deploy your configuration. * api-change:`ec2`: This release adds an optional parameter to RegisterImage and CopyImage APIs to support tagging AMIs at the time of creation. * api-change:`grafana`: Adds support for the new GrafanaToken as part of the Amazon Managed Grafana Enterprise plugins upgrade to associate your AWS account with a Grafana Labs account. * api-change:`lambda`: Documentation updates for AWS Lambda * api-change:`payment-cryptography-data`: AWS Payment Cryptography EMV Decrypt Feature Release * api-change:`rds`: Updates Amazon RDS documentation for io2 storage for Multi-AZ DB clusters * api-change:`snowball`: Doc-only update for change to EKS-Anywhere ordering. * api-change:`wafv2`: You can increase the max request body inspection size for some regional resources. The size setting is in the web ACL association config. Also, the AWSManagedRulesBotControlRuleSet EnableMachineLearning setting now takes a Boolean instead of a primitive boolean type, for languages like Java. * api-change:`workspaces`: Added note for user decoupling * from version 1.32.57 * api-change:`dynamodb`: Doc only updates for DynamoDB documentation * api-change:`imagebuilder`: Add PENDING status to Lifecycle Execution resource status. Add StartTime and EndTime to ListLifecycleExecutionResource API response. * api-change:`mwaa`: Amazon MWAA adds support for Apache Airflow v2.8.1. * api-change:`rds`: Updated the input of CreateDBCluster and ModifyDBCluster to support setting CA certificates. Updated the output of DescribeDBCluster to show current CA certificate setting value. * api-change:`redshift`: Update for documentation only. Covers port ranges, definition updates for data sharing, and definition updates to cluster- snapshot documentation. * api-change:`verifiedpermissions`: Deprecating details in favor of configuration for GetIdentitySource and ListIdentitySources APIs. * from version 1.32.56 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`chatbot`: Minor update to documentation. * api-change:`organizations`: This release contains an endpoint addition * api-change:`sesv2`: Adds support for providing custom headers within SendEmail and SendBulkEmail for SESv2. * from version 1.32.55 * api-change:`cloudformation`: Add DetailedStatus field to DescribeStackEvents and DescribeStacks APIs * api-change:`fsx`: Added support for creating FSx for NetApp ONTAP file systems with up to 12 HA pairs, delivering up to 72 GB/s of read throughput and 12 GB/s of write throughput. * api-change:`organizations`: Documentation update for AWS Organizations * from version 1.32.54 * api-change:`accessanalyzer`: Fixed a typo in description field. * api-change:`autoscaling`: With this release, Amazon EC2 Auto Scaling groups, EC2 Fleet, and Spot Fleet improve the default price protection behavior of attribute-based instance type selection of Spot Instances, to consistently select from a wide range of instance types. * api-change:`ec2`: With this release, Amazon EC2 Auto Scaling groups, EC2 Fleet, and Spot Fleet improve the default price protection behavior of attribute-based instance type selection of Spot Instances, to consistently select from a wide range of instance types. * from version 1.32.53 * api-change:`docdb-elastic`: Launched Elastic Clusters Readable Secondaries, Start/Stop, Configurable Shard Instance count, Automatic Backups and Snapshot Copying * api-change:`eks`: Added support for new AL2023 AMIs to the supported AMITypes. * api-change:`lexv2-models`: This release makes AMAZON.QnAIntent generally available in Amazon Lex. This generative AI feature leverages large language models available through Amazon Bedrock to automate frequently asked questions (FAQ) experience for end-users. * api-change:`migrationhuborchestrator`: Adds new CreateTemplate, UpdateTemplate and DeleteTemplate APIs. * api-change:`quicksight`: TooltipTarget for Combo chart visuals; ColumnConfiguration limit increase to 2000; Documentation Update * api-change:`sagemaker`: Adds support for ModelDataSource in Model Packages to support unzipped models. Adds support to specify SourceUri for models which allows registration of models without mandating a container for hosting. Using SourceUri, customers can decouple the model from hosting information during registration. * api-change:`securitylake`: Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason. * from version 1.32.52 * api-change:`batch`: This release adds Batch support for configuration of multicontainer jobs in ECS, Fargate, and EKS. This support is available for all types of jobs, including both array jobs and multi-node parallel jobs. * api-change:`bedrock-agent-runtime`: This release adds support to override search strategy performed by the Retrieve and RetrieveAndGenerate APIs for Amazon Bedrock Agents * api-change:`ce`: This release introduces the new API 'GetApproximateUsageRecords', which retrieves estimated usage records for hourly granularity or resource-level data at daily granularity. * api-change:`ec2`: This release increases the range of MaxResults for GetNetworkInsightsAccessScopeAnalysisFindings to 1,000. * api-change:`iot`: This release reduces the maximum results returned per query invocation from 500 to 100 for the SearchIndex API. This change has no implications as long as the API is invoked until the nextToken is NULL. * api-change:`wafv2`: AWS WAF now supports configurable time windows for request aggregation with rate-based rules. Customers can now select time windows of 1 minute, 2 minutes or 10 minutes, in addition to the previously supported 5 minutes. * from version 1.32.51 * api-change:`amplifyuibuilder`: We have added the ability to tag resources after they are created * from version 1.32.50 * api-change:`apigateway`: Documentation updates for Amazon API Gateway. * api-change:`drs`: Added volume status to DescribeSourceServer replicated volumes. * api-change:`kafkaconnect`: Adds support for tagging, with new TagResource, UntagResource and ListTagsForResource APIs to manage tags and updates to existing APIs to allow tag on create. This release also adds support for the new DeleteWorkerConfiguration API. * api-change:`rds`: This release adds support for gp3 data volumes for Multi- AZ DB Clusters. * from version 1.32.49 * api-change:`appsync`: Documentation only updates for AppSync * api-change:`qldb`: Clarify possible values for KmsKeyArn and EncryptionDescription. * api-change:`rds`: Add pattern and length based validations for DBShardGroupIdentifier * api-change:`rum`: Doc-only update for new RUM metrics that were added * from version 1.32.48 * api-change:`internetmonitor`: This release adds IPv4 prefixes to health events * api-change:`kinesisvideo`: Increasing NextToken parameter length restriction for List APIs from 512 to 1024. * from version 1.32.47 * api-change:`iotevents`: Increase the maximum length of descriptions for Inputs, Detector Models, and Alarm Models * api-change:`lookoutequipment`: This release adds a field exposing model quality to read APIs for models. It also adds a model quality field to the API response when creating an inference scheduler. * api-change:`medialive`: MediaLive now supports the ability to restart pipelines in a running channel. * api-change:`ssm`: This release adds support for sharing Systems Manager parameters with other AWS accounts. * from version 1.32.46 * api-change:`dynamodb`: Publishing quick fix for doc only update. * api-change:`firehose`: This release updates a few Firehose related APIs. * api-change:`lambda`: Add .NET 8 (dotnet8) Runtime support to AWS Lambda. * from version 1.32.45 * api-change:`amplify`: This release contains API changes that enable users to configure their Amplify domains with their own custom SSL/TLS certificate. * api-change:`chatbot`: This release adds support for AWS Chatbot. You can now monitor, operate, and troubleshoot your AWS resources with interactive ChatOps using the AWS SDK. * api-change:`config`: Documentation updates for the AWS Config CLI * api-change:`ivs`: Changed description for latencyMode in Create/UpdateChannel and Channel/ChannelSummary. * api-change:`keyspaces`: Documentation updates for Amazon Keyspaces * api-change:`mediatailor`: MediaTailor: marking #AdBreak.OffsetMillis as required. * from version 1.32.44 * api-change:`connectparticipant`: Doc only update to GetTranscript API reference guide to inform users about presence of events in the chat transcript. * api-change:`emr`: adds fine grained control over Unhealthy Node Replacement to Amazon ElasticMapReduce * api-change:`firehose`: This release adds support for Data Message Extraction for decompressed CloudWatch logs, and to use a custom file extension or time zone for S3 destinations. * api-change:`lambda`: Documentation-only updates for Lambda to clarify a number of existing actions and properties. * api-change:`rds`: Doc only update for a valid option in DB parameter group * api-change:`sns`: This release marks phone numbers as sensitive inputs. * from version 1.32.43 * api-change:`artifact`: This is the initial SDK release for AWS Artifact. AWS Artifact provides on-demand access to compliance and third-party compliance reports. This release includes access to List and Get reports, along with their metadata. This release also includes access to AWS Artifact notifications settings. * api-change:`codepipeline`: Add ability to override timeout on action level. * api-change:`detective`: Doc only updates for content enhancement * api-change:`guardduty`: Marked fields IpAddressV4, PrivateIpAddress, Email as Sensitive. * api-change:`healthlake`: This release adds a new response parameter, JobProgressReport, to the DescribeFHIRImportJob and ListFHIRImportJobs API operation. JobProgressReport provides details on the progress of the import job on the server. * api-change:`opensearch`: Adds additional supported instance types. * api-change:`polly`: Amazon Polly adds 1 new voice - Burcu (tr-TR) * api-change:`sagemaker`: This release adds a new API UpdateClusterSoftware for SageMaker HyperPod. This API allows users to patch HyperPod clusters with latest platform softwares. * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.42 * api-change:`controltower`: Adds support for new Baseline and EnabledBaseline APIs for automating multi-account governance. * api-change:`lookoutequipment`: This feature allows customers to see pointwise model diagnostics results for their models. * api-change:`qbusiness`: This release adds the metadata-boosting feature, which allows customers to easily fine-tune the underlying ranking of retrieved RAG passages in order to optimize Q&A answer relevance. It also adds new feedback reasons for the PutFeedback API. * from version 1.32.41 * api-change:`lightsail`: This release adds support to upgrade the major version of a database. * api-change:`marketplace-catalog`: AWS Marketplace Catalog API now supports setting intent on requests * api-change:`resource-explorer-2`: Resource Explorer now uses newly supported IPv4 'amazonaws.com' endpoints by default. * api-change:`securitylake`: Documentation updates for Security Lake * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.40 * api-change:`appsync`: Adds support for new options on GraphqlAPIs, Resolvers and Data Sources for emitting Amazon CloudWatch metrics for enhanced monitoring of AppSync APIs. * api-change:`cloudwatch`: Update cloudwatch command to latest version * api-change:`neptune-graph`: Adding a new option "parameters" for data plane api ExecuteQuery to support running parameterized query via SDK. * api-change:`route53domains`: This release adds bill contact support for RegisterDomain, TransferDomain, UpdateDomainContact and GetDomainDetail API. * from version 1.32.39 * api-change:`amp`: Overall documentation updates. * api-change:`batch`: This feature allows Batch to support configuration of repository credentials for jobs running on ECS * api-change:`braket`: Creating a job will result in DeviceOfflineException when using an offline device, and DeviceRetiredException when using a retired device. * api-change:`cost-optimization-hub`: Adding includeMemberAccounts field to the response of ListEnrollmentStatuses API. * api-change:`ecs`: Documentation only update for Amazon ECS. * api-change:`iot`: This release allows AWS IoT Core users to enable Online Certificate Status Protocol (OCSP) Stapling for TLS X.509 Server Certificates when creating and updating AWS IoT Domain Configurations with Custom Domain. * api-change:`pricing`: Add Throttling Exception to all APIs. * from version 1.32.38 * api-change:`codepipeline`: Add ability to execute pipelines with new parallel & queued execution modes and add support for triggers with filtering on branches and file paths. * api-change:`quicksight`: General Interactions for Visuals; Waterfall Chart Color Configuration; Documentation Update * api-change:`workspaces`: This release introduces User-Decoupling feature. This feature allows Workspaces Core customers to provision workspaces without providing users. CreateWorkspaces and DescribeWorkspaces APIs will now take a new optional parameter "WorkspaceName". * from version 1.32.37 * api-change:`datasync`: AWS DataSync now supports manifests for specifying files or objects to transfer. * api-change:`lexv2-models`: Update lexv2-models command to latest version * api-change:`redshift`: LisRecommendations API to fetch Amazon Redshift Advisor recommendations. * from version 1.32.36 * api-change:`appsync`: Support for environment variables in AppSync GraphQL APIs * api-change:`ecs`: This release is a documentation only update to address customer issues. * api-change:`es`: This release adds clear visibility to the customers on the changes that they make on the domain. * api-change:`logs`: This release adds a new field, logGroupArn, to the response of the logs:DescribeLogGroups action. * api-change:`opensearch`: This release adds clear visibility to the customers on the changes that they make on the domain. * api-change:`wafv2`: You can now delete an API key that you've created for use with your CAPTCHA JavaScript integration API. * from version 1.32.35 * api-change:`glue`: Introduce Catalog Encryption Role within Glue Data Catalog Settings. Introduce SASL/PLAIN as an authentication method for Glue Kafka connections * api-change:`workspaces`: Added definitions of various WorkSpace states * from version 1.32.34 * api-change:`dynamodb`: Any number of users can execute up to 50 concurrent restores (any type of restore) in a given account. * api-change:`sagemaker`: Amazon SageMaker Canvas adds GenerativeAiSettings support for CanvasAppSettings. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * from version 1.32.33 * api-change:`cognito-idp`: Added CreateIdentityProvider and UpdateIdentityProvider details for new SAML IdP features * api-change:`ivs`: This release introduces a new resource Playback Restriction Policy which can be used to geo-restrict or domain-restrict channel stream playback when associated with a channel. New APIs to support this resource were introduced in the form of Create/Delete/Get/Update/List. * api-change:`managedblockchain-query`: This release adds support for transactions that have not reached finality. It also removes support for the status property from the response of the GetTransaction operation. You can use the confirmationStatus and executionStatus properties to determine the status of the transaction. * api-change:`mediaconvert`: This release includes support for broadcast-mixed audio description tracks. * api-change:`neptune-graph`: Adding new APIs in SDK for Amazon Neptune Analytics. These APIs include operations to execute, cancel, list queries and get the graph summary. * from version 1.32.32 * api-change:`cloudformation`: CloudFormation IaC generator allows you to scan existing resources in your account and select resources to generate a template for a new or existing CloudFormation stack. * api-change:`elbv2`: Update elbv2 command to latest version * api-change:`glue`: Update page size limits for GetJobRuns and GetTriggers APIs. * api-change:`ssm`: This release adds an optional Duration parameter to StateManager Associations. This allows customers to specify how long an apply-only-on-cron association execution should run. Once the specified Duration is out all the ongoing cancellable commands or automations are cancelled. * Switch to Python 3.11 build in SLE 15 SP4 and openSUSE Leap 15.4 and later (jsc#PCT-371) * Switch to wheel build * Update to version 1.32.31 * api-change:`datazone`: Add new skipDeletionCheck to DeleteDomain. Add new skipDeletionCheck to DeleteProject which also automatically deletes dependent objects * api-change:`route53`: Update the SDKs for text changes in the APIs. * From 1.32.30 * api-change:`autoscaling`: EC2 Auto Scaling customers who use attribute based instance-type selection can now intuitively define their Spot instances price protection limit as a percentage of the lowest priced On-Demand instance type. * api-change:`comprehend`: Comprehend PII analysis now supports Spanish input documents. * api-change:`ec2`: EC2 Fleet customers who use attribute based instance-type selection can now intuitively define their Spot instances price protection limit as a percentage of the lowest priced On-Demand instance type. * api-change:`mwaa`: This release adds MAINTENANCE environment status for Amazon MWAA environments. * api-change:`rds`: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS RestoreDBClusterFromSnapshot and RestoreDBClusterToPointInTime API methods. This provides enhanced error handling, ensuring a more robust experience. * api-change:`snowball`: Modified description of createaddress to include direction to add path when providing a JSON file. * From 1.32.29 * api-change:`connect`: Update list and string length limits for predefined attributes. * api-change:`inspector2`: This release adds ECR container image scanning based on their lastRecordedPullTime. * api-change:`sagemaker`: Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs. * From 1.32.28 * api-change:`acm-pca`: AWS Private CA now supports an option to omit the CDP extension from issued certificates, when CRL revocation is enabled. * api-change:`lightsail`: This release adds support for IPv6-only instance plans. * From 1.32.27 * api-change:`ec2`: Introduced a new clientToken request parameter on CreateNetworkAcl and CreateRouteTable APIs. The clientToken parameter allows idempotent operations on the APIs. * api-change:`ecs`: Documentation updates for Amazon ECS. * api-change:`outposts`: DeviceSerialNumber parameter is now optional in StartConnection API * api-change:`rds`: This release adds support for Aurora Limitless Database. * api-change:`storagegateway`: Add DeprecationDate and SoftwareVersion to response of ListGateways. * From 1.32.26 * api-change:`inspector2`: This release adds support for CIS scans on EC2 instances. * From 1.32.25 * bugfix:`s3 sync`: Disable S3 Express support for s3 sync command * From 1.32.24 * api-change:`appconfigdata`: Fix FIPS Endpoints in aws-us-gov. * api-change:`cloud9`: Doc-only update around removing AL1 from list of available AMIs for Cloud9 * api-change:`cloudfront-keyvaluestore`: This release improves upon the DescribeKeyValueStore API by returning two additional fields, Status of the KeyValueStore and the FailureReason in case of failures during creation of KeyValueStore. * api-change:`connectcases`: This release adds the ability to view audit history on a case and introduces a new parameter, performedBy, for CreateCase and UpdateCase API's. * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`ecs`: This release adds support for Transport Layer Security (TLS) and Configurable Timeout to ECS Service Connect. TLS facilitates privacy and data security for inter-service communications, while Configurable Timeout allows customized per-request timeout and idle timeout for Service Connect services. * api-change:`finspace`: Allow customer to set zip default through command line arguments. * api-change:`organizations`: Doc only update for quota increase change * api-change:`rds`: Introduced support for the InsufficientDBInstanceCapacityFault error in the RDS CreateDBCluster API method. This provides enhanced error handling, ensuring a more robust experience when creating database clusters with insufficient instance capacity. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.23 * api-change:`athena`: Introducing new NotebookS3LocationUri parameter to Athena ImportNotebook API. Payload is no longer required and either Payload or NotebookS3LocationUri needs to be provided (not both) for a successful ImportNotebook API call. If both are provided, an InvalidRequestException will be thrown. * api-change:`codebuild`: Release CodeBuild Reserved Capacity feature * api-change:`dynamodb`: This release adds support for including ApproximateCreationDateTimePrecision configurations in EnableKinesisStreamingDestination API, adds the same as an optional field in the response of DescribeKinesisStreamingDestination, and adds support for a new UpdateKinesisStreamingDestination API. * api-change:`qconnect`: Increased Quick Response name max length to 100 * From 1.32.22 * api-change:`b2bi`: Increasing TestMapping inputFileContent file size limit to 5MB and adding file size limit 250KB for TestParsing input file. This release also includes exposing InternalServerException for Tag APIs. * api-change:`cloudtrail`: This release adds a new API ListInsightsMetricData to retrieve metric data from CloudTrail Insights. * api-change:`connect`: GetMetricDataV2 now supports 3 groupings * api-change:`drs`: Removed invalid and unnecessary default values. * api-change:`firehose`: Allow support for Snowflake as a Kinesis Data Firehose delivery destination. * api-change:`sagemaker-featurestore-runtime`: Increase BatchGetRecord limits from 10 items to 100 items * From 1.32.21 * api-change:`dynamodb`: Updating note for enabling streams for UpdateTable. * api-change:`keyspaces`: This release adds support for Multi-Region Replication with provisioned tables, and Keyspaces auto scaling APIs * From 1.32.20 * api-change:`iot`: Revert release of LogTargetTypes * api-change:`iotfleetwise`: Updated APIs: SignalNodeType query parameter has been added to ListSignalCatalogNodesRequest and ListVehiclesResponse has been extended with attributes field. * api-change:`macie2`: This release adds support for analyzing Amazon S3 objects that are encrypted using dual-layer server-side encryption with AWS KMS keys (DSSE-KMS). It also adds support for reporting DSSE-KMS details in statistics and metadata about encryption settings for S3 buckets and objects. * api-change:`payment-cryptography`: Provide an additional option for key exchange using RSA wrap/unwrap in addition to tr-34/tr-31 in ImportKey and ExportKey operations. Added new key usage (type) TR31_M1_ISO_9797_1_MAC_KEY, for use with Generate/VerifyMac dataplane operations with ISO9797 Algorithm 1 MAC calculations. * api-change:`personalize-runtime`: Documentation updates for Amazon Personalize * api-change:`personalize`: Documentation updates for Amazon Personalize. * api-change:`rekognition`: This release adds ContentType and TaxonomyLevel attributes to DetectModerationLabels and GetMediaAnalysisJob API responses. * api-change:`securityhub`: Documentation updates for AWS Security Hub * From 1.32.19 * api-change:`sagemaker`: This release will have ValidationException thrown if certain invalid app types are provided. The release will also throw ValidationException if more than 10 account ids are provided in VpcOnlyTrustedAccounts. * From 1.32.18 * api-change:`connect`: Supervisor Barge for Chat is now supported through the MonitorContact API. * api-change:`connectparticipant`: Introduce new Supervisor participant role * api-change:`location`: Location SDK documentation update. Added missing fonts to the MapConfiguration data type. Updated note for the SubMunicipality property in the place data type. * api-change:`mwaa`: This Amazon MWAA feature release includes new fields in CreateWebLoginToken response model. The new fields IamIdentity and AirflowIdentity will let you match identifications, as the Airflow identity length is currently hashed to 64 characters. * api-change:`s3control`: S3 On Outposts team adds dualstack endpoints support for S3Control and S3Outposts API calls. * api-change:`supplychain`: This release includes APIs CreateBillOfMaterialsImportJob and GetBillOfMaterialsImportJob. * api-change:`transfer`: AWS Transfer Family now supports static IP addresses for SFTP & AS2 connectors and for async MDNs on AS2 servers. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.17 * api-change:`ec2`: This release adds support for adding an ElasticBlockStorage volume configurations in ECS RunTask/StartTask/CreateService/UpdateService APIs. The configuration allows for attaching EBS volumes to ECS Tasks. * api-change:`ecs`: This release adds support for adding an ElasticBlockStorage volume configurations in ECS RunTask/StartTask/CreateService/UpdateService APIs. The configuration allows for attaching EBS volumes to ECS Tasks. * api-change:`events`: Update events command to latest version * api-change:`iot`: Add ConflictException to Update APIs of AWS IoT Software Package Catalog * api-change:`iotfleetwise`: The following dataTypes have been removed: CUSTOMER_DECODED_INTERFACE in NetworkInterfaceType; CUSTOMER_DECODED_SIGNAL_INFO_IS_NULL in SignalDecoderFailureReason; CUSTOMER_DECODED_SIGNAL_NETWORK_INTERFACE_INFO_IS_NULL in NetworkInterfaceFailureReason; CUSTOMER_DECODED_SIGNAL in SignalDecoderType * api-change:`secretsmanager`: Doc only update for Secrets Manager * api-change:`workspaces`: Added AWS Workspaces RebootWorkspaces API - Extended Reboot documentation update * From 1.32.16 * api-change:`connectcampaigns`: Minor pattern updates for Campaign and Dial Request API fields. * api-change:`location`: This release adds API support for custom layers for the maps service APIs: CreateMap, UpdateMap, DescribeMap. * api-change:`logs`: Add support for account level subscription filter policies to PutAccountPolicy, DescribeAccountPolicies, and DeleteAccountPolicy APIs. Additionally, PutAccountPolicy has been modified with new optional "selectionCriteria" parameter for resource selection. * api-change:`qconnect`: QueryAssistant and GetRecommendations will be discontinued starting June 1, 2024. To receive generative responses after March 1, 2024 you will need to create a new Assistant in the Connect console and integrate the Amazon Q in Connect JavaScript library (amazon-q- connectjs) into your applications. * api-change:`redshift-serverless`: Updates to ConfigParameter for RSS workgroup, removal of use_fips_ssl * api-change:`route53`: Route53 now supports geoproximity routing in AWS regions * api-change:`wisdom`: QueryAssistant and GetRecommendations will be discontinued starting June 1, 2024. To receive generative responses after March 1, 2024 you will need to create a new Assistant in the Connect console and integrate the Amazon Q in Connect JavaScript library (amazon-q- connectjs) into your applications. * From 1.32.15 * api-change:`codebuild`: Aws CodeBuild now supports new compute type BUILD_GENERAL1_XLARGE * api-change:`ec2`: Amazon EC2 R7iz bare metal instances are powered by custom 4th generation Intel Xeon Scalable processors. * api-change:`route53resolver`: This release adds support for query type configuration on firewall rules that enables customers for granular action (ALLOW, ALERT, BLOCK) by DNS query type. * From 1.32.14 * api-change:`connect`: Minor trait updates for User APIs * api-change:`kms`: Documentation updates for AWS Key Management Service (KMS). * api-change:`redshift-serverless`: use_fips_ssl and require_ssl parameter support for Workgroup, UpdateWorkgroup, and CreateWorkgroup * From 1.32.13 * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config in November and December 2023. * api-change:`docdb`: Adding PerformanceInsightsEnabled and PerformanceInsightsKMSKeyId fields to DescribeDBInstances Response. * api-change:`ecs`: This release adds support for managed instance draining which facilitates graceful termination of Amazon ECS instances. * api-change:`es`: This release adds support for new or existing Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward secrecy cipher suites for domain endpoints. * api-change:`lightsail`: This release adds support to set up an HTTPS endpoint on an instance. * api-change:`opensearch`: This release adds support for new or existing Amazon OpenSearch domains to enable TLS 1.3 or TLS 1.2 with perfect forward secrecy cipher suites for domain endpoints. * api-change:`sagemaker`: Adding support for provisioned throughput mode for SageMaker Feature Groups * api-change:`servicecatalog`: Added Idempotency token support to Service Catalog AssociateServiceActionWithProvisioningArtifact, DisassociateServiceActionFromProvisioningArtifact, DeleteServiceAction API * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.12 * api-change:`connect`: Amazon Connect, Contact Lens Evaluation API increase evaluation notes max length to 3072. * api-change:`mediaconvert`: This release includes video engine updates including HEVC improvements, support for ingesting VP9 encoded video in MP4 containers, and support for user-specified 3D LUTs. * From 1.32.11 * api-change:`apprunner`: AWS App Runner adds Python 3.11 and Node.js 18 runtimes. * api-change:`location`: This release introduces a new parameter to bypasses an API key's expiry conditions and delete the key. * api-change:`quicksight`: Add LinkEntityArn support for different partitions; Add UnsupportedUserEditionException in UpdateDashboardLinks API; Add support for New Reader Experience Topics * From 1.32.10 * api-change:`codestar-connections`: New integration with the GitLab self- managed provider type. * api-change:`kinesis-video-archived-media`: NoDataRetentionException thrown when GetImages requested for a Stream that does not retain data (that is, has a DataRetentionInHours of 0). * api-change:`sagemaker`: Amazon SageMaker Studio now supports Docker access from within app container * From 1.32.9 * api-change:`emr`: Update emr command to latest version * From 1.32.8 * api-change:`iam`: Documentation updates for AWS Identity and Access Management (IAM). * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.7 * api-change:`bedrock-agent`: Adding Claude 2.1 support to Bedrock Agents * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * api-change:`glue`: This release adds additional configurations for Query Session Context on the following APIs: GetUnfilteredTableMetadata, GetUnfilteredPartitionMetadata, GetUnfilteredPartitionsMetadata. * api-change:`lakeformation`: This release adds additional configurations on GetTemporaryGlueTableCredentials for Query Session Context. * api-change:`mediaconnect`: This release adds the DescribeSourceMetadata API. This API can be used to view the stream information of the flow's source. * api-change:`networkmonitor`: CloudWatch Network Monitor is a new service within CloudWatch that will help network administrators and operators continuously monitor network performance metrics such as round-trip-time and packet loss between their AWS-hosted applications and their on-premises locations. * api-change:`omics`: Provides minor corrections and an updated description of APIs. * api-change:`secretsmanager`: Update endpoint rules and examples. * From 1.32.6 * api-change:`amp`: This release updates Amazon Managed Service for Prometheus APIs to support customer managed KMS keys. * api-change:`appintegrations`: The Amazon AppIntegrations service adds DeleteApplication API for deleting applications, and updates APIs to support third party applications reacting to workspace events and make data requests to Amazon Connect for agent and contact events. * api-change:`bedrock-agent`: This release introduces Amazon Aurora as a vector store on Knowledge Bases for Amazon Bedrock * api-change:`codecommit`: AWS CodeCommit now supports customer managed keys from AWS Key Management Service. UpdateRepositoryEncryptionKey is added for updating the key configuration. CreateRepository, GetRepository, BatchGetRepositories are updated with new input or output parameters. * api-change:`connect`: Adds APIs to manage User Proficiencies and Predefined Attributes. Enhances StartOutboundVoiceContact API input. Introduces SearchContacts API. Enhances DescribeContact API. Adds an API to update Routing Attributes in QueuePriority and QueueTimeAdjustmentSeconds. * api-change:`medialive`: MediaLive now supports the ability to configure the audio that an AWS Elemental Link UHD device produces, when the device is configured as the source for a flow in AWS Elemental MediaConnect. * api-change:`neptune-graph`: Adds Waiters for successful creation and deletion of Graph, Graph Snapshot, Import Task and Private Endpoints for Neptune Analytics * api-change:`rds-data`: This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. * api-change:`rds`: This release adds support for using RDS Data API with Aurora PostgreSQL Serverless v2 and provisioned DB clusters. * api-change:`sagemaker`: Amazon SageMaker Training now provides model training container access for debugging purposes. Amazon SageMaker Search now provides the ability to use visibility conditions to limit resource access to a single domain or multiple domains. * From 1.32.5 * api-change:`appstream`: This release introduces configurable clipboard, allowing admins to specify the maximum length of text that can be copied by the users from their device to the remote session and vice-versa. * api-change:`eks`: Add support for cluster insights, new EKS capability that surfaces potentially upgrade impacting issues. * api-change:`guardduty`: This release 1) introduces a new API: GetOrganizationStatistics , and 2) adds a new UsageStatisticType TOP_ACCOUNTS_BY_FEATURE for GetUsageStatistics API * api-change:`managedblockchain-query`: Adding Confirmation Status and Execution Status to GetTransaction Response. * api-change:`mediatailor`: Adds the ability to configure time shifting on MediaTailor channels using the TimeShiftConfiguration field * api-change:`route53`: Amazon Route 53 now supports the Canada West (Calgary) Region (ca-west-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.4 * api-change:`appsync`: This release adds additional configurations on GraphQL APIs for limits on query depth, resolver count, and introspection * api-change:`chime-sdk-meetings`: Add meeting features to specify a maximum camera resolution, a maximum content sharing resolution, and a maximum number of attendees for a given meeting. * api-change:`ec2`: Provision BYOIPv4 address ranges and advertise them by specifying the network border groups option in Los Angeles, Phoenix and Dallas AWS Local Zones. * api-change:`fsx`: Added support for FSx for OpenZFS on-demand data replication across AWS accounts and/or regions.Added the IncludeShared attribute for DescribeSnapshots.Added the CopyStrategy attribute for OpenZFSVolumeConfiguration. * api-change:`marketplace-catalog`: AWS Marketplace now supports a new API, BatchDescribeEntities, which returns metadata and content for multiple entities. * api-change:`rds`: RDS - The release adds two new APIs: DescribeDBRecommendations and ModifyDBRecommendation * From 1.32.3 * api-change:`cognito-idp`: Amazon Cognito now supports trigger versions that define the fields in the request sent to pre token generation Lambda triggers. * api-change:`eks`: Add support for EKS Cluster Access Management. * api-change:`quicksight`: A docs-only release to add missing entities to the API reference. * api-change:`route53resolver`: Add DOH protocols in resolver endpoints. * From 1.32.2 * enhancement:`cloudformation package`: Add support for intrinsic Fn:ForEach (fixes `#8075 <https://github.com/aws/aws-cli/issues/8075>`__) * api-change:`cloud9`: Updated Cloud9 API documentation for AL2023 release * api-change:`connect`: Adds relatedContactId field to StartOutboundVoiceContact API input. Introduces PauseContact API and ResumeContact API for Task contacts. Adds pause duration, number of pauses, timestamps for last paused and resumed events to DescribeContact API response. Adds new Rule type and new Rule action. * api-change:`connectcases`: Increase number of fields that can be included in CaseEventIncludedData from 50 to 200 * api-change:`kms`: Documentation updates for AWS Key Management Service * api-change:`rds`: Updates Amazon RDS documentation by adding code examples * api-change:`sagemaker`: This release 1) introduces a new API: DeleteCompilationJob , and 2) adds InfraCheckConfig for Create/Describe training job API * From 1.32.1 * api-change:`appstream`: This release includes support for images of Windows Server 2022 platform. * api-change:`b2bi`: Documentation updates for AWS B2B Data Interchange * api-change:`billingconductor`: Billing Conductor is releasing a new API, GetBillingGroupCostReport, which provides the ability to retrieve/view the Billing Group Cost Report broken down by attributes for a specific billing group. * api-change:`connect`: This release adds support for more granular billing using tags (key:value pairs) * api-change:`controltower`: Documentation updates for AWS Control Tower. * api-change:`firehose`: This release, 1) adds configurable buffering hints for the Splunk destination, and 2) reduces the minimum configurable buffering interval for supported destinations * api-change:`gamelift`: Amazon GameLift adds the ability to add and update the game properties of active game sessions. * api-change:`iot`: This release adds the ability to self-manage certificate signing in AWS IoT Core fleet provisioning using the new certificate provider resource. * api-change:`neptune-graph`: This is the initial SDK release for Amazon Neptune Analytics * api-change:`opensearch`: Updating documentation for Amazon OpenSearch Service support for new zero-ETL integration with Amazon S3. * api-change:`quicksight`: Update Dashboard Links support; SingleAxisOptions support; Scatterplot Query limit support. * api-change:`workspaces`: Updated note to ensure customers understand running modes. * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * From 1.32.0 * feature:Python: End of support for Python 3.7 * api-change:`drs`: Adding AgentVersion to SourceServer and RecoveryInstance structures * feature:Python: End of support for Python 3.7 * From 1.31.13 * api-change:`imagebuilder`: This release adds the Image Workflows feature to give more flexibility and control over the image building and testing process. * api-change:`location`: This release 1) adds sub-municipality field in Places API for searching and getting places information, and 2) allows optimizing route calculation based on expected arrival time. * api-change:`logs`: This release introduces the StartLiveTail API to tail ingested logs in near real time. * From 1.31.12 * api-change:`neptune`: This release adds a new parameter configuration setting to the Neptune cluster related APIs that can be leveraged to switch between the underlying supported storage modes. * api-change:`pinpoint`: This release includes Amazon Pinpoint API documentation updates pertaining to campaign message sending rate limits. * api-change:`securityhub`: Added new resource detail objects to ASFF, including resources for AwsDynamoDbTable, AwsEc2ClientVpnEndpoint, AwsMskCluster, AwsS3AccessPoint, AwsS3Bucket * api-change:`endpoint-rules`: Update endpoint-rules command to latest version * Update in SLE-15 (bsc#1209255, jsc#PED-3780) * Update in SLE-15 (bsc#1204537, jsc#PED-2333) Changes in python-s3transfer: * Update to version 0.19.0 * feature:`s3`: Update multi-part copy logic to match single-part behavior for TaggingDirective and AnnotationDirective * enhancement:`s3`: Warn when Metadata or Tagging is supplied to a copy without the corresponding directive set to REPLACE, in which case the supplied value is silently ignored. This matches the CopyObject behavior. * from version 0.18.0 * feature:Copy: By default, preserve source object metadata during multipart copies to match single CopyObject behavior. * Update to version 0.17.0 * feature:Python: End of support for Python 3.9 * from version 0.16.1 * enhancement:`TransferManager`: Add support for customer-provided full-object checksums using the SHA512, MD5, XXHASH3, XXHASH64, and XXHASH128 algorithms. * Update to version 0.16.0 * feature:`awscrt`: `CRTTransferManager` now supports the following `TransferConfig` options - `multipart_threshold`, `multipart_chunksize`, `max_request_concurrency` * Update to version 0.15.0 * feature:`CopyPartTask`: Validate ETag of stored object during multipart copies * Update to version 0.14.0 * feature:download: Validate requested range matches content range in response for multipart downloads * Update to version 0.13.1 * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * Update to version 0.13.0 * feature:`GetObjectTask`: Validate ETag of stored object during multipart downloads * Update to version 0.12.0 * feature:Python: End of support for Python 3.8 * Update to version 0.11.4 * enhancement:Dependencies: Update the floor version of botocore to 1.37.4 to match imports. * enhancement:Tasks: Pass Botocore context from parent to child threads. * from version 0.11.3 * bugfix:`awscrt`: Fix urlencoding issues for request signing with the awscrt. * Update BuildRequires and Requires from setup.py * Update to version 0.11.2 * bugfix:upload: Only set a default checksum if the `request_checksum_calculation` config is set to `when_supported`. Fixes (boto/s3transfer#327). * Update to version 0.11.1 * bugfix:Dependencies: Update the floor version of botocore to 1.36.0 to match imports. * from version 0.11.0 * feature:manager: Use CRC32 by default and support user provided full-object checksums. * Update to version 0.10.4 * enhancement:`s3`: Added Multi-Region Access Points support to CRT transfers Changes in python-boto3: * Update to 1.43.36 * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.43.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.43.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.43.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.43.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.43.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.43.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.43.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.43.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * from version 1.43.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.43.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.43.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.43.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.43.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.43.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.43.21 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.43.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.43.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.43.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * from version 1.43.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.43.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update BuildRequires and Requires from setup.py * Update to 1.43.15 * api-change:`backup`: [`botocore`] Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: [`botocore`] Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: [`botocore`] AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: [`botocore`] Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: [`botocore`] Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: [`botocore`] The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.43.14 * api-change:`datazone`: [`botocore`] Add support for VPC connection * api-change:`ec2`: [`botocore`] The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: [`botocore`] Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: [`botocore`] Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: [`botocore`] Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: [`botocore`] Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per- policy details for each Bedrock Converse call * api-change:`securityagent`: [`botocore`] Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:`s3`: [`botocore`] Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucket * from version 1.43.13 * api-change:`batch`: [`botocore`] Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: [`botocore`] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: [`botocore`] Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: [`botocore`] A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: [`botocore`] Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: [`botocore`] Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: [`botocore`] Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.43.12 * api-change:`bedrock-runtime`: [`botocore`] Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: [`botocore`] Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: [`botocore`] AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: [`botocore`] Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: [`botocore`] GenerateAuthRequestCryptogram API launch. * Update BuildRequires and Requires from setup.py * Update to 1.43.11 * api-change:`bedrock-agentcore`: [`botocore`] Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: [`botocore`] Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: [`botocore`] Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: [`botocore`] Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: [`botocore`] This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: [`botocore`] Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.43.10 * api-change:`accessanalyzer`: [`botocore`] Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: [`botocore`] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: [`botocore`] Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: [`botocore`] Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: [`botocore`] Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: [`botocore`] Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: [`botocore`] Support for dataset enrichment and geo spatial in new data preparation experience From 1.43.9 * api-change:`logs`: [`botocore`] Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: [`botocore`] This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: [`botocore`] Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.43.8 * api-change:`bedrock`: [`botocore`] Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: [`botocore`] Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: [`botocore`] Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: [`botocore`] Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: [`botocore`] Release --has-databases parameter for AWS Glue get-catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: [`botocore`] Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: [`botocore`] Introducing new option for security groups mapping - with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: [`botocore`] ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.43.7 * api-change:`arc-region-switch`: [`botocore`] Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: [`botocore`] Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for read- only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: [`botocore`] Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: [`botocore`] This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: [`botocore`] This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: [`botocore`] Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: [`botocore`] Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: [`botocore`] Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: [`botocore`] AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: [`botocore`] Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: [`botocore`] Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: [`botocore`] Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: [`botocore`] Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: [`botocore`] Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: [`botocore`] Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: [`botocore`] Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: [`botocore`] Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: [`botocore`] Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: [`botocore`] Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: [`botocore`] Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. * Update to 1.43.6 * api-change:`bcm-data-exports`: [`botocore`] With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: [`botocore`] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: [`botocore`] Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: [`botocore`] DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: [`botocore`] This is a documentation update * api-change:`invoicing`: [`botocore`] Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: [`botocore`] Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. * from version 1.43.5 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for bring- your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: [`botocore`] The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: [`botocore`] Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: [`botocore`] Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: [`botocore`] Validate outpost access point resource name * api-change:`sagemaker`: [`botocore`] Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: [`botocore`] Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. * from version 1.43.4 * api-change:`cleanroomsml`: [`botocore`] Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: [`botocore`] Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: [`botocore`] With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: [`botocore`] Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: [`botocore`] Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: [`botocore`] This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: [`botocore`] Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us- east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). * from version 1.43.3 * api-change:`bedrock-agentcore-control`: [`botocore`] Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: [`botocore`] This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: [`botocore`] Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: [`botocore`] Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: [`botocore`] Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service-specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: [`botocore`] Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: [`botocore`] AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: [`botocore`] Amazon VPC Lattice now supports privately resolvable DNS resources * from version 1.43.2 * api-change:`appstream`: [`botocore`] Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: [`botocore`] This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: [`botocore`] Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: [`botocore`] Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: [`botocore`] AWS IoT HTTP rule actions now support cross- topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: [`botocore`] Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: [`botocore`] Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: [`botocore`] Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross- region identity context. Story,scenario in CreateCustomCapability API. * from version 1.43.1 * api-change:`bedrock-agentcore`: [`botocore`] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: [`botocore`] AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: [`botocore`] Adds support for asynchronous notebook runs * api-change:`eks`: [`botocore`] Vended logs update param for capability vended logs feature * api-change:`kafka`: [`botocore`] Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: [`botocore`] Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: [`botocore`] Adds support for resource- based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: [`botocore`] Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: [`botocore`] Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: [`botocore`] Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API * from version 1.43.0 * api-change:`account`: [`botocore`] Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: [`botocore`] Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: [`botocore`] Adds configuration bundles for versioned, immutable agent configuration snapshots with branch- based lineage * api-change:`cloudfront`: [`botocore`] Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: [`botocore`] Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: [`botocore`] Removes support for registry policy V1 * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: [`botocore`] This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: [`botocore`] This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: [`botocore`] Allow admins to configure IPv6 ranges on IP Access Settings. * enhancement:awscrt: [`botocore`] Update awscrt version to 0.32.2 * feature:Python: [`botocore`] End of support for Python 3.9 * feature:Python: End of support for Python 3.9 * from version 1.42.97 * api-change:`application-signals`: [`botocore`] Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: [`botocore`] Add support for Passthrough pricing plan * api-change:`gameliftstreams`: [`botocore`] Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: [`botocore`] Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: [`botocore`] Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: [`botocore`] KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: [`botocore`] Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: [`botocore`] Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: [`botocore`] Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: [`botocore`] Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: [`botocore`] Added support for Protocol as modified resource and added update failure as modification state * from version 1.42.96 * api-change:`bedrock-agentcore-control`: [`botocore`] Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: [`botocore`] Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: [`botocore`] Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: [`botocore`] EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: [`botocore`] Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: [`botocore`] AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * from version 1.42.95 * api-change:`datazone`: [`botocore`] Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: [`botocore`] Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: [`botocore`] Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: [`botocore`] This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: [`botocore`] Alias `get_o_tel_enrichment`, `start_o_tel_enrichment`, and `stop_o_tel_enrichment` botocore methods to use `otel` instead of `o_tel`. * from version 1.42.94 * api-change:`batch`: [`botocore`] Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: [`botocore`] Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: [`botocore`] Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: [`botocore`] GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: [`botocore`] This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iotwireless`: [`botocore`] Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: [`botocore`] Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: [`botocore`] Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: [`botocore`] Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: [`botocore`] Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: [`botocore`] This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: [`botocore`] This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * from version 1.42.93 * api-change:`cognito-idp`: [`botocore`] Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: [`botocore`] Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: [`botocore`] SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: [`botocore`] This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * from version 1.42.92 * api-change:`application-signals`: [`botocore`] Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: [`botocore`] Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: [`botocore`] Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: [`botocore`] Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: [`botocore`] Expanded support for new suppression rule fields. * api-change:`kafka`: [`botocore`] Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: [`botocore`] This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: [`botocore`] Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. * from version 1.42.91 * api-change:`cleanrooms`: [`botocore`] This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: [`botocore`] Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: [`botocore`] This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: [`botocore`] Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: [`botocore`] ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: [`botocore`] Improving Documentation for Neptune * api-change:`quicksight`: [`botocore`] Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: [`botocore`] Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: [`botocore`] The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. * from version 1.42.90 * api-change:`appstream`: [`botocore`] Add content redirection to Update Stack * api-change:`autoscaling`: [`botocore`] This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: [`botocore`] Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: [`botocore`] Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: [`botocore`] Adds support for passkey-based multi- factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: [`botocore`] This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: [`botocore`] Added error handling for service quota limits * api-change:`customer-profiles`: [`botocore`] Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: [`botocore`] Launching SMUS IAM domain SDK support * api-change:`devops-agent`: [`botocore`] Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: [`botocore`] Updating regex for identification of AWS Regions. * api-change:`logs`: [`botocore`] Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: [`botocore`] Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: [`botocore`] Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. * bugfix:signing: [`botocore`] Fix bug so that configured auth scheme preference is used when auth scheme is resolved from endpoints rulesets, or from operation-level auth trait. Auth scheme preference can be configured using the existing `auth_scheme_preference` client config option, the `auth_scheme_preference` shared config setting, or the existing `AWS_AUTH_SCHEME_PREFERENCE` environment variable. * from version 1.42.89 * api-change:`customer-profiles`: [`botocore`] This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: [`botocore`] Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key-value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: [`botocore`] Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high- speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: [`botocore`] This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: [`botocore`] Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. * from version 1.42.88 * api-change:`connect`: [`botocore`] Conversational Analytics for Email * api-change:`devops-agent`: [`botocore`] Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: [`botocore`] Minor updates to exceptions for completeness * api-change:`imagebuilder`: [`botocore`] Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: [`botocore`] Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: [`botocore`] Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: [`botocore`] Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * from version 1.42.87 * api-change:`bcm-dashboards`: [`botocore`] Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: [`botocore`] Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: [`botocore`] Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: [`botocore`] Adds support for MediaLive Channel- type Router Inputs. * api-change:`redshift-data`: [`botocore`] The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: [`botocore`] Release support for g7e instance types for SageMaker HyperPod * from version 1.42.86 * api-change:`backup`: [`botocore`] Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: [`botocore`] This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: [`botocore`] Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`ivs-realtime`: [`botocore`] Adds support for Amazon IVS real- time streaming redundant ingest. * api-change:`marketplace-discovery`: [`botocore`] AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: [`botocore`] MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: [`botocore`] Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * from version 1.42.85 * api-change:`accessanalyzer`: [`botocore`] Revert previous additions of API changes. * api-change:`bedrock-agentcore`: [`botocore`] This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: [`botocore`] Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: [`botocore`] The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: [`botocore`] Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: [`botocore`] Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: [`botocore`] EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: [`botocore`] This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: [`botocore`] EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`lambda`: [`botocore`] Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: [`botocore`] This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: [`botocore`] AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: [`botocore`] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: [`botocore`] Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. * bugfix:auth: [`botocore`] Fix `sigv4a_signing_region_set` config being ignored when SigV4a is selected via `auth_scheme_preference`. The configured region set is now correctly applied to the signing context regardless of how SigV4a is resolved. * from version 1.42.84 * api-change:`accessanalyzer`: [`botocore`] Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: [`botocore`] Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: [`botocore`] This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: [`botocore`] This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: [`botocore`] Migrated to Smithy. No functional changes * api-change:`lightsail`: [`botocore`] This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: [`botocore`] This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: [`botocore`] Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: [`botocore`] AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. * from version 1.42.83 * api-change:`bedrock`: [`botocore`] Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: [`botocore`] Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: [`botocore`] Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: [`botocore`] Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: [`botocore`] Add support for tagging of Alarm resource type * api-change:`logs`: [`botocore`] Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: [`botocore`] Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: [`botocore`] Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions * from version 1.42.82 * api-change:`appstream`: [`botocore`] Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for three- legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: [`botocore`] Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain- specific terminology shared across projects * api-change:`bedrock-runtime`: [`botocore`] Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: [`botocore`] CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: [`botocore`] Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: [`botocore`] This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: [`botocore`] We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: [`botocore`] This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. * from version 1.42.81 * api-change:`bedrock`: [`botocore`] Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: [`botocore`] Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: [`botocore`] Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: [`botocore`] Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: [`botocore`] This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: [`botocore`] Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: [`botocore`] Adding Policy-Min- TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * from version 1.42.80 * api-change:`acm`: [`botocore`] Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: [`botocore`] This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: [`botocore`] Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: [`botocore`] Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: [`botocore`] AWS DevOps Agent service General Availability release. * api-change:`dms`: [`botocore`] To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: [`botocore`] This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-maps`: [`botocore`] This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: [`botocore`] Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: [`botocore`] Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: [`botocore`] This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: [`botocore`] This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: [`botocore`] Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: [`botocore`] Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: [`botocore`] Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: [`botocore`] Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: [`botocore`] Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: [`botocore`] Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: [`botocore`] Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: [`botocore`] S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: [`botocore`] AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: [`botocore`] This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * from version 1.42.79 * api-change:`appstream`: [`botocore`] Add support for URL Redirection * api-change:`autoscaling`: [`botocore`] Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: [`botocore`] Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: [`botocore`] AWS DevOps Agent General Availability. * api-change:`ecs`: [`botocore`] Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Update CreateScript API documentation. * api-change:`lakeformation`: [`botocore`] Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: [`botocore`] Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: [`botocore`] Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: [`botocore`] KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re-verification without requiring manual intervention from support teams. * api-change:`sagemaker`: [`botocore`] Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: [`botocore`] Added support for opting out of Amazon S3 Express session authentication via the new `disable_s3_express_session_auth` S3 client configuration setting, or the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. * from version 1.42.78 * api-change:`bedrock-agentcore`: [`botocore`] Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: [`botocore`] Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: [`botocore`] AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. * from version 1.42.77 * api-change:`bcm-data-exports`: [`botocore`] With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: [`botocore`] Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: [`botocore`] This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: [`botocore`] Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: [`botocore`] Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * from version 1.42.76 * api-change:`apigatewayv2`: [`botocore`] Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: [`botocore`] This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: [`botocore`] Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`marketplace-agreement`: [`botocore`] The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: [`botocore`] Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: [`botocore`] GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. * from version 1.42.75 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: [`botocore`] Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: [`botocore`] Adds support for updating the vector options field for existing collections. * api-change:`pcs`: [`botocore`] This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: [`botocore`] Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. * from version 1.42.74 * api-change:`batch`: [`botocore`] AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: [`botocore`] You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: [`botocore`] Add support for tagging of ContactMethod resource type * api-change:`omics`: [`botocore`] Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. * from version 1.42.73 * api-change:`backup`: [`botocore`] Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: [`botocore`] Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`opensearch`: [`botocore`] Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: [`botocore`] Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. * bugfix:s3: [`botocore`] Fix aws-chunked requests with non-seekable streams sending both `Content-Length` and `Transfer-Encoding: chunked`, which violated HTTP/1.1 (RFC 7230) and caused `SignatureDoesNotMatch` errors. * from version 1.42.72 * api-change:`batch`: [`botocore`] AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: [`botocore`] This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: [`botocore`] Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: [`botocore`] Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. * from version 1.42.71 * api-change:`ec2`: [`botocore`] The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: [`botocore`] This update adds additional bitrate options for Dolby AC-4 audio outputs. * Update BuildRequires and Requires from setup.py * Update to 1.42.70 * api-change:`bedrock-agentcore-control`: [`botocore`] Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: [`botocore`] Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: [`botocore`] Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * from version 1.42.69 * api-change:`bedrock`: [`botocore`] You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: [`botocore`] Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: [`botocore`] Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: [`botocore`] Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. * from version 1.42.68 * api-change:`apigateway`: [`botocore`] API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: [`botocore`] Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: [`botocore`] Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: [`botocore`] Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: [`botocore`] Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: [`botocore`] Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: [`botocore`] This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: [`botocore`] Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: [`botocore`] Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: [`botocore`] The change adds a new capability named ManageSharedFolders in Custom Permissions * from version 1.42.67 * api-change:`datasync`: [`botocore`] DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: [`botocore`] Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: [`botocore`] Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`sso-oidc`: [`botocore`] Fixed missing error messages in SSO OIDC error responses by mapping OAuth2 error_description field to the standard Message field. Issue was raised in `#2216 <https://github.com/boto/botocore/issues/2216>`__. * from version 1.42.66 * api-change:`customer-profiles`: [`botocore`] Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: [`botocore`] Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`polly`: [`botocore`] Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: [`botocore`] SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: [`botocore`] Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: [`botocore`] Added WINDOWS SERVER 2025 OperatingSystemName. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: [`botocore`] Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: [`botocore`] Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: [`botocore`] Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kafka`: [`botocore`] Add dual stack endpoint to SDK * api-change:`lexv2-models`: [`botocore`] This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. * from version 1.42.64 * api-change:`iam`: [`botocore`] Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: [`botocore`] Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: [`botocore`] This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: [`botocore`] Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. * from version 1.42.63 * api-change:`appintegrations`: [`botocore`] This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: [`botocore`] Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: [`botocore`] Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: [`botocore`] Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gameliftstreams`: [`botocore`] Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost- optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: [`botocore`] Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. * from version 1.42.62 * api-change:`connecthealth`: [`botocore`] Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: [`botocore`] Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: [`botocore`] Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: [`botocore`] Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: [`botocore`] Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * enhancement:S3 redirect: [`botocore`] Validate new region name when redirecting. * Update BuildRequires and Requires from setup.py * Update to 1.4.61 * api-change:`connect`: [`botocore`] Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: [`botocore`] As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: [`botocore`] Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: [`botocore`] Adding support for DeploymentStrategyOptions * api-change:`quicksight`: [`botocore`] Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * enhancement:auth: [`botocore`] Exclude additional hop-by-hop headers from SigV4 signing to prevent signature mismatches when intermediaries mutate transport headers (connection, keep-alive, proxy-authenticate, proxy- authorization, TE, trailer, upgrade). * from version 1.42.60 * api-change:`bedrock-agentcore-control`: [`botocore`] Support for AgentCore Policy GA * api-change:`datazone`: [`botocore`] Adding QueryGraph operation to DataZone SDK * api-change:`logs`: [`botocore`] CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: [`botocore`] Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: [`botocore`] This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.42.59 * api-change:`arc-region-switch`: [`botocore`] Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: [`botocore`] This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: [`botocore`] Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: [`botocore`] Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: [`botocore`] Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: [`botocore`] This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: [`botocore`] Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: [`botocore`] Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: [`botocore`] ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: [`botocore`] Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.42.58 * api-change:`backup-gateway`: [`botocore`] This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: [`botocore`] Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: [`botocore`] Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: [`botocore`] Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: [`botocore`] Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: [`botocore`] Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.42.57 * api-change:`batch`: [`botocore`] AWS Batch documentation update for service job capacity units. * api-change:`ec2`: [`botocore`] Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: [`botocore`] Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: [`botocore`] Neptune global clusters now supports tags * api-change:`wafv2`: [`botocore`] AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.42.56 * api-change:`cloudwatch`: [`botocore`] This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: [`botocore`] Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: [`botocore`] Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: [`botocore`] Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: [`botocore`] Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: [`botocore`] Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.42.55 * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: [`botocore`] SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: [`botocore`] Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: [`botocore`] Add workflow properties support to connections APIs * api-change:`dynamodb`: [`botocore`] This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`mediatailor`: [`botocore`] Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: [`botocore`] Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: [`botocore`] AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.42.54 * api-change:`appstream`: [`botocore`] Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: [`botocore`] Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`sagemaker-runtime`: [`botocore`] Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: [`botocore`] This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: [`botocore`] Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: [`botocore`] Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * from version 1.42.53 * api-change:`bcm-dashboards`: [`botocore`] The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: [`botocore`] Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: [`botocore`] AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * enhancement:`checksums`: [`botocore`] Added support for the SHA512 checksum algorithm. When the optional AWS CRT (`awscrt`) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation). * from version 1.42.52 * api-change:`cleanrooms`: [`botocore`] This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: [`botocore`] Correcting in-app notifications API documentation. * from version 1.42.51 * api-change:`ec2`: [`botocore`] Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`evidently`: [`botocore`] The evidently client has been removed following the deprecation of the service. * api-change:`grafana`: [`botocore`] This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`iotanalytics`: [`botocore`] The iotanalytics client has been removed following the deprecation of the service. * api-change:`rds`: [`botocore`] Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: [`botocore`] Adds support for branding customization without requiring a custom wallpaper. * from version 1.42.50 * api-change:`arc-region-switch`: [`botocore`] Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: [`botocore`] Documentation updates for EC2 Secondary Networks * api-change:`ecr`: [`botocore`] Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: [`botocore`] Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual- stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: [`botocore`] Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: [`botocore`] Update MessageType enum to include missing types. * from version 1.42.49 * api-change:`cloudwatch`: [`botocore`] Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: [`botocore`] API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: [`botocore`] This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: [`botocore`] Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: [`botocore`] Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.31.2 * from version 1.42.48 * api-change:`ec2`: [`botocore`] Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * from version 1.42.47 * api-change:`batch`: [`botocore`] Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: [`botocore`] R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: [`botocore`] This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: [`botocore`] Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: [`botocore`] S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * from version 1.42.46 * api-change:`bedrock-agentcore`: [`botocore`] Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: [`botocore`] Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: [`botocore`] Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: [`botocore`] Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: [`botocore`] This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.42.45 * api-change:`connectcampaignsv2`: [`botocore`] Add the missing event type for WhatsApp * api-change:`ec2`: [`botocore`] Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: [`botocore`] Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: [`botocore`] Allow cross account v5 in put data lake settings * api-change:`neptunedata`: [`botocore`] Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: [`botocore`] Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: [`botocore`] This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.42.44 * api-change:`bedrock-data-automation-runtime`: [`botocore`] Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: [`botocore`] Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: [`botocore`] Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: [`botocore`] Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: [`botocore`] Adding g7e instance support in Sagemaker Training * from version 1.42.43 * api-change:`arc-region-switch`: [`botocore`] Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: [`botocore`] Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: [`botocore`] Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: [`botocore`] Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: [`botocore`] This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: [`botocore`] Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: [`botocore`] Minor neptune-graph documentation changes * api-change:`ram`: [`botocore`] Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: [`botocore`] Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: [`botocore`] Added support for 12 new graphics- optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * enhancement:HTTP session: [`botocore`] Set blocksize from default 16KB to 128KB if urllib3 v2 is installed * from version 1.42.42 * api-change:`bedrock-runtime`: [`botocore`] Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: [`botocore`] Amazon Connect Cases now supports larger, multi-line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: [`botocore`] Update delete cluster description * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: [`botocore`] We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: [`botocore`] Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * enhancement:Validation: [`botocore`] Updated list validation to add fast- path for list members that only require basic type checking. * from version 1.42.41 * api-change:`batch`: [`botocore`] AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: [`botocore`] This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-maps`: [`botocore`] Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: [`botocore`] Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: [`botocore`] Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: [`botocore`] Updated the CloseAccount description. * api-change:`sso-admin`: [`botocore`] Added new Region management APIs to support multi-Region replication in IAM Identity Center. * from version 1.42.40 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: [`botocore`] Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: [`botocore`] Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.42.39 * api-change:`connect`: [`botocore`] This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: [`botocore`] Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.42.38 * api-change:`ec2`: [`botocore`] G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.42.37 * api-change:`cognito-idp`: [`botocore`] This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: [`botocore`] Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: [`botocore`] SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: [`botocore`] We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: [`botocore`] This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: [`botocore`] This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests. * api-change:`s3`: [`botocore`] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: [`botocore`] Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.42.36 * api-change:`connect`: [`botocore`] Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: [`botocore`] Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: [`botocore`] Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * from version 1.42.35 * api-change:`connectcases`: [`botocore`] Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: [`botocore`] DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: [`botocore`] Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: [`botocore`] Adds support for AWS Ground Station Telemetry. * from version 1.42.34 * api-change:`connect`: [`botocore`] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: [`botocore`] Added api for deleting data export configuration for a domain * api-change:`qconnect`: [`botocore`] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.42.33 * api-change:`autoscaling`: [`botocore`] This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: [`botocore`] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: [`botocore`] Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: [`botocore`] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: [`botocore`] Adding new enum value for ScanStatusReason * api-change:`health`: [`botocore`] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: [`botocore`] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: [`botocore`] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.42.32 * api-change:`bedrock-agentcore`: [`botocore`] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: [`botocore`] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: [`botocore`] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: [`botocore`] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.42.31 * api-change:`autoscaling`: [`botocore`] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: [`botocore`] Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: [`botocore`] Adds support for managing table pre- warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: [`botocore`] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: [`botocore`] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.42.30 * api-change:`connect`: [`botocore`] Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: [`botocore`] This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: [`botocore`] Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: [`botocore`] Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: [`botocore`] Added ViewName to View- related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: [`botocore`] Adding security consideration comments for lcc accessing execution role under root access * from version 1.42.29 * api-change:`cleanrooms`: [`botocore`] This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: [`botocore`] This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: [`botocore`] Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: [`botocore`] A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: [`botocore`] API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: [`botocore`] Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: [`botocore`] Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * enhancement:config: [`botocore`] Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variable * from version 1.42.28 * api-change:`ce`: [`botocore`] Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: [`botocore`] Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: [`botocore`] Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: [`botocore`] no feature changes. model migrated to Smithy * api-change:`redshift`: [`botocore`] Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: [`botocore`] Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: [`botocore`] This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update BuildRequires and Requires from setup.py * Update to 1.42.27 * api-change:`bedrock`: [`botocore`] This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: [`botocore`] Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.42.26 * api-change:`billing`: [`botocore`] Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: [`botocore`] This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: [`botocore`] Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * from version 1.42.25 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: [`botocore`] Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: [`botocore`] Adding MaterializedViews task run APIs * api-change:`medialive`: [`botocore`] MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: [`botocore`] Adds waiters to Amazon Transcribe. * from version 1.42.24 * api-change:`workspaces`: [`botocore`] Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.42.23 * api-change:`ce`: [`botocore`] This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: [`botocore`] Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.42.22 * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.42.21 * bugfix:`s3`: [`botocore`] Clarify `payload_signing_enabled` documentation to cover interaction with `request_checksum_calculation` * from version 1.42.20 * api-change:`cleanrooms`: [`botocore`] Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: [`botocore`] This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.42.19 * api-change:`connect`: [`botocore`] Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kafkaconnect`: [`botocore`] This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect-fips as the service name. This is done to match the Kafka endpoints. * from version 1.42.18 * api-change:`connect`: [`botocore`] Changes for Contact for Global Search * api-change:`elastictranscoder`: [`botocore`] The elastictranscoder client has been removed following the deprecation of the service. * api-change:`quicksight`: [`botocore`] This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.42.17 * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.42.16 * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`geo-places`: [`botocore`] Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: [`botocore`] Add additional validation to Outpost bucket names. * from version 1.42.15 * api-change:`config`: [`botocore`] Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: [`botocore`] Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: [`botocore`] Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: [`botocore`] Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.42.14 * api-change:`arc-region-switch`: [`botocore`] Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: [`botocore`] Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: [`botocore`] Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iot`: [`botocore`] This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: [`botocore`] It is a internal bug fix for region expansion * api-change:`wickr`: [`botocore`] AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: [`botocore`] Add support for WebAuthn under user settings. * from version 1.42.13 * api-change:`appstream`: [`botocore`] Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: [`botocore`] New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: [`botocore`] Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: [`botocore`] Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: [`botocore`] Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: [`botocore`] Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: [`botocore`] Adds support for ECR Create On Push * api-change:`ecs`: [`botocore`] Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iot`: [`botocore`] This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: [`botocore`] Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: [`botocore`] Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: [`botocore`] Added "Stopping" for the HANA Database Status. * from version 1.42.12 * api-change:`gameliftstreams`: [`botocore`] Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: [`botocore`] Add support for dbiResourceId in finding. * api-change:`inspector-scan`: [`botocore`] Adds an additional OutputFormat * api-change:`kafkaconnect`: [`botocore`] Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: [`botocore`] Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: [`botocore`] This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: [`botocore`] Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: [`botocore`] Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: [`botocore`] Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.42.11 * api-change:`iot`: [`botocore`] Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: [`botocore`] This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.42.10 * api-change:`bedrock-agentcore-control`: [`botocore`] This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: [`botocore`] Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: [`botocore`] EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`entityresolution`: [`botocore`] Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: [`botocore`] Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: [`botocore`] Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: [`botocore`] This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: [`botocore`] Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: [`botocore`] Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: [`botocore`] This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: [`botocore`] Add support for SQ Dashboard Api * from version 1.42.9 * api-change:`bcm-recommended-actions`: [`botocore`] Added new freetier action types to RecommendedAction.type. * api-change:`connect`: [`botocore`] Amazon Connect now offers automated post- chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: [`botocore`] Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: [`botocore`] Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.42.8 * api-change:`lambda`: [`botocore`] Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: [`botocore`] Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: [`botocore`] This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: [`botocore`] Add SortBy parameter to ListSecrets * api-change:`sesv2`: [`botocore`] Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.42.7 * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: [`botocore`] Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: [`botocore`] This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: [`botocore`] The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: [`botocore`] The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: [`botocore`] Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: [`botocore`] Adds support for Signer GetRevocationStatus with updated endpoints * from version 1.42.6 * api-change:`account`: [`botocore`] This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: [`botocore`] Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: [`botocore`] Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: [`botocore`] Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * Update BuildRequires and Requires from setup.py * Update to 1.42.5 * api-change:`ce`: [`botocore`] Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: [`botocore`] Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: [`botocore`] Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: [`botocore`] Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: [`botocore`] Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: [`botocore`] Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: [`botocore`] Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: [`botocore`] Update Mail Manager Archive ARN validation * enhancement:ContainerProvider: [`botocore`] The ContainerProvider now works with arbitray HTTPS URLs for `AWS_CONTAINER_CREDENTIALS_FULL_URI`. * from version 1.42.4 * api-change:`ecs`: [`botocore`] Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: [`botocore`] Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: [`botocore`] This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: [`botocore`] Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: [`botocore`] Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.29.2 * from version 1.42.3 * api-change:`lambda`: [`botocore`] Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.42.2 * api-change:`bedrock`: [`botocore`] Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: [`botocore`] Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.42.1 * api-change:`bedrock`: [`botocore`] Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: [`botocore`] Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: [`botocore`] Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: [`botocore`] Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: [`botocore`] This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: [`botocore`] Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: [`botocore`] Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: [`botocore`] Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: [`botocore`] CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: [`botocore`] Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to- value, and ease of implementation at scale. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: [`botocore`] GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: [`botocore`] GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: [`botocore`] RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: [`botocore`] New S3 Storage Class FSX_ONTAP * api-change:`s3control`: [`botocore`] Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: [`botocore`] Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: [`botocore`] Added support for Amazon Database Savings Plans * api-change:`securityhub`: [`botocore`] ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.42.0 * api-change:`appintegrations`: [`botocore`] This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: [`botocore`] Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: [`botocore`] Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: [`botocore`] AWS Clean Rooms now supports privacy- enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: [`botocore`] This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: [`botocore`] This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: [`botocore`] Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: [`botocore`] This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: [`botocore`] This release adds support for EKS Capabilities * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: [`botocore`] Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: [`botocore`] Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: [`botocore`] This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: [`botocore`] This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi-product solutions. * api-change:`partnercentral-account`: [`botocore`] Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: [`botocore`] Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: [`botocore`] New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: [`botocore`] This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: [`botocore`] New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: [`botocore`] Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.29.1 * enhancement:`s3`: Adds partial `TransferConfig` support for CRT transfer managers. * feature:`s3`: Added `crt` mode to `preferred_transfer_client` parameter in `TransferConfig` to enable CRT transfer client in all environments. * from version 1.41.5 * api-change:`bedrock-runtime`: [`botocore`] Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: [`botocore`] Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: [`botocore`] This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.41.4 * api-change:`ec2`: [`botocore`] This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: [`botocore`] Network Firewall release of the Proxy feature. * api-change:`organizations`: [`botocore`] Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: [`botocore`] Adds support for new route53 feature: accelerated recovery. * Update BuildRequires and Requires from setup.py * Update to 1.41.3 * api-change:`cloudfront`: [`botocore`] Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: [`botocore`] New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * enhancement:awscrt: [`botocore`] Update awscrt version to 0.29.0 * from version 1.41.2 * api-change:`apigateway`: [`botocore`] API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: [`botocore`] Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: [`botocore`] Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: [`botocore`] Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: [`botocore`] Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: [`botocore`] Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: [`botocore`] Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: [`botocore`] Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: [`botocore`] New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: [`botocore`] The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: [`botocore`] This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: [`botocore`] Add support for ECR managed signing * api-change:`eks`: [`botocore`] Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: [`botocore`] This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`invoicing`: [`botocore`] Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: [`botocore`] This release adds support for Tiered Storage * api-change:`kms`: [`botocore`] Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: [`botocore`] Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: [`botocore`] Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: [`botocore`] Add support for resources in the aws- eusc partition. * api-change:`marketplace-entitlement`: [`botocore`] Endpoint update for new region * api-change:`mediapackagev2`: [`botocore`] Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: [`botocore`] Endpoint update for new region * api-change:`odb`: [`botocore`] Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: [`botocore`] Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: [`botocore`] This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: [`botocore`] Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: [`botocore`] Add support for Upgrade Rollout Order * api-change:`redshift`: [`botocore`] Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: [`botocore`] Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: [`botocore`] Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On- Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: [`botocore`] Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: [`botocore`] Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: [`botocore`] Adds support for creating Webapps accessible from a VPC. * from version 1.41.1 * api-change:`application-signals`: [`botocore`] Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large-scale distributed applications. * api-change:`autoscaling`: [`botocore`] This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: [`botocore`] Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: [`botocore`] Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: [`botocore`] Bedrock Data Automation Runtime Sync API * api-change:`braket`: [`botocore`] Add support for Braket spending limits. * api-change:`budgets`: [`botocore`] Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: [`botocore`] This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: [`botocore`] AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: [`botocore`] Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: [`botocore`] The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: [`botocore`] Add support for environment variables and an IAM execution role. * api-change:`dms`: [`botocore`] Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: [`botocore`] Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: [`botocore`] This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: [`botocore`] Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: [`botocore`] This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: [`botocore`] Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: [`botocore`] Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: [`botocore`] Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: [`botocore`] Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross- account resource discovery in commercial regions. * api-change:`networkmanager`: [`botocore`] This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: [`botocore`] Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: [`botocore`] Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: [`botocore`] Add support for EBS volume in Recycle Bin * api-change:`rds`: [`botocore`] Add support for VPC Encryption Controls. * api-change:`redshift-data`: [`botocore`] Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: [`botocore`] Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: [`botocore`] Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: [`botocore`] Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time- series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.41.0 * api-change:`apigateway`: [`botocore`] API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: [`botocore`] Support for API Gateway portals and portal products. * api-change:`backup`: [`botocore`] Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: [`botocore`] Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: [`botocore`] This release includes support for Search Results. * api-change:`billing`: [`botocore`] Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: [`botocore`] This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: [`botocore`] Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: [`botocore`] AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: [`botocore`] This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: [`botocore`] Release ListEfficiencyMetrics API * api-change:`datazone`: [`botocore`] Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: [`botocore`] Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: [`botocore`] This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: [`botocore`] Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: [`botocore`] Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: [`botocore`] Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: [`botocore`] Add support for scanning and viewing scan results for backup resource types * api-change:`health`: [`botocore`] Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: [`botocore`] Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: [`botocore`] This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: [`botocore`] Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: [`botocore`] Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: [`botocore`] Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: [`botocore`] This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: [`botocore`] MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: [`botocore`] Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: [`botocore`] Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: [`botocore`] Initial GA launch of Partner Central Channel * api-change:`route53`: [`botocore`] Add dual-stack endpoint support for Route53 * api-change:`rum`: [`botocore`] CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: [`botocore`] Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: [`botocore`] Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: [`botocore`] Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: [`botocore`] AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: [`botocore`] Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: [`botocore`] IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: [`botocore`] Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.40.76 * api-change:`autoscaling`: [`botocore`] This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: [`botocore`] AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: [`botocore`] Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: [`botocore`] New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: [`botocore`] This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low- bandwidth sites connections through a single attachment, simplifying multi- site connectivity for distributed enterprises. * api-change:`iam`: [`botocore`] Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: [`botocore`] Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: [`botocore`] CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: [`botocore`] Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: [`botocore`] Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: [`botocore`] AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.40.75 * api-change:`appstream`: [`botocore`] Adding support for additional instances and extended storage * api-change:`backup`: [`botocore`] AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: [`botocore`] Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: [`botocore`] This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: [`botocore`] This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: [`botocore`] This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`glue`: [`botocore`] Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: [`botocore`] Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: [`botocore`] Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: [`botocore`] Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: [`botocore`] Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: [`botocore`] Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: [`botocore`] This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: [`botocore`] Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: [`botocore`] Adding DICTIONARY_DGA to dns- threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.40.74 * api-change:`datazone`: [`botocore`] Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: [`botocore`] EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: [`botocore`] Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.28.4 * from version 1.40.73 * api-change:`cloudformation`: [`botocore`] CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: [`botocore`] Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: [`botocore`] Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: [`botocore`] Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: [`botocore`] QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`iotwireless`: [`botocore`] Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: [`botocore`] Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: [`botocore`] Updated endpoint and service metadata * api-change:`sagemaker`: [`botocore`] Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: [`botocore`] Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.40.72 * api-change:`amp`: [`botocore`] Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: [`botocore`] Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: [`botocore`] Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: [`botocore`] Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: [`botocore`] This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: [`botocore`] Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: [`botocore`] Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: [`botocore`] Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.40.71 * api-change:`batch`: [`botocore`] Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: [`botocore`] Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`medical-imaging`: [`botocore`] Added new fields in existing APIs. * api-change:`rtbfabric`: [`botocore`] Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: [`botocore`] Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.40.70 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports ML-DSA key algorithms. * api-change:`appstream`: [`botocore`] AWS Appstream support for IPv6 * api-change:`backup`: [`botocore`] AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: [`botocore`] Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: [`botocore`] Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: [`botocore`] Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: [`botocore`] Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: [`botocore`] Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: [`botocore`] Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: [`botocore`] Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: [`botocore`] Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: [`botocore`] AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.40.69 * api-change:`controltower`: [`botocore`] Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: [`botocore`] Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: [`botocore`] Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: [`botocore`] This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: [`botocore`] Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.40.68 * api-change:`accessanalyzer`: [`botocore`] New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: [`botocore`] AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: [`botocore`] Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: [`botocore`] Add Amazon EC2 R8a instance types * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: [`botocore`] IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: [`botocore`] Support for New Data Prep Experience * api-change:`s3tables`: [`botocore`] Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: [`botocore`] Provides NoLongerSupportedException error message * from version 1.40.67 * api-change:`cloudfront`: [`botocore`] This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross- account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: [`botocore`] Added support for Project Resource Tags * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: [`botocore`] Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: [`botocore`] Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: [`botocore`] Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.40.66 * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.40.65 * api-change:`bedrock-agentcore-control`: [`botocore`] Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: [`botocore`] Fix the AWS Budgets endpoint for the aws- eusc partition. * api-change:`ec2`: [`botocore`] Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: [`botocore`] Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kinesis`: [`botocore`] Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.40.64 * api-change:`connectcases`: [`botocore`] Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: [`botocore`] Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`fsx`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`health`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediaconvert`: [`botocore`] Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: [`botocore`] Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: [`botocore`] Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: [`botocore`] Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`textract`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`waf`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.63 * api-change:`amp`: [`botocore`] Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appconfig`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appflow`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appmesh`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appsync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`artifact`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`auditmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: [`botocore`] Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cleanrooms`: [`botocore`] Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`clouddirectory`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudsearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudwatch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codecatalyst`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codecommit`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codedeploy`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-sync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connectcases`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`deadline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`devops-guru`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`docdb`: [`botocore`] Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: [`botocore`] Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elasticache`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`emr-serverless`: [`botocore`] This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`firehose`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`frauddetector`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`geo-places`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`glue`: [`botocore`] This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotevents-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: [`botocore`] Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kms`: [`botocore`] Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptune`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] RTB Fabric documentation update. * api-change:`s3outposts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`schemas`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`servicecatalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sts`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.62 * api-change:`bedrock-runtime`: [`botocore`] Add support for system tool and web citation response. * from version 1.40.61 * api-change:`apigatewayv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-signals`: [`botocore`] Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: [`botocore`] Update endpoint ruleset parameters casing * api-change:clients: [`botocore`] The following clients have been removed per deprecation of the services - qldb, qldb-session, robomaker, lookoutmetrics, lookoutvision, iotfleethub, apptest * api-change:`cloud9`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeconnections`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguru-security`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`detective`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: [`botocore`] Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`emr-containers`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`gameliftstreams`: [`botocore`] Add stream group expiration date and expired status * api-change:`glacier`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`groundstation`: [`botocore`] Enable use of AzEl ephemerides * api-change:`inspector-scan`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kendra`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`notifications`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`opensearch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`organizations`: [`botocore`] Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pipes`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ram`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resource-groups`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`s3`: [`botocore`] Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`security-ir`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sqs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`support-app`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`taxsettings`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces`: [`botocore`] Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`xray`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.60 * api-change:`accessanalyzer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`aiops`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`athena`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`backup-gateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`braket`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ce`: [`botocore`] Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeartifact`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-idp`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`comprehend`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`controltower`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dax`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`entityresolution`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`forecast`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`greengrass`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iam`: [`botocore`] Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis`: [`botocore`] Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lex-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`managedblockchain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mturk`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptune-graph`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`outposts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rbin`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rds-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rekognition`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`repostspace`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53profiles`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53resolver`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`s3vectors`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`scheduler`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`secretsmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ses`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`shield`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`socialmessaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-sap`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso-admin`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`stepfunctions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`waf-regional`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.59 * api-change:`acm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-signals`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`billing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`budgets`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudtrail`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codepipeline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datapipeline`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datazone`: [`botocore`] This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`eks`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`elb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`evs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`fis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: [`botocore`] Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: [`botocore`] Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotwireless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`location`: [`botocore`] Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackage`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediastore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediastore-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mq`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`panorama`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qbusiness`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`robomaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53domains`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] Add support for custom rate limits. * api-change:`s3tables`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Added inference components model data caching feature * api-change:`sagemaker-metrics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`securityhub`: [`botocore`] Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`snow-device-management`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sso-oidc`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`supplychain`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`translate`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`wisdom`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.58 * api-change:`account`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: [`botocore`] Fixing the service documentation name * api-change:`bedrock-agentcore-control`: [`botocore`] Fixing the service documentation name * api-change:`chime-sdk-voice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codebuild`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codestar-connections`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cur`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`discovery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`drs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dsql`: [`botocore`] Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ecr`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ecr-public`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`healthlake`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`internetmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotevents`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lambda`: [`botocore`] Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediatailor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mgh`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mgn`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mpa`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`neptunedata`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`odb`: [`botocore`] Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize-events`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`resiliencehub`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rum`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`savingsplans`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`securitylake`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sesv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`storagegateway`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`synthetics`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.57 * api-change:`appfabric`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`autoscaling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`b2bi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ce`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chatbot`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudformation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudhsm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cognito-identity`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`connect`: [`botocore`] This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: [`botocore`] Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`devicefarm`: [`botocore`] This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ds-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`forecastquery`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iam`: [`botocore`] Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotanalytics`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotsitewise`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivschat`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lexv2-models`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mailmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`medialive`: [`botocore`] Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`oam`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pcs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`redshift-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rtbfabric`: [`botocore`] Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sns`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workdocs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workmail`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.56 * api-change:`dynamodb`: [`botocore`] Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: [`botocore`] Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`mediaconvert`: [`botocore`] This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: [`botocore`] Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * from version 1.40.55 * api-change:`amp`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplifybackend`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appconfigdata`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`appintegrations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`application-insights`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudfront`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`controlcatalog`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`datasync`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ds`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dsql`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ec2`: [`botocore`] Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`events`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`evidently`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`finspace`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`finspace-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: [`botocore`] Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: [`botocore`] Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iot-data`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lakeformation`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`license-manager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: [`botocore`] The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`network-firewall`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkmanager`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`organizations`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qapps`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`signer`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`swf`: [`botocore`] Releasing minor endpoint updates. * api-change:`timestream-write`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`tnb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`wellarchitected`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.54 * api-change:`acm-pca`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`amplify`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apprunner`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`apptest`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: [`botocore`] Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`billingconductor`: [`botocore`] New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`databrew`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dataexchange`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`dlm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`freetier`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`gamelift`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`geo-routes`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`grafana`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`identitystore`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivs`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kafka`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`keyspaces`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`kms`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lex-models`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`m2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`machinelearning`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`medical-imaging`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`memorydb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`osis`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`polly`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`pricing`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qldb`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`qldb-session`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`timestream-query`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`voice-id`: [`botocore`] Update endpoint ruleset parameters casing * api-change:`workspaces-web`: [`botocore`] Update endpoint ruleset parameters casing * from version 1.40.53 * api-change:`bedrock`: [`botocore`] Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: [`botocore`] Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: [`botocore`] Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: [`botocore`] This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: [`botocore`] Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: [`botocore`] Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: [`botocore`] This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.40.52 * api-change:`appstream`: [`botocore`] This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: [`botocore`] The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: [`botocore`] SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: [`botocore`] Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: [`botocore`] This release adds support for creating instant, point-in-time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: [`botocore`] Move UntagResource API body member to query parameter * api-change:`transfer`: [`botocore`] SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.40.51 * api-change:`bedrock-agentcore`: [`botocore`] Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: [`botocore`] Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: [`botocore`] Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update BuildRequires and Requires from setup.py * Update to 1.40.50 * api-change:`bedrock-agentcore`: [`botocore`] Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: [`botocore`] Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: [`botocore`] Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: [`botocore`] Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: [`botocore`] Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: [`botocore`] This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: [`botocore`] Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update BuildRequires and Requires from setup.py * Update to 1.40.49 * api-change:`quicksight`: [`botocore`] This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: [`botocore`] This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.40.48 * api-change:`bedrock-agentcore-control`: [`botocore`] Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: [`botocore`] Released support for IPv6 and dual-stack active directories * api-change:`outposts`: [`botocore`] This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: [`botocore`] introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.40.47 * api-change:`proton`: [`botocore`] Deprecating APIs in AWS Proton namespace. * from version 1.40.46 * api-change:`backup`: [`botocore`] Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: [`botocore`] Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: [`botocore`] Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: [`botocore`] Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: [`botocore`] Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: [`botocore`] Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: [`botocore`] Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: [`botocore`] Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: [`botocore`] Add new AWS Resource Explorer APIs * from version 1.40.45 * api-change:`cleanrooms`: [`botocore`] Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: [`botocore`] Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: [`botocore`] Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.40.44 * api-change:`cloudformation`: [`botocore`] Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: [`botocore`] New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: [`botocore`] Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`guardduty`: [`botocore`] Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: [`botocore`] Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.40.43 * api-change:`chime-sdk-meetings`: [`botocore`] Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: [`botocore`] This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: [`botocore`] This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: [`botocore`] This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: [`botocore`] This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: [`botocore`] Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.40.42 * api-change:`application-signals`: [`botocore`] Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: [`botocore`] Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: [`botocore`] Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: [`botocore`] This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: [`botocore`] This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: [`botocore`] Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: [`botocore`] This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: [`botocore`] AWS Directory service now supports IPv6-native and dual-stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: [`botocore`] This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: [`botocore`] Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: [`botocore`] Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: [`botocore`] added warnings to a few CLI pages * api-change:`rds`: [`botocore`] Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: [`botocore`] Add support for updating server identity provider type * from version 1.40.41 * api-change:`bedrock`: [`botocore`] Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: [`botocore`] New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: [`botocore`] This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: [`botocore`] Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.40.40 * api-change:`bedrock-agent-runtime`: [`botocore`] This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: [`botocore`] Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: [`botocore`] Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: [`botocore`] Support for payer account dimension and billing view health status. * api-change:`connect`: [`botocore`] Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: [`botocore`] Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: [`botocore`] This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`redshift`: [`botocore`] Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.40.39 * api-change:`glue`: [`botocore`] Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: [`botocore`] Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: [`botocore`] Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.40.38 * api-change:`appstream`: [`botocore`] G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: [`botocore`] Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: [`botocore`] This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kms`: [`botocore`] Documentation only updates for KMS. * api-change:`neptune`: [`botocore`] Doc-only update to address customer use. * from version 1.40.37 * api-change:`cleanrooms`: [`botocore`] Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: [`botocore`] Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: [`botocore`] Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: [`botocore`] Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: [`botocore`] Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: [`botocore`] This release includes exception definition and documentation updates. * from version 1.40.36 * api-change:`batch`: [`botocore`] Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: [`botocore`] Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: [`botocore`] Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build- version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.40.35 * api-change:`bedrock-agentcore-control`: [`botocore`] Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: [`botocore`] Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: [`botocore`] This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: [`botocore`] Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: [`botocore`] Added support for cross-account Active Directories. * api-change:`medialive`: [`botocore`] Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sms-voice`: [`botocore`] Updated the `sms-voice` client to the latest version. Note: this client is maintained only for backwards compatibility and should not be used for new development. We recommend using the `pinpoint-sms-voice` client for full support and ongoing updates. * api-change:`sqs`: [`botocore`] Update invalid character handling documentation for SQS SendMessage API * from version 1.40.34 * api-change:`bedrock`: [`botocore`] Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: [`botocore`] Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: [`botocore`] Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: [`botocore`] Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.40.33 * api-change:`ec2`: [`botocore`] Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: [`botocore`] Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: [`botocore`] Add support for Amazon EC2 Capacity Blocks for ML * Update BuildRequires and Requires from setup.py * UPdate to 1.40.32 * api-change:`budgets`: [`botocore`] Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: [`botocore`] IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: [`botocore`] Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: [`botocore`] Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.40.31 * api-change:`ce`: [`botocore`] Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: [`botocore`] Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: [`botocore`] Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * api-change:`sms`: [`botocore`] The sms client has been removed following the deprecation of the service. * from version 1.40.30 * api-change:`payment-cryptography`: [`botocore`] Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.40.29 * api-change:`amp`: [`botocore`] Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: [`botocore`] adding IAM principal id to IAM user profile details * api-change:`ecs`: [`botocore`] This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: [`botocore`] Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: [`botocore`] CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: [`botocore`] Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS-related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: [`botocore`] This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: [`botocore`] Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.40.28 * api-change:`networkflowmonitor`: [`botocore`] Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: [`botocore`] AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.40.27 * api-change:`autoscaling`: [`botocore`] Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: [`botocore`] Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: [`botocore`] SDK release for user defined predefined attributes. * api-change:`datazone`: [`botocore`] Adds support for custom blueprints * api-change:`mediapackagev2`: [`botocore`] Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: [`botocore`] Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: [`botocore`] Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.40.26 * api-change:`iotsitewise`: [`botocore`] Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: [`botocore`] This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: [`botocore`] This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * Update BuildRequires and Requires from setup.py * Update to 1.40.25 * api-change:`ecs`: [`botocore`] This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: [`botocore`] Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: [`botocore`] Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.40.24 * api-change:`cleanrooms`: [`botocore`] Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: [`botocore`] ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: [`botocore`] Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: [`botocore`] Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: [`botocore`] Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.40.23 * api-change:`cleanrooms`: [`botocore`] Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: [`botocore`] AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: [`botocore`] Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: [`botocore`] Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: [`botocore`] This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: [`botocore`] Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.40.22 * api-change:`ec2`: [`botocore`] MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: [`botocore`] Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: [`botocore`] Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: [`botocore`] Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.40.21 * api-change:`bedrock-runtime`: [`botocore`] Fixed stop sequence limit for converse API. * api-change:`ec2`: [`botocore`] Release shows new route types such as filtered and advertisement. * api-change:`xray`: [`botocore`] AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.40.20 * api-change:`applicationcostprofiler`: [`botocore`] Remove incorrect endpoint tests * api-change:`apprunner`: [`botocore`] Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloud9`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudhsmv2`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: [`botocore`] Remove incorrect endpoint tests * api-change:`codedeploy`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: [`botocore`] Remove incorrect endpoint tests * api-change:`connect`: [`botocore`] AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: [`botocore`] Remove incorrect endpoint tests * api-change:`dynamodb`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fis`: [`botocore`] Remove incorrect endpoint tests * api-change:`fms`: [`botocore`] Remove incorrect endpoint tests * api-change:`geo-maps`: [`botocore`] Remove incorrect endpoint tests * api-change:`glue`: [`botocore`] Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: [`botocore`] Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediastore-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`mturk`: [`botocore`] Remove incorrect endpoint tests * api-change:`omics`: [`botocore`] Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: [`botocore`] Remove incorrect endpoint tests * api-change:`rds`: [`botocore`] Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: [`botocore`] Remove incorrect endpoint tests * api-change:`savingsplans`: [`botocore`] Remove incorrect endpoint tests * api-change:`scheduler`: [`botocore`] Remove incorrect endpoint tests * api-change:`ses`: [`botocore`] Remove incorrect endpoint tests * api-change:`ssm-sap`: [`botocore`] Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-query`: [`botocore`] Remove incorrect endpoint tests * api-change:`waf`: [`botocore`] Remove incorrect endpoint tests * api-change:`workmailmessageflow`: [`botocore`] Remove incorrect endpoint tests * api-change:`xray`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.19 * api-change:`amplifybackend`: [`botocore`] Remove incorrect endpoint tests * api-change:`application-insights`: [`botocore`] Remove incorrect endpoint tests * api-change:`batch`: [`botocore`] Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguruprofiler`: [`botocore`] Remove incorrect endpoint tests * api-change:`datapipeline`: [`botocore`] Remove incorrect endpoint tests * api-change:`discovery`: [`botocore`] Remove incorrect endpoint tests * api-change:`ds`: [`botocore`] Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: [`botocore`] Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`evidently`: [`botocore`] Remove incorrect endpoint tests * api-change:`frauddetector`: [`botocore`] Remove incorrect endpoint tests * api-change:`inspector`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesisvideo`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-media`: [`botocore`] Remove incorrect endpoint tests * api-change:`lakeformation`: [`botocore`] Remove incorrect endpoint tests * api-change:`lex-models`: [`botocore`] Remove incorrect endpoint tests * api-change:`migrationhub-config`: [`botocore`] Remove incorrect endpoint tests * api-change:`neptune-graph`: [`botocore`] Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`opsworks`: [`botocore`] The opsworks client has been removed following the deprecation of the service. * api-change:`opsworkscm`: [`botocore`] The opsworkscm client has been removed following the deprecation of the service. * api-change:`personalize`: [`botocore`] Remove incorrect endpoint tests * api-change:`pi`: [`botocore`] Remove incorrect endpoint tests * api-change:`qldb-session`: [`botocore`] Remove incorrect endpoint tests * api-change:`redshift`: [`botocore`] Remove incorrect endpoint tests * api-change:`robomaker`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: [`botocore`] Remove incorrect endpoint tests * api-change:`snow-device-management`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-write`: [`botocore`] Remove incorrect endpoint tests * api-change:`voice-id`: [`botocore`] Remove incorrect endpoint tests * api-change:`workdocs`: [`botocore`] Remove incorrect endpoint tests * api-change:`workmail`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.18 * api-change:`apprunner`: [`botocore`] Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: [`botocore`] This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: [`botocore`] Remove incorrect endpoint tests * api-change:`codestar-connections`: [`botocore`] Remove incorrect endpoint tests * api-change:`comprehendmedical`: [`botocore`] Remove incorrect endpoint tests * api-change:`connectparticipant`: [`botocore`] Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`finspace`: [`botocore`] Remove incorrect endpoint tests * api-change:`geo-routes`: [`botocore`] Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: [`botocore`] Remove incorrect endpoint tests * api-change:`globalaccelerator`: [`botocore`] Remove incorrect endpoint tests * api-change:`greengrass`: [`botocore`] Remove incorrect endpoint tests * api-change:`identitystore`: [`botocore`] Remove incorrect endpoint tests * api-change:`imagebuilder`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: [`botocore`] Remove incorrect endpoint tests * api-change:`kafka`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutvision`: [`botocore`] Remove incorrect endpoint tests * api-change:`mgh`: [`botocore`] Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: [`botocore`] Remove incorrect endpoint tests * api-change:`mq`: [`botocore`] Remove incorrect endpoint tests * api-change:`personalize-events`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint`: [`botocore`] Remove incorrect endpoint tests * api-change:`ram`: [`botocore`] Remove incorrect endpoint tests * api-change:`rbin`: [`botocore`] Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: [`botocore`] Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: [`botocore`] Remove incorrect endpoint tests * api-change:`signer`: [`botocore`] Remove incorrect endpoint tests * api-change:`waf-regional`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.17 * api-change:`appflow`: [`botocore`] Remove incorrect endpoint tests * api-change:`b2bi`: [`botocore`] Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: [`botocore`] Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudsearch`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudtrail-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeartifact`: [`botocore`] Remove incorrect endpoint tests * api-change:`codeguru-security`: [`botocore`] Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: [`botocore`] Remove incorrect endpoint tests * api-change:`cur`: [`botocore`] Remove incorrect endpoint tests * api-change:`datazone`: [`botocore`] Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: [`botocore`] Remove incorrect endpoint tests * api-change:`devops-guru`: [`botocore`] Remove incorrect endpoint tests * api-change:`ec2`: [`botocore`] Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`finspace-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`forecast`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotfleethub`: [`botocore`] Remove incorrect endpoint tests * api-change:`kendra`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesisanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: [`botocore`] Remove incorrect endpoint tests * api-change:`lex-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutequipment`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediaconvert`: [`botocore`] This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediastore`: [`botocore`] Remove incorrect endpoint tests * api-change:`personalize-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`qbusiness`: [`botocore`] The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-edge`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`serverlessrepo`: [`botocore`] Remove incorrect endpoint tests * api-change:`shield`: [`botocore`] Remove incorrect endpoint tests * api-change:`snowball`: [`botocore`] Remove incorrect endpoint tests * api-change:`sqs`: [`botocore`] Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: [`botocore`] Remove incorrect endpoint tests * api-change:`support-app`: [`botocore`] Remove incorrect endpoint tests * api-change:`timestream-influxdb`: [`botocore`] Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: [`botocore`] Remove incorrect endpoint tests * api-change:`wellarchitected`: [`botocore`] Remove incorrect endpoint tests * from version 1.40.16 * api-change:`clouddirectory`: [`botocore`] Remove incorrect endpoint tests * api-change:`cognito-sync`: [`botocore`] Remove incorrect endpoint tests * api-change:`docdb`: [`botocore`] Remove incorrect endpoint tests * api-change:`elb`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`healthlake`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`macie2`: [`botocore`] Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: [`botocore`] Remove incorrect endpoint tests * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: [`botocore`] Remove incorrect endpoint tests * api-change:`proton`: [`botocore`] Remove incorrect endpoint tests * api-change:`qconnect`: [`botocore`] Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: [`botocore`] Remove incorrect endpoint tests * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`simspaceweaver`: [`botocore`] Remove incorrect endpoint tests * api-change:`synthetics`: [`botocore`] Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: [`botocore`] test and verified, safe to release * from version 1.40.15 * api-change:`apigatewaymanagementapi`: [`botocore`] Remove incorrect endpoint tests * api-change:`appfabric`: [`botocore`] Remove incorrect endpoint tests * api-change:`backup-gateway`: [`botocore`] Remove incorrect endpoint tests * api-change:`cloudhsm`: [`botocore`] Remove incorrect endpoint tests * api-change:`cognito-identity`: [`botocore`] Remove incorrect endpoint tests * api-change:`comprehend`: [`botocore`] Remove incorrect endpoint tests * api-change:`ebs`: [`botocore`] Remove incorrect endpoint tests * api-change:`ecr-public`: [`botocore`] Remove incorrect endpoint tests * api-change:`ecs`: [`botocore`] This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: [`botocore`] Remove incorrect endpoint tests * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`es`: [`botocore`] Remove incorrect endpoint tests * api-change:`forecastquery`: [`botocore`] Remove incorrect endpoint tests * api-change:`gameliftstreams`: [`botocore`] The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: [`botocore`] Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: [`botocore`] Remove incorrect endpoint tests * api-change:`guardduty`: [`botocore`] Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotevents`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotevents-data`: [`botocore`] Remove incorrect endpoint tests * api-change:`iotthingsgraph`: [`botocore`] Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: [`botocore`] Remove incorrect endpoint tests * api-change:`lexv2-runtime`: [`botocore`] Remove incorrect endpoint tests * api-change:`lookoutmetrics`: [`botocore`] Remove incorrect endpoint tests * api-change:`managedblockchain`: [`botocore`] Remove incorrect endpoint tests * api-change:`mediapackage`: [`botocore`] Remove incorrect endpoint tests * api-change:`panorama`: [`botocore`] Remove incorrect endpoint tests * api-change:`pinpoint-email`: [`botocore`] Remove incorrect endpoint tests * api-change:`resource-groups`: [`botocore`] Remove incorrect endpoint tests * api-change:`s3outposts`: [`botocore`] Remove incorrect endpoint tests * api-change:`ssm-contacts`: [`botocore`] Doc-only updates for Incident Manager Contacts August 2025 * from version 1.40.14 * api-change:`bedrock-runtime`: [`botocore`] Launch CountTokens API to allow token counting * api-change:`billing`: [`botocore`] Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: [`botocore`] This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: [`botocore`] This release supports policy grant identifier for cloud formation integration * api-change:`detective`: [`botocore`] Remove incorrect endpoint tests * api-change:`dynamodb`: [`botocore`] Remove incorrect endpoint tests * api-change:`eks`: [`botocore`] EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`kinesisanalyticsv2`: [`botocore`] Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: [`botocore`] Remove incorrect endpoint tests * api-change:`sagemaker`: [`botocore`] This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.40.13 * api-change:`cleanrooms`: [`botocore`] Support error message configuration for analysis templates * api-change:`ec2`: [`botocore`] Add support for "warning" volume status. * api-change:`polly`: [`botocore`] Added support for new output format - Opus. * from version 1.40.12 * api-change:`batch`: [`botocore`] Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: [`botocore`] Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: [`botocore`] Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`s3control`: [`botocore`] Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: [`botocore`] Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.27.6 * from version 1.40.11 * api-change:`amp`: [`botocore`] Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: [`botocore`] This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: [`botocore`] AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.40.10 * api-change:`arc-region-switch`: [`botocore`] Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: [`botocore`] Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: [`botocore`] Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: [`botocore`] This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: [`botocore`] This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: [`botocore`] Update endpoint-rules client to latest version * api-change:`fsx`: [`botocore`] Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: [`botocore`] AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: [`botocore`] Added support for entity lists. * api-change:`medialive`: [`botocore`] CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: [`botocore`] Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: [`botocore`] Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: [`botocore`] Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: [`botocore`] New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.40.9 * api-change:`braket`: [`botocore`] Add support for Braket program sets. * api-change:`datazone`: [`botocore`] Adds support for account pools and project profile account decoupling * api-change:`fsx`: [`botocore`] Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: [`botocore`] Add Tagging Support for Opportunity resources * api-change:`sagemaker`: [`botocore`] This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: [`botocore`] Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * from version 1.40.8 * api-change:`backupsearch`: [`botocore`] Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: [`botocore`] Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: [`botocore`] This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: [`botocore`] IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: [`botocore`] AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.40.7 * api-change:`bedrock`: [`botocore`] This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: [`botocore`] Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: [`botocore`] Updating SearchUserHierarchyGroups API * api-change:`deadline`: [`botocore`] Adds support for Wait and Save feature in service-managed fleets * api-change:`ec2`: [`botocore`] This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: [`botocore`] Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: [`botocore`] Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: [`botocore`] Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: [`botocore`] Added support for managing user background session for applications * from version 1.40.6 * api-change:`connect`: [`botocore`] This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: [`botocore`] Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: [`botocore`] Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: [`botocore`] Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: [`botocore`] Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * bugfix:stub: [`botocore`] Fixes a bug which causes the stubber to begin failing for DynamoDB when SSO or AssumeRole credentials fail to load * from version 1.40.5 * api-change:`batch`: [`botocore`] This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: [`botocore`] Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports comment- based pull request control. * api-change:`gameliftstreams`: [`botocore`] Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: [`botocore`] AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: [`botocore`] Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.40.4 * api-change:`appstream`: [`botocore`] Added support for G6 instances * api-change:`budgets`: [`botocore`] Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: [`botocore`] Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: [`botocore`] Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.40.3 * api-change:`bedrock`: [`botocore`] This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: [`botocore`] This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: [`botocore`] Add support for deletion protection on EKS clusters * api-change:`rds`: [`botocore`] Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: [`botocore`] Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.40.2 * api-change:`bedrock-agentcore`: [`botocore`] Remove superfluous field from API * api-change:`codeconnections`: [`botocore`] New integration with Azure DevOps provider type. * api-change:`evs`: [`botocore`] TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: [`botocore`] Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: [`botocore`] This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.40.1 * api-change:`acm-pca`: [`botocore`] Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: [`botocore`] This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: [`botocore`] This is the initial SDK release for Region switch * api-change:`auditmanager`: [`botocore`] Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: [`botocore`] This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: [`botocore`] CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: [`botocore`] Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: [`botocore`] Release new resource detail type CodeRepository * api-change:`sns`: [`botocore`] Amazon SNS support for Amazon SQS fair queues * from version 1.40.0 * api-change:`customer-profiles`: [`botocore`] The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: [`botocore`] Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: [`botocore`] This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: [`botocore`] Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: [`botocore`] Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: [`botocore`] Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: [`botocore`] This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: [`botocore`] Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: [`botocore`] Added Impala connector support * api-change:`s3control`: [`botocore`] Add Tags field to CreateAccessPoint * api-change:`sesv2`: [`botocore`] This release introduces support for Multi- tenant management * api-change:`workspaces-web`: [`botocore`] Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: [`botocore`] Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.39.17 * api-change:`cloudfront`: [`botocore`] This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: [`botocore`] Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: [`botocore`] This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: [`botocore`] Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: [`botocore`] Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.39.16 * api-change:`batch`: [`botocore`] AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: [`botocore`] This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: [`botocore`] Adds support for tag management on monitors. * api-change:`location`: [`botocore`] This release 1) adds support for multi- polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real- world boundaries. * api-change:`opensearchserverless`: [`botocore`] This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.39.15 * api-change:`directconnect`: [`botocore`] Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: [`botocore`] Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: [`botocore`] Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * enhancement:`sso`: [`botocore`] Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. * from version 1.39.14 * api-change:`appintegrations`: [`botocore`] Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross-contact), and run background applications (service). * api-change:`budgets`: [`botocore`] Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: [`botocore`] Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: [`botocore`] Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: [`botocore`] Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: [`botocore`] This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: [`botocore`] This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: [`botocore`] Documentation updates for Amazon SQS fair queues feature. * from version 1.39.13 * api-change:`datazone`: [`botocore`] This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: [`botocore`] Add Git integration and README support for HealthOmics workflows * from version 1.39.12 * api-change:`ec2`: [`botocore`] Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: [`botocore`] AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: [`botocore`] Added the lastUserId parameter to the ListDevices and GetDevice API. * bugfix:`bedrock`: [`botocore`] Fixes an issue where bearer authentication was incorrectly applied to all services with the `bedrock` signing name. Bearer auth is now only applied if the service model also includes the `smithy.api#httpBearerAuth` trait. * from version 1.39.11 * api-change:`ecr`: [`botocore`] Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: [`botocore`] This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: [`botocore`] This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: [`botocore`] This release updates the supported regions for Neptune API to include current AWS regions. * from version 1.39.10 * api-change:`cloudfront`: [`botocore`] Add dualstack endpoint support * api-change:`deadline`: [`botocore`] Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: [`botocore`] This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: [`botocore`] This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: [`botocore`] Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * from version 1.39.9 * api-change:`auditmanager`: [`botocore`] Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: [`botocore`] CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: [`botocore`] This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: [`botocore`] Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: [`botocore`] Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: [`botocore`] July 2025 doc-only updates for Systems Manager. * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * enhancement:Python: [`botocore`] Added provisional support for the upcoming Python 3.14 release * from version 1.39.8 * api-change:`cleanroomsml`: [`botocore`] This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: [`botocore`] Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: [`botocore`] AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: [`botocore`] Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: [`botocore`] Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: [`botocore`] This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: [`botocore`] Align input with style guidelines. * api-change:`synthetics`: [`botocore`] This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.39.7 * api-change:`bedrock`: [`botocore`] This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: [`botocore`] Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: [`botocore`] Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: [`botocore`] document update to support on demand custom model. * api-change:`datasync`: [`botocore`] AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: [`botocore`] AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: [`botocore`] Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: [`botocore`] FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: [`botocore`] CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: [`botocore`] This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: [`botocore`] Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: [`botocore`] Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: [`botocore`] Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.39.6 * api-change:`ecs`: [`botocore`] This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.39.5 * api-change:`bedrock-agent`: [`botocore`] Add support for S3 Vectors as a vector store. * api-change:`datazone`: [`botocore`] Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: [`botocore`] Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: [`botocore`] This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: [`botocore`] Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: [`botocore`] Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: [`botocore`] AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: [`botocore`] This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: [`botocore`] Introduced custom instructions for topics. * api-change:`repostspace`: [`botocore`] This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: [`botocore`] Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: [`botocore`] Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: [`botocore`] Amazon S3 Vectors provides cost- effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: [`botocore`] This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.39.4 * api-change:`ec2`: [`botocore`] Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: [`botocore`] This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: [`botocore`] Removing content that refers to an S3 bucket that is no longer in use. * from version 1.39.3 * api-change:`customer-profiles`: [`botocore`] This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: [`botocore`] Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: [`botocore`] This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: [`botocore`] This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: [`botocore`] Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.39.2 * api-change:`connectcases`: [`botocore`] This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: [`botocore`] AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: [`botocore`] Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: [`botocore`] Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * Update BuildRequires and Requires from setup.py * Update to 1.39.1 * api-change:`cleanroomsml`: [`botocore`] This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: [`botocore`] Add support for the new optional domain- unit-id parameter in the UpdateProject API. * api-change:`ec2`: [`botocore`] Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: [`botocore`] This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: [`botocore`] New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: [`botocore`] Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: [`botocore`] Updated field validation requirements for InstanceGroups. * from version 1.39.0 * api-change:`arc-zonal-shift`: [`botocore`] Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: [`botocore`] Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: [`botocore`] Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: [`botocore`] Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: [`botocore`] Added support for UNKNOWN drift status. * api-change:`config`: [`botocore`] Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: [`botocore`] This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: [`botocore`] This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: [`botocore`] This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: [`botocore`] Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: [`botocore`] releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: [`botocore`] Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: [`botocore`] Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: [`botocore`] Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: [`botocore`] Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: [`botocore`] Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: [`botocore`] Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: [`botocore`] Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: [`botocore`] Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: [`botocore`] Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: [`botocore`] Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.38.46 * api-change:`config`: [`botocore`] Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: [`botocore`] This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: [`botocore`] AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: [`botocore`] Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: [`botocore`] Adding UnauthorizedException to public SDK * api-change:`rds`: [`botocore`] StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: [`botocore`] Added support for new SES regions * from version 1.38.45 * api-change:`deadline`: [`botocore`] Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: [`botocore`] This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: [`botocore`] Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: [`botocore`] This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: [`botocore`] This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: [`botocore`] This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: [`botocore`] Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: [`botocore`] Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.38.44 * api-change:`ecs`: [`botocore`] Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: [`botocore`] Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: [`botocore`] Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: [`botocore`] Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: [`botocore`] This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: [`botocore`] Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: [`botocore`] Remove Tags field from Get API responses * from version 1.38.43 * api-change:`aiops`: [`botocore`] Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: [`botocore`] Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: [`botocore`] We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: [`botocore`] This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: [`botocore`] Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: [`botocore`] Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real-time network latency for multiplayer games. * api-change:`license-manager`: [`botocore`] AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: [`botocore`] Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: [`botocore`] Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: [`botocore`] This Feature Adds Support for the "et- EE" Locale for Batch Operations * from version 1.38.42 * api-change:`glue`: [`botocore`] AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: [`botocore`] S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: [`botocore`] Added support for Amazon WorkSpaces Instances API * from version 1.38.41 * api-change:`bedrock`: [`botocore`] Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: [`botocore`] Add ECS support for Windows Server 2025 * api-change:`geo-places`: [`botocore`] Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: [`botocore`] AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: [`botocore`] This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.38.40 * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: [`botocore`] This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: [`botocore`] Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON- formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: [`botocore`] Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: [`botocore`] Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: [`botocore`] This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.38.39 * api-change:`aiops`: [`botocore`] This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: [`botocore`] Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: [`botocore`] Added paginators for `imagebuilder`. * api-change:`logs`: [`botocore`] Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: [`botocore`] Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: [`botocore`] Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.38.38 * api-change:`accessanalyzer`: [`botocore`] We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: [`botocore`] Adds support for Exportable Public Certificates * api-change:`backup`: [`botocore`] AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: [`botocore`] Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: [`botocore`] Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: [`botocore`] Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: [`botocore`] This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: [`botocore`] Release of Active Threat Defense in Network Firewall * api-change:`organizations`: [`botocore`] Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: [`botocore`] Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: [`botocore`] The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: [`botocore`] AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.38.37 * api-change:`bedrock`: [`botocore`] This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: [`botocore`] The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: [`botocore`] You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: [`botocore`] This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.38.36 * api-change:`apigateway`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: [`botocore`] Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: [`botocore`] This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: [`botocore`] This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: [`botocore`] Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: [`botocore`] AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: [`botocore`] Fixed regex patterns for ARN fields. * from version 1.38.35 * api-change:`controlcatalog`: [`botocore`] Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: [`botocore`] Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: [`botocore`] Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: [`botocore`] Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: [`botocore`] WAF now provides two DDoS protection options: resource-level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * bugfix:Serialization: [`botocore`] Fixes a bug where instances of decimal.Decimal were unable to be passed into JSON serialization * from version 1.38.34 * api-change:`gameliftstreams`: [`botocore`] Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.38.33 * api-change:`appsync`: [`botocore`] Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: [`botocore`] Support dual-stack endpoints for ce api * api-change:`customer-profiles`: [`botocore`] This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: [`botocore`] Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: [`botocore`] The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: [`botocore`] Add ConflictException to UpdateEnvironment API * from version 1.38.32 * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: [`botocore`] Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: [`botocore`] Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: [`botocore`] Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: [`botocore`] S3 Tables now supports getting details about a table via its table ARN. * from version 1.38.31 * api-change:`bcm-pricing-calculator`: [`botocore`] Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: [`botocore`] Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: [`botocore`] AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: [`botocore`] AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.38.30 * api-change:`amplify`: [`botocore`] Update documentation for cacheConfig in CreateApp API * api-change:`evs`: [`botocore`] Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: [`botocore`] Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: [`botocore`] This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: [`botocore`] This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: [`botocore`] You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: [`botocore`] Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: [`botocore`] AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.38.29 * api-change:`apigateway`: [`botocore`] Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: [`botocore`] Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: [`botocore`] AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.38.28 * api-change:`athena`: [`botocore`] Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: [`botocore`] You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: [`botocore`] This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: [`botocore`] This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: [`botocore`] Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: [`botocore`] Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: [`botocore`] Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: [`botocore`] Add support for generating match IDs in near real-time. * api-change:`pcs`: [`botocore`] Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: [`botocore`] Support for Java runtime handler pattern. * from version 1.38.27 * api-change:`emr-serverless`: [`botocore`] This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: [`botocore`] Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.38.26 * api-change:`amplify`: [`botocore`] Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: [`botocore`] Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: [`botocore`] Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: [`botocore`] CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: [`botocore`] This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: [`botocore`] AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: [`botocore`] FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: [`botocore`] Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: [`botocore`] Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: [`botocore`] Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.38.25 * api-change:`cost-optimization-hub`: [`botocore`] This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: [`botocore`] Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: [`botocore`] Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: [`botocore`] You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: [`botocore`] Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.38.24 * api-change:`ce`: [`botocore`] This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: [`botocore`] AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: [`botocore`] This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update BuildRequires and Requires from setup.py * Update to 1.38.23 * api-change:`ec2`: [`botocore`] This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: [`botocore`] Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.38.22 * api-change:`amp`: [`botocore`] Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: [`botocore`] With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: [`botocore`] Features: support for customer managed encryption keys * api-change:`glue`: [`botocore`] This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.38.21 * api-change:`application-autoscaling`: [`botocore`] Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: [`botocore`] Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: [`botocore`] Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: [`botocore`] Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: [`botocore`] Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.38.20 * api-change:`datasync`: [`botocore`] Remove Discovery APIs from the DataSync service * api-change:`ec2`: [`botocore`] This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: [`botocore`] Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: [`botocore`] This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: [`botocore`] Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`privatenetworks`: [`botocore`] The privatenetworks client has been removed following the deprecation of the service. * api-change:`rds`: [`botocore`] This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.38.19 * api-change:`dsql`: [`botocore`] CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: [`botocore`] This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: [`botocore`] This release adds support for DVB- DASH, EBU-TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.38.18 * api-change:`bedrock-data-automation`: [`botocore`] Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: [`botocore`] Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: [`botocore`] CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: [`botocore`] This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: [`botocore`] Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: [`botocore`] Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: [`botocore`] This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: [`botocore`] This release introduces CreateSupportCase operation to SDK. * from version 1.38.17 * api-change:`bedrock-agent`: [`botocore`] Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: [`botocore`] Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: [`botocore`] Introduces Data Resync feature to describe- table-statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: [`botocore`] This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: [`botocore`] Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.38.16 * api-change:`cognito-idp`: [`botocore`] Add exceptions to WebAuthn operations. * api-change:`firehose`: [`botocore`] This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: [`botocore`] This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: [`botocore`] This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.38.15 * api-change:`bedrock`: [`botocore`] Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: [`botocore`] Changes for enhanced metadata in trace * api-change:`controltower`: [`botocore`] AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: [`botocore`] CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi- Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: [`botocore`] This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: [`botocore`] Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.38.14 * api-change:`deadline`: [`botocore`] AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: [`botocore`] EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: [`botocore`] Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: [`botocore`] Add support to the AV1 rate control mode * api-change:`mediatailor`: [`botocore`] Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: [`botocore`] Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: [`botocore`] No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: [`botocore`] Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.38.13 * api-change:`athena`: [`botocore`] Minor API documentation updates * api-change:`logs`: [`botocore`] We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: [`botocore`] Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: [`botocore`] Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.38.12 * api-change:`cloudfront`: [`botocore`] Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: [`botocore`] Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: [`botocore`] Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: [`botocore`] This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: [`botocore`] Updated description of a data structure. * api-change:`sso-admin`: [`botocore`] Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.38.11 * api-change:`ec2`: [`botocore`] This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: [`botocore`] Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: [`botocore`] Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: [`botocore`] SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: [`botocore`] Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.38.10 * api-change:`ec2`: [`botocore`] This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: [`botocore`] ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: [`botocore`] Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: [`botocore`] Add dualstack endpoints support. * from version 1.38.9 * api-change:`datazone`: [`botocore`] This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: [`botocore`] Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: [`botocore`] This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: [`botocore`] Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: [`botocore`] This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.38.8 * api-change:`bedrock-data-automation`: [`botocore`] Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: [`botocore`] Doc only update - fixed typos. * api-change:`kinesis`: [`botocore`] Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.38.7 * api-change:`appconfig`: [`botocore`] Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: [`botocore`] This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: [`botocore`] Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: [`botocore`] Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.38.6 * api-change:`bedrock`: [`botocore`] You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: [`botocore`] Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: [`botocore`] Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: [`botocore`] This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: [`botocore`] Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: [`botocore`] Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: [`botocore`] Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: [`botocore`] Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: [`botocore`] CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: [`botocore`] Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.38.5 * api-change:`connectcases`: [`botocore`] Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: [`botocore`] Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: [`botocore`] Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: [`botocore`] Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: [`botocore`] SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: [`botocore`] This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: [`botocore`] This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * from version 1.38.4 * api-change:`acm`: [`botocore`] Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: [`botocore`] This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: [`botocore`] Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: [`botocore`] Doc only update for GSI descriptions. * api-change:`imagebuilder`: [`botocore`] Add integration with SSM Parameter Store to Image Builder. * from version 1.38.3 * api-change:`bedrock-runtime`: [`botocore`] You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: [`botocore`] Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: [`botocore`] Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.38.2 * api-change:`apprunner`: [`botocore`] AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: [`botocore`] Add data source support to Event APIs * api-change:`bedrock-data-automation`: [`botocore`] Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: [`botocore`] Remove redundant validation check. * api-change:`dynamodb`: [`botocore`] Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: [`botocore`] Documentation only release for Amazon ECS * api-change:`pcs`: [`botocore`] Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: [`botocore`] This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update BuildRequires and Requires from setup.py * Update to 1.38.1 * api-change:`codebuild`: [`botocore`] Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: [`botocore`] Add support to roll back an In_Progress ECS Service Deployment * api-change:`imagebuilder`: [`botocore`] Add all `imagebuilder` modeled paginators that are currently supported by botocore. * api-change:`resource-explorer-2`: [`botocore`] Documentation-only update for CreateView option correction * from version 1.38.0 * api-change:`account`: [`botocore`] AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: [`botocore`] This release adds refresh token rotation. * api-change:`ec2`: [`botocore`] Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: [`botocore`] To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: [`botocore`] You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: [`botocore`] Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: [`botocore`] Fix endpoint resolution test cases * feature:Python: [`botocore`] End of support for Python 3.8 * feature:Python: End of support for Python 3.8 * from version 1.37.38 * api-change:`arc-zonal-shift`: [`botocore`] Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: [`botocore`] Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: [`botocore`] Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: [`botocore`] Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: [`botocore`] The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.37.37 * api-change:`qconnect`: [`botocore`] This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: [`botocore`] This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: [`botocore`] Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.37.36 * api-change:`accessanalyzer`: [`botocore`] Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: [`botocore`] Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: [`botocore`] Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: [`botocore`] This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: [`botocore`] Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: [`botocore`] We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: [`botocore`] Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: [`botocore`] Add versioning for HealthOmics workflows * from version 1.37.35 * api-change:`connectcases`: [`botocore`] This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: [`botocore`] Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: [`botocore`] Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: [`botocore`] Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: [`botocore`] Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: [`botocore`] S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer- managed keys. * api-change:`servicecatalog`: [`botocore`] Updated default value for the access-level-filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * from version 1.37.34 * api-change:`entityresolution`: [`botocore`] This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: [`botocore`] Indonesia SOR Tax Registration Launch * from version 1.37.33 * api-change:`connect-contact-lens`: [`botocore`] Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: [`botocore`] Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: [`botocore`] Add support for Detective DualStack endpoints * api-change:`dynamodb`: [`botocore`] Doc only update for API descriptions. * api-change:`marketplace-entitlement`: [`botocore`] Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: [`botocore`] Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: [`botocore`] Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: [`botocore`] Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * bugfix:`download_fileobj`: Fileobj provided in append mode will no longer allow concurrent writes to preserve data integrity. * from version 1.37.32 * api-change:`application-autoscaling`: [`botocore`] Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: [`botocore`] AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: [`botocore`] Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: [`botocore`] Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: [`botocore`] Add support to analysis and sheet level highlighting in QuickSight. * from version 1.37.31 * api-change:`controlcatalog`: [`botocore`] The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: [`botocore`] Documentation update for secondary indexes and Create_Table. * api-change:`glue`: [`botocore`] The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: [`botocore`] Support tagging Agents and adjust input field validations * api-change:`transfer`: [`botocore`] This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.37.30 * api-change:`bedrock-runtime`: [`botocore`] This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: [`botocore`] This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: [`botocore`] This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: [`botocore`] This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: [`botocore`] Documentation updates for AWS Security Hub. * api-change:`storagegateway`: [`botocore`] Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: [`botocore`] Uzbekistan Launch on TaxSettings Page * Update BuildRequires and Requires from setup.py * Update to 1.37.29 * api-change:`bedrock`: [`botocore`] New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: [`botocore`] New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: [`botocore`] Add input validations for multiple Glue APIs * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: [`botocore`] Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: [`botocore`] This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.37.28 * api-change:`ds-data`: [`botocore`] Doc only update - fixed broken links. * api-change:`ec2`: [`botocore`] Doc-only updates for Amazon EC2 * api-change:`events`: [`botocore`] Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: [`botocore`] Updated max size of Prefixes parameter of Scope data type. * from version 1.37.27 * api-change:`bedrock-agent`: [`botocore`] Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single- column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: [`botocore`] Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: [`botocore`] Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: [`botocore`] Improve descriptions for various API commands and data types. * api-change:`route53`: [`botocore`] Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: [`botocore`] Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: [`botocore`] This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: [`botocore`] This Feature Adds Support for the "zh- HK" Locale for Batch Operations * enhancement:Eventstream: [`botocore`] The event streams maximum payload size is now required to be 24Mb or less. * from version 1.37.26 * api-change:`application-signals`: [`botocore`] Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: [`botocore`] This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: [`botocore`] Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: [`botocore`] This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: [`botocore`] Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: [`botocore`] Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.37.25 * api-change:`cleanrooms`: [`botocore`] This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: [`botocore`] Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.37.24 * api-change:`bedrock-runtime`: [`botocore`] Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: [`botocore`] With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: [`botocore`] Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: [`botocore`] Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: [`botocore`] Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: [`botocore`] Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: [`botocore`] Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: [`botocore`] Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: [`botocore`] Add dual-stack support to global endpoints. * api-change:`transfer`: [`botocore`] Add WebAppEndpointPolicy support for WebApps * from version 1.37.23 * api-change:`apigateway`: [`botocore`] Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: [`botocore`] Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: [`botocore`] Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: [`botocore`] This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: [`botocore`] This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: [`botocore`] Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: [`botocore`] Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: [`botocore`] The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: [`botocore`] RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: [`botocore`] TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.37.22 * api-change:`batch`: [`botocore`] This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: [`botocore`] Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: [`botocore`] bedrock flow now support node action trace. * api-change:`cloudformation`: [`botocore`] Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: [`botocore`] This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: [`botocore`] Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: [`botocore`] Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: [`botocore`] Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: [`botocore`] add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: [`botocore`] This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.37.21 * api-change:`arc-zonal-shift`: [`botocore`] Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: [`botocore`] With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: [`botocore`] This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: [`botocore`] Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: [`botocore`] Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: [`botocore`] Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: [`botocore`] This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.37.20 * api-change:`bedrock-agent`: [`botocore`] Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: [`botocore`] Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: [`botocore`] Minor updates to improve developer experience. * api-change:`keyspaces`: [`botocore`] Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: [`botocore`] This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: [`botocore`] This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: [`botocore`] This release adds support for customer- managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: [`botocore`] Deprecate tags field in Get API responses * from version 1.37.19 * api-change:`iotwireless`: [`botocore`] Mark EutranCid under LteNmr optional. * api-change:`pcs`: [`botocore`] ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: [`botocore`] Provides the correct value for supported model ID. * api-change:`ssm`: [`botocore`] This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.37.18 * api-change:`bedrock`: [`botocore`] A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: [`botocore`] Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: [`botocore`] Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt-in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: [`botocore`] This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.37.17 * api-change:`amplify`: [`botocore`] Added appId field to Webhook responses * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: [`botocore`] Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: [`botocore`] Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: [`botocore`] You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.37.16 * api-change:`bedrock`: [`botocore`] Support custom prompt routers for evaluation jobs * api-change:`ec2`: [`botocore`] Doc-only updates for EC2 for March 2025. * api-change:`lambda`: [`botocore`] Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: [`botocore`] This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: [`botocore`] Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: [`botocore`] Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.37.15 * api-change:`appsync`: [`botocore`] Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: [`botocore`] This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: [`botocore`] This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.37.14 * api-change:`application-signals`: [`botocore`] This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: [`botocore`] Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: [`botocore`] CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: [`botocore`] Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: [`botocore`] AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.37.13 * api-change:`cognito-identity`: [`botocore`] Updated API model build artifacts for identity pools * api-change:`cognito-idp`: [`botocore`] Minor description updates to API parameters * api-change:`glue`: [`botocore`] This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: [`botocore`] This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.37.12 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: [`botocore`] Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: [`botocore`] AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: [`botocore`] This release adds support to update projects and environments * api-change:`dynamodb`: [`botocore`] Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: [`botocore`] This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: [`botocore`] Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: [`botocore`] This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: [`botocore`] Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * Update BuildRequires and Requires from setup.py * Update to 1.37.11 * api-change:`ec2`: [`botocore`] This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: [`botocore`] This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: [`botocore`] This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: [`botocore`] Adding componentArn to network reachability details * api-change:`medialive`: [`botocore`] Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.37.10 * api-change:`bedrock-agent`: [`botocore`] Add support for computer use tools * api-change:`bedrock-agent-runtime`: [`botocore`] Add support for computer use tools * api-change:`ce`: [`botocore`] Releasing minor partition endpoint updates. * api-change:`connect`: [`botocore`] Add support for contact transfers in external voice systems. * api-change:`medialive`: [`botocore`] Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: [`botocore`] PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: [`botocore`] This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: [`botocore`] This release updates the default value of pprof-disabled from false to true. * from version 1.37.9 * api-change:`bedrock-agent`: [`botocore`] Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: [`botocore`] Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: [`botocore`] Documentation updates for Amazon CloudFront. * api-change:`ec2`: [`botocore`] Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: [`botocore`] This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: [`botocore`] Several small updates to resolve customer requests. * from version 1.37.8 * api-change:`bedrock`: [`botocore`] This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: [`botocore`] Doc-only update for CloudTrail. * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: [`botocore`] This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: [`botocore`] This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: [`botocore`] You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: [`botocore`] Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.37.7 * api-change:`bedrock-runtime`: [`botocore`] This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: [`botocore`] AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: [`botocore`] New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: [`botocore`] This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: [`botocore`] Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.37.6 * api-change:`elasticache`: [`botocore`] Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: [`botocore`] Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: [`botocore`] AWS IoT SiteWise now supports MQTT- enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: [`botocore`] Note support for Database Insights for Amazon RDS. * from version 1.37.5 * api-change:`cognito-idp`: [`botocore`] Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: [`botocore`] Update the DescribeVpcs response * api-change:`qbusiness`: [`botocore`] Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: [`botocore`] Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: [`botocore`] Add DomainId to CreateDomainResponse * api-change:`transcribe`: [`botocore`] Updating documentation for post call analytics job queueing. * enhancement:configuration: [`botocore`] Add support for disabling host prefix injection via the `AWS_DISABLE_HOST_PREFIX_INJECTION` environment variable or the `disable_host_prefix_injection` parameter in the shared aws configuration file. * from version 1.37.4 * api-change:`bedrock-agent`: [`botocore`] This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: [`botocore`] Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: [`botocore`] Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: [`botocore`] Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: [`botocore`] Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: [`botocore`] The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: [`botocore`] Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: [`botocore`] Systems Manager doc-only updates for Feb. 2025. * enhancement:useragent: [`botocore`] Update user agent string to include client feature use. * from version 1.37.3 * api-change:`bedrock-agent-runtime`: [`botocore`] Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: [`botocore`] Definition update for EbsConfiguration. * api-change:`qbusiness`: [`botocore`] This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: [`botocore`] Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: [`botocore`] SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: [`botocore`] This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.37.2 * api-change:`application-signals`: [`botocore`] This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: [`botocore`] AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: [`botocore`] Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk-mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk-voice. * api-change:`cloudfront`: [`botocore`] Documentation update for VPC origin config. * api-change:`ec2`: [`botocore`] Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: [`botocore`] This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: [`botocore`] This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: [`botocore`] AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * enhancement:`Protocol`: [`botocore`] Adds support for the smithy-rpc-v2-cbor protocol. If a service supports smithy-rpc-v2-cbor, this protocol will automatically be used. For more information, see https://smithy.io/2.0/additional-specs/protocols/smithy-rpc-v2.html * from version 1.37.1 * api-change:`codebuild`: [`botocore`] Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: [`botocore`] Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: [`botocore`] Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: [`botocore`] AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: [`botocore`] PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.37.0 * api-change:`bedrock-agent`: [`botocore`] This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: [`botocore`] Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: [`botocore`] This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: [`botocore`] Documentation update, adding clarity and rephrasing. * api-change:`elastic-inference`: [`botocore`] The elastic-inference client has been removed following the deprecation of the service. * feature:Endpoints: [`botocore`] Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account- id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.36.26 * api-change:`appstream`: [`botocore`] Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: [`botocore`] Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.36.25 * api-change:`codebuild`: [`botocore`] Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: [`botocore`] Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: [`botocore`] Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: [`botocore`] CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: [`botocore`] Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: [`botocore`] Add support for toolbar configuration under user settings. * from version 1.36.24 * api-change:`codepipeline`: [`botocore`] Add environment variables to codepipeline action declaration. * api-change:`ecs`: [`botocore`] This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: [`botocore`] Documentation updates for Amazon Lightsail. * api-change:`location`: [`botocore`] Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: [`botocore`] This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: [`botocore`] This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: [`botocore`] Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: [`botocore`] This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.36.23 * api-change:`batch`: [`botocore`] This documentation-only update corrects some typos. * api-change:`emr-containers`: [`botocore`] EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: [`botocore`] Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.36.22 * api-change:`amplify`: [`botocore`] Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: [`botocore`] Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: [`botocore`] This release introduces APIs to manage DbClusters and adds support for read replicas * enhancement:Parsers: [`botocore`] Minor Parser updates to support the new smithy-generated protocol tests. See `boto/botocore#3247 <https://github.com/boto/botocore/pull/3247>`__ for more details. * from version 1.36.21 * api-change:`codebuild`: [`botocore`] Added test suite names to test case metadata * api-change:`connect`: [`botocore`] Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: [`botocore`] Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: [`botocore`] Add support for Stop DB feature. * api-change:`s3`: [`botocore`] Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: [`botocore`] The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: [`botocore`] Update Environment and Device name field definitions * from version 1.36.20 * api-change:`accessanalyzer`: [`botocore`] This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: [`botocore`] Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: [`botocore`] This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: [`botocore`] Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: [`botocore`] Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: [`botocore`] This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.36.19 * api-change:`b2bi`: [`botocore`] Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: [`botocore`] This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: [`botocore`] This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: [`botocore`] Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: [`botocore`] Support for in-place Lustre version upgrades * api-change:`medialive`: [`botocore`] Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: [`botocore`] Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: [`botocore`] Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * enhancement:Protocols: [`botocore`] Added support for multiple protocols within a service based on performance priority. * from version 1.36.18 * api-change:`acm-pca`: [`botocore`] Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: [`botocore`] Add support for operation level caching * api-change:`ec2`: [`botocore`] Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: [`botocore`] Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.36.17 * api-change:`apigatewayv2`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`cloudfront`: [`botocore`] Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: [`botocore`] Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: [`botocore`] New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.36.16 * api-change:`ecr`: [`botocore`] Adds support to handle the new basic scanning daily quota. * api-change:`eks`: [`botocore`] Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: [`botocore`] This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: [`botocore`] Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: [`botocore`] This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.36.15 * api-change:`cloudformation`: [`botocore`] We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: [`botocore`] This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: [`botocore`] This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: [`botocore`] Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * enhancement:Eventsteam: [`botocore`] The SDK no longer validates payload size for eventstreams. This is to facilitate varying payload requirements across AWS services. * from version 1.36.14 * api-change:`rds`: [`botocore`] Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.36.13 * api-change:`datasync`: [`botocore`] Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: [`botocore`] Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: [`botocore`] This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: [`botocore`] Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: [`botocore`] Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: [`botocore`] IPv6 support for Hyperpod clusters * from version 1.36.12 * api-change:`mediatailor`: [`botocore`] Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * Update BuildRequires and Requires from setup.py * Update to 1.36.11 * api-change:`amp`: [`botocore`] Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: [`botocore`] This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: [`botocore`] Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: [`botocore`] The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: [`botocore`] Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: [`botocore`] This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.36.10 * api-change:`appstream`: [`botocore`] Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: [`botocore`] Add a 'reason' field to InternalServerException * api-change:`ecr`: [`botocore`] Temporarily updating dualstack endpoint support * api-change:`ecr-public`: [`botocore`] Temporarily updating dualstack endpoint support * api-change:`mediatailor`: [`botocore`] Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: [`botocore`] Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: [`botocore`] You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: [`botocore`] Adds Cedar JSON format support for entities and context data in authorization requests * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.23.8 * from version 1.36.9 * api-change:`bcm-pricing-calculator`: [`botocore`] Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: [`botocore`] Add support for Dualstack and Dualstack-with- FIPS Endpoints * api-change:`ecr-public`: [`botocore`] Add support for Dualstack Endpoints * api-change:`mailmanager`: [`botocore`] This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: [`botocore`] Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.36.8 * api-change:`appsync`: [`botocore`] Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: [`botocore`] AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: [`botocore`] feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: [`botocore`] This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: [`botocore`] For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: [`botocore`] Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.36.7 * api-change:`bedrock-agent`: [`botocore`] Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: [`botocore`] Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: [`botocore`] This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: [`botocore`] Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * bugfix:Signing: [`botocore`] No longer sign transfer-encoding header for SigV4 * from version 1.36.6 * api-change:`cloudtrail`: [`botocore`] This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: [`botocore`] Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: [`botocore`] Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: [`botocore`] Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: [`botocore`] Fixed typos in the descriptions. * api-change:`transfer`: [`botocore`] Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.36.5 * api-change:`ec2`: [`botocore`] Added "future" allocation type for future dated capacity reservation * from version 1.36.4 * api-change:`bedrock-agent-runtime`: [`botocore`] Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: [`botocore`] Docs Update for timeout changes * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: [`botocore`] Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.36.3 * api-change:`batch`: [`botocore`] Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: [`botocore`] corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: [`botocore`] Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: [`botocore`] Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: [`botocore`] AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt-in. * api-change:`logs`: [`botocore`] Documentation-only update to address doc errors * api-change:`quicksight`: [`botocore`] Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: [`botocore`] This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update BuildRequires and Requires from setup.py * Update to 1.36.2 * api-change:`bedrock-runtime`: [`botocore`] Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: [`botocore`] Doc only update for Detective documentation. * api-change:`ec2`: [`botocore`] Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: [`botocore`] Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: [`botocore`] Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.36.1 * api-change:`ecs`: [`botocore`] The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: [`botocore`] Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.36.0 * api-change:`apigateway`: [`botocore`] Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: [`botocore`] Now supports streaming for inline agents. * api-change:`cognito-identity`: [`botocore`] corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: [`botocore`] Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: [`botocore`] This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: [`botocore`] Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: [`botocore`] This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: [`botocore`] Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: [`botocore`] Mark type in MaintenanceWindow as required. * enhancement:AWSCRT: [`botocore`] Update awscrt version to 0.23.4 * feature:`s3`: [`botocore`] The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: [`botocore`] Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: [`botocore`] S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.35.99 * api-change:`gamelift`: [`botocore`] Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.35.98 * api-change:`artifact`: [`botocore`] Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: [`botocore`] With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: [`botocore`] Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: [`botocore`] Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: [`botocore`] This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.35.97 * api-change:`redshift`: [`botocore`] Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: [`botocore`] Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: [`botocore`] Fixed typos in the descriptions. * from version 1.35.96 * api-change:`codebuild`: [`botocore`] AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: [`botocore`] This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: [`botocore`] AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.35.95 * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: [`botocore`] Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: [`botocore`] Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.35.94 * api-change:`cloudhsmv2`: [`botocore`] Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: [`botocore`] This release makes Amazon DynamoDB point-in-time-recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: [`botocore`] This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * from version 1.35.93 * api-change:`iotsecuretunneling`: [`botocore`] Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: [`botocore`] Allow vanity DNS domain when creating a new ASC instance * from version 1.35.92 * api-change:`ecs`: [`botocore`] Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: [`botocore`] Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: [`botocore`] This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.35.91 * api-change:`appsync`: [`botocore`] Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: [`botocore`] Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in-progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: [`botocore`] AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: [`botocore`] This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: [`botocore`] Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: [`botocore`] Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: [`botocore`] In-flight message typo fix from 20k to 120k. * from version 1.35.90 * api-change:`ecr`: [`botocore`] Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: [`botocore`] Restoring custom endpoint functionality for ECR Public * from version 1.35.89 * api-change:`rds`: [`botocore`] Updates Amazon RDS documentation to correct various descriptions. * from version 1.35.88 * api-change:`bcm-pricing-calculator`: [`botocore`] Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: [`botocore`] Add support for Dualstack Endpoints * api-change:`network-firewall`: [`botocore`] Dual-stack endpoints are now supported. * api-change:`securityhub`: [`botocore`] Documentation updates for AWS Security Hub * from version 1.35.87 * api-change:`ecr`: [`botocore`] Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: [`botocore`] Add support for Dualstack endpoints * api-change:`eks`: [`botocore`] This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: [`botocore`] Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.35.86 * api-change:`bedrock-agent`: [`botocore`] Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: [`botocore`] bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: [`botocore`] Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: [`botocore`] Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: [`botocore`] Added new API's for defining and fetching Billing Views. * api-change:`ce`: [`botocore`] Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: [`botocore`] This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: [`botocore`] Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: [`botocore`] This release expands the catalog of upgrade insight checks * api-change:`macie2`: [`botocore`] This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: [`botocore`] Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: [`botocore`] This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.35.85 * api-change:`appstream`: [`botocore`] Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: [`botocore`] This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: [`botocore`] MediaLive is releasing ListVersions api * api-change:`qconnect`: [`botocore`] Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: [`botocore`] AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: [`botocore`] Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.35.84 * api-change:`amplify`: [`botocore`] Added WAF Configuration to Amplify Apps * api-change:`budgets`: [`botocore`] Releasing minor partition endpoint updates * api-change:`connect`: [`botocore`] This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: [`botocore`] This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: [`botocore`] AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: [`botocore`] Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: [`botocore`] Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: [`botocore`] Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: [`botocore`] AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: [`botocore`] Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.35.83 * api-change:`account`: [`botocore`] Update endpoint configuration. * api-change:`backup`: [`botocore`] Add Support for Backup Indexing * api-change:`backupsearch`: [`botocore`] Add support for searching backups * api-change:`batch`: [`botocore`] This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: [`botocore`] Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: [`botocore`] Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: [`botocore`] AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: [`botocore`] Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: [`botocore`] This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: [`botocore`] Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.35.82 * api-change:`cloud9`: [`botocore`] Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: [`botocore`] This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: [`botocore`] This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: [`botocore`] Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: [`botocore`] AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: [`botocore`] This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.35.81 * api-change:`cloudhsmv2`: [`botocore`] Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: [`botocore`] This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: [`botocore`] Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: [`botocore`] Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: [`botocore`] AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: [`botocore`] There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: [`botocore`] AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.35.80 * api-change:`connect`: [`botocore`] Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: [`botocore`] Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: [`botocore`] To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: [`botocore`] Improved descriptions for certain APIs. * api-change:`route53domains`: [`botocore`] This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.35.79 * api-change:`artifact`: [`botocore`] Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: [`botocore`] Doc-only updates for CloudTrail. * api-change:`cognito-idp`: [`botocore`] Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: [`botocore`] Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: [`botocore`] This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: [`botocore`] API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: [`botocore`] Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: [`botocore`] Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.35.78 * api-change:`application-autoscaling`: [`botocore`] Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: [`botocore`] Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: [`botocore`] Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: [`botocore`] Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: [`botocore`] IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: [`botocore`] Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update BuildRequires and Requires from setup.py * Update to 1.35.77 * api-change:`appsync`: [`botocore`] Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: [`botocore`] Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: [`botocore`] This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: [`botocore`] This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: [`botocore`] Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: [`botocore`] H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: [`botocore`] Added text to clarify case-sensitivity * from version 1.35.76 * api-change:`partnercentral-selling`: [`botocore`] Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: [`botocore`] This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.35.75 * api-change:`bedrock`: [`botocore`] Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: [`botocore`] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: [`botocore`] Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: [`botocore`] Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: [`botocore`] Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: [`botocore`] This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: [`botocore`] Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.35.74 * api-change:`athena`: [`botocore`] Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: [`botocore`] Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: [`botocore`] Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: [`botocore`] Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: [`botocore`] Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: [`botocore`] Support for configuring AiOps investigation as alarm action * api-change:`datazone`: [`botocore`] Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: [`botocore`] Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: [`botocore`] This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: [`botocore`] This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: [`botocore`] This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: [`botocore`] Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: [`botocore`] This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: [`botocore`] Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: [`botocore`] Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: [`botocore`] Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: [`botocore`] Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.35.73 * api-change:`bedrock-runtime`: [`botocore`] Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: [`botocore`] It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: [`botocore`] Added support for passing role arn corresponding to the supported event destination * from version 1.35.72 * api-change:`bedrock`: [`botocore`] Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: [`botocore`] This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: [`botocore`] This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: [`botocore`] This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: [`botocore`] This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: [`botocore`] Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: [`botocore`] Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: [`botocore`] This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: [`botocore`] This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: [`botocore`] Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: [`botocore`] Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: [`botocore`] FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: [`botocore`] Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: [`botocore`] Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: [`botocore`] AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: [`botocore`] Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: [`botocore`] Amazon MemoryDB SDK now supports all APIs for Multi-Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: [`botocore`] This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: [`botocore`] This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: [`botocore`] Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: [`botocore`] Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: [`botocore`] This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: [`botocore`] Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: [`botocore`] Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: [`botocore`] Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: [`botocore`] Add new Multi Domain Correlation findings. * api-change:`security-ir`: [`botocore`] AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: [`botocore`] AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: [`botocore`] Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.35.71 * api-change:`bedrock-agent`: [`botocore`] Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: [`botocore`] AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: [`botocore`] This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: [`botocore`] Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.35.70 * api-change:`bedrock-agent`: [`botocore`] Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: [`botocore`] Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: [`botocore`] Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: [`botocore`] Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: [`botocore`] Private sharing, file upload and data collection feature support for Q Apps * from version 1.35.69 * api-change:`directconnect`: [`botocore`] Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: [`botocore`] This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: [`botocore`] Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.35.68 * api-change:`autoscaling`: [`botocore`] Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: [`botocore`] Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: [`botocore`] InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: [`botocore`] This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: [`botocore`] Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: [`botocore`] AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: [`botocore`] Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: [`botocore`] Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: [`botocore`] This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: [`botocore`] Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: [`botocore`] Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: [`botocore`] Add ProvisionedPollerConfig to Lambda event-source-mapping API. * api-change:`mailmanager`: [`botocore`] Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: [`botocore`] Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: [`botocore`] This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: [`botocore`] This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: [`botocore`] This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: [`botocore`] This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: [`botocore`] ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: [`botocore`] Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: [`botocore`] While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.35.67 * api-change:`apigateway`: [`botocore`] Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: [`botocore`] Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: [`botocore`] Add support for the Amazon Bedrock Runtime. * api-change:`ce`: [`botocore`] This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: [`botocore`] Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: [`botocore`] This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: [`botocore`] Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: [`botocore`] Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: [`botocore`] This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: [`botocore`] Adds metadata property to an AffectedEntity. * api-change:`iot`: [`botocore`] General Availability (GA) release of AWS IoT Device Management * Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: [`botocore`] AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: [`botocore`] General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: [`botocore`] Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: [`botocore`] Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: [`botocore`] This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: [`botocore`] This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: [`botocore`] AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: [`botocore`] Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: [`botocore`] Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: [`botocore`] Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: [`botocore`] AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.35.66 * api-change:`autoscaling`: [`botocore`] With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: [`botocore`] Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: [`botocore`] Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: [`botocore`] This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: [`botocore`] Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: [`botocore`] This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: [`botocore`] This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: [`botocore`] Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: [`botocore`] With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU- performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: [`botocore`] This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: [`botocore`] This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: [`botocore`] Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: [`botocore`] This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: [`botocore`] MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: [`botocore`] Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: [`botocore`] This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: [`botocore`] This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: [`botocore`] This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: [`botocore`] Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: [`botocore`] Added data protection settings with support for inline data redaction. * from version 1.35.65 * api-change:`b2bi`: [`botocore`] Add new X12 transactions sets and versions * api-change:`ec2`: [`botocore`] This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: [`botocore`] This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: [`botocore`] Add support for the new parameters in EFS replication APIs * api-change:`glue`: [`botocore`] AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: [`botocore`] Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: [`botocore`] Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: [`botocore`] Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: [`botocore`] Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.35.64 * api-change:`appconfig`: [`botocore`] AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: [`botocore`] Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: [`botocore`] This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: [`botocore`] Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: [`botocore`] This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: [`botocore`] Adding request and response elements for managed resources. * api-change:`ecs`: [`botocore`] This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: [`botocore`] The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: [`botocore`] This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: [`botocore`] Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: [`botocore`] Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.35.63 * api-change:`cloudwatch`: [`botocore`] Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: [`botocore`] Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: [`botocore`] Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: [`botocore`] Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: [`botocore`] This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: [`botocore`] You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: [`botocore`] Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: [`botocore`] Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.35.62 * api-change:`partnercentral-selling`: [`botocore`] Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co- selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.35.61 * api-change:`accessanalyzer`: [`botocore`] Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: [`botocore`] Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: [`botocore`] Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: [`botocore`] This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: [`botocore`] New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: [`botocore`] IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: [`botocore`] New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: [`botocore`] Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co- selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: [`botocore`] This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: [`botocore`] Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: [`botocore`] This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: [`botocore`] Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: [`botocore`] This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update BuildRequires and Requires from setup.py * Update to 1.35.60 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.35.59 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * from version 1.35.58 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.57 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.56 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.55 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * enhancement:protocol: Added support for header enabling service migration off the AWS Query protocol. * from version 1.35.54 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.53 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.52 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.51 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.50 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.49 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.48 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`nimble`: The nimble client has been removed following the deprecation of the service. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields * Update BuildRequires and Requires from setup.py Changes in python-botocore: * Update to 1.43.36 * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * from version 1.43.35 * api-change:`application-signals`: Application Signals now supports dynamic instrumentation and Service Events telemetry. Add instrumentation at runtime without restarts, and use fine-grained profiling data to quickly pinpoint latency and error root causes. * api-change:`bedrock-agentcore`: Adds an optional extractionMode field to CreateEvent. SKIP retains the event in short-term memory but excludes it from long-term memory extraction. * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`ec2`: This release adds support for AMI Watermark and Allowed AMIs integration * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added AI-powered investigations that automatically analyze security findings, correlate related activity, and produce structured summaries with risk assessment, confidence scoring, MITRE technique classification, and actionable next steps. * api-change:`kafka`: Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers. * api-change:`lambda`: Add support for tagging Network Connector resources in AWS Lambda. * api-change:`lambda-core`: Initial release of the AWS Lambda Core SDK with APIs to create, manage, and tag network connectors that enable Lambda compute resources to access private resources in your Amazon VPC. * api-change:`lambda-microvms`: Lambda MicroVMs GA launch. Lambda MicroVMs enable isolated and highly responsive execution of user-supplied or LLM- generated code. * api-change:`logs`: CloudWatch Logs Updates - New APIs introduced to support syslog ingestion to a log group. For more information, see CloudWatch Logs API documentation. * api-change:`mediaconnect`: AWS MediaConnect now supports Content Quality Analysis for Router Inputs, enabling detection of black frames, frozen frames, and silent audio with configurable thresholds. * api-change:`omics`: Adds support for scratch ephemeral storage mounted at tmp * api-change:`quicksight`: Updated the Amazon Quick Spaces API to remove unsupported SPACE and ARTIFACT values from the SpaceQuickSightResourceType enum. * from version 1.43.34 * api-change:`appstream`: Amazon WorkSpaces Agent Access now supports domain- joined fleets for enterprise identity integration, real-time agent observation with instant stop controls, and MCP tool forwarding for lower- latency, cost-effective desktop tool access. * api-change:`bedrock-agent`: Add support for metadata-only retrieval on GetFlow, GetFlowVersion, and GetPrompt APIs. * api-change:`connect`: This is the release for point based scoring system and the evaluation form validation project * api-change:`glue`: Adds the SearchAssets operation for discovering assets in the AWS Glue Data Catalog using full-text search and filters. Minor naming refinements across the Glossary Terms and Attachment APIs for consistency. * api-change:`opensearch`: This release introduces data source attachment APIs, enabling users to attach and detach Amazon OpenSearch Service domains and Amazon OpenSearch Serverless collections to an OpenSearch application. * from version 1.43.33 * api-change:`application-autoscaling`: Adds support for ECS high-resolution predefined scaling metrics (ECSServiceAverageCPUUtilizationHighResolution, ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second metric periods for faster scaling * api-change:`batch`: Adds Support for ordered allocation strategies- BEST- FIT-PROGRESSIVE-ORDERED or SPOT-CAPACITY-OPTIMIZED-PRIORITIZED * api-change:`cognito-idp`: In order to support the new TLS Self-Service feature, this change adds SecurityPolicyType to CustomDomainConfigType. During CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a custom domain's TLS enforcement, and for DescribeUserPoolDomain it informs users about the current TLS. * api-change:`compute-optimizer`: This release surfaces two new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS volume rightsizing recommendations. * api-change:`ec2`: Documentation updates clarifying CancelCapacityReservation cancellable states * api-change:`ecs`: Amazon ECS services now support high resolution (20 second) CloudWatch metrics for CPUUtilization and MemoryUtilization. Use these metrics for faster service auto scaling. * api-change:`eks`: Adds support for configurable control plane egress routing in Amazon EKS, allowing you to route control plane egress traffic through your VPC and control how the control plane reaches resources in your network such as webhook servers and OIDC providers. * api-change:`gamelift`: Amazon GameLift Servers has launched support for customizing Linux capabilities in container fleets. You can now specify additional Linux capabilities for containers in a container group definition, giving you finer control over the default Docker capabilities available to your containers. * api-change:`healthlake`: Adding New Configurations to the FHIR Create Datastore. The new configurations include NLP Configuration, AnalyticsConfiguration, ProfileConfiguration * api-change:`lambda`: Converging and fixing existing documentation gaps in Lambda SDK * api-change:`logs`: Added optional startFromHead parameter to FilterLogEvents enabling descending timestamp order (newest first) when set to false. Default true preserves existing ascending order. Reverse sorting requires a startTime on or after Jan 1, 2024. * api-change:`sagemaker`: Adds support for automatic AMI patching on HyperPod clusters. Customers can configure patching strategies to automatically apply security patch with zero job termination. Customers can also specify an AMI version at instance group level and update cluster software to a certain AMI version. * api-change:`synthetics`: CloudWatch Synthetics adds support for multi- location canaries. Customers can now monitor their endpoints from multiple locations with centralized management from a primary location. The SDK includes new parameters for configuring multiple locations and tracking their state. * from version 1.43.32 * api-change:`bedrock-agent`: Launching Bedrock Managed Knowledge Bases. Added support for resource-based policies on Knowledge Base resources, enabling cross-account access for Managed Knowledge Bases. * api-change:`bedrock-agentcore`: AgentCore Harness service will be Generally Available at NYS 2026 with this Treb release. Harness will support invoking specific endpoints via the qualifier parameter, AWS Skills for pre-built agent capabilities, and improved validation for skill git source URLs. * api-change:`bedrock-agentcore-control`: AgentCore Gateway now supports inference targets to LLM providers (direct config or built-in connectors), HTTP passthrough targets with session stickiness, runtime target API schemas, AWS WAF web ACL association with configurable fail-open or fail- close modes, and interceptor payload filtering. * api-change:`bedrock-agent-runtime`: Adds new AgenticRetrieveStream API for managed knowledge bases to use conversation history and autonomously plan for multi-hop multi-KB reasoning with built-in evaluation and access- control. Updates Retrieve API for access-control-based filtering for managed knowledge bases. * api-change:`compute-optimizer-automation`: This launch adds IfExists comparison operators to Compute Optimizer Automation rule criteria, so a rule can include recommended actions whose specified attribute isn't present. * api-change:`devops-agent`: Adds support for Remote A2A (Agent-to-Agent) agent registration and management. Adds new Release Readiness Review and Release Testing capabilities. Adds support for Git managed skills in AWS DevOps Agent. * api-change:`ecs`: Releasing the ability to bring-your-own task-definition for CreateExpressGatewayService and UpdateGatewayExpressService * api-change:`glue`: This release adds support for Search and Discovery in AWS Glue, letting you and your applications search Data Catalog assets such as table and enrich them with business context and glossary terms. * api-change:`mq`: This release adds private networking support for Amazon MQ for RabbitMQ. You can now associate AWS RAM resource shares with your broker and retrieve shared resource details using the new DescribeSharedResources API. * api-change:`opensearch`: Adds support for configuring IAM Identity Center options on existing OpenSearch applications via the UpdateApplication API. * api-change:`partnercentral-selling`: Cosell Resonate AND Prospecing API Launch with ARN correction * api-change:`securityagent`: Updated AWS Security Agent SDK model with new APIs for threat modeling, code review, security requirements, and additional integration providers. * from version 1.43.31 * api-change:`directconnect`: Added VIF rate limiting support for AWS Direct Connect, allowing customers to set bandwidth allocations on virtual interfaces to manage traffic on dedicated connections. * api-change:`outposts`: Adds support for creating an order from quotes. * api-change:`partnercentral-selling`: Added Prospecting APIs to convert engagements into AI-enriched leads with scoring insights. Extended Engagement APIs with ProspectingResult and Lead contexts. Added CoSell Scoring to GetAwsOpportunitySummary- quality score, trend, agent-driven recommendations, and engagement classification. * api-change:`route53resolver`: Adds supports for PartnerManagedRules * api-change:`s3`: Added support for annotations. You can now attach up to 1000 annotations (up to 1 MB each) directly to objects and create, retrieve, list, and delete them using new annotation APIs. Also added support for configuring an annotation table in S3 Metadata. * api-change:`s3vectors`: Amazon S3 Vectors now supports paginated QueryVectors requests, returning up to 10,000 results per query. * api-change:`sagemaker`: Add EnableDetailedObservability to Endpoint MetricsConfig. Publishes GPU, host, and framework-native inference metrics to CloudWatch with per-inference-component, availability-zone, and instance dimensions. Adds Inference Component provisioning lifecycle and multi-AZ placement metrics. * from version 1.43.30 * api-change:`bedrock-runtime`: InvokeGuardrailChecks API evaluates prompts and responses against safety checks (content filters, prompt attacks, sensitive info) without creating guardrail resources. It's a detect-only API, returning numeric scores so you can build adaptive logic as per your application. * api-change:`datazone`: Adds support for deleting lineage events in Amazon DataZone. * api-change:`logs`: Added endTimeOffset parameter to Scheduled Queries APIs (Create, Update, Get) enabling bounded time window configuration. Introduced scheduleType filter (CUSTOMER MANAGED, AWS MANAGED) for ListScheduledQueries and exposed it in Get and Update responses. * api-change:`mgn`: AWS Transform for VMware now supports Amazon FSx for NetApp ONTAP as a target storage. Customers can migrate source server disks directly to FSx for NetApp ONTAP iSCSI LUNs. Target storage is configurable per source server, and compute, network, and storage migrate together in coordinated waves. * api-change:`rds`: Adding support for RDS SQL Server BYOM and DB2 Community Edition * api-change:`wafv2`: AWS WAF now supports AI traffic monetization for CloudFront. Configure payment networks and pricing on your web ACL, use the new Monetize rule action to charge AI agents via x402, and monitor revenue with new GetRevenueStatisticsSummary, GetRevenueStatistics, and ListSettlementRecords APIs. * api-change:`workspaces`: Added a validation for null check for ImageIds in DescribeWorkspaceImages API request parameters. * from version 1.43.29 * api-change:`acm`: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. * api-change:`bedrock-agentcore`: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`bedrock-agentcore-control`: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior * api-change:`devops-agent`: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. * api-change:`eks`: Patches missing enum values for EKS updates * api-change:`firehose`: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. * api-change:`glue`: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. * api-change:`iam`: Updating documentation for select service-specific credential APIs * api-change:`sagemaker-runtime`: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. * from version 1.43.28 * api-change:`bedrock-agentcore`: Adds support to perform cross account data plane actions on an AgentCore Memory resource * api-change:`bedrock-agentcore-control`: Supports deterministic metadata for AgentCore Memory * api-change:`eks`: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. * api-change:`healthlake`: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. * api-change:`neptune`: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations * api-change:`omics`: Adds support for workflowName in the ListRuns API response. * api-change:`support`: Adding new BDD representation of endpoint ruleset * from version 1.43.27 * api-change:`amp`: Adds supports for out-of-order sample ingestion (default 1-minute window) and a configurable rule query offset to reduce data loss and improve alerting accuracy. * api-change:`connecthealth`: Add support for MedicalScribeBinaryAudioEvent in the Medical Scribe streaming input. This new event type lets you send audio as a raw binary payload instead of a base64-encoded value * api-change:`ec2`: This release adds support for AMI Watermark which a structured identifier that helps in tracking AMI provenance * api-change:`ecs`: Amazon ECS Managed Daemon task definitions now support pidMode and ipcMode parameters. Set shared to allow daemons to share PID or IPC namespaces with co-located tasks on Managed Instances, enabling process tracing and shared memory communication. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lightsail`: This release adds support for Asia Pacific (Hong Kong) (ap-east-1), Europe (Spain) (eu-south-2) and South America (Sao Paulo) (sa-east-1) Regions. * api-change:`medialive`: Adding premixer settings to pid and track audio inputs in MediaLIve to allow greater control over mixing audio from multiple source streams including support for AudioPidSelectors made up of multiple audio PIDs. * api-change:`sagemaker`: Add support for G6e instances (ml.g6e.xlarge through ml.g6e.48xlarge) on Amazon SageMaker Notebook Instances. * api-change:`signin`: AWS Sign-In now allows customers to control access to the AWS Management Console using resource-based policies. With this release customers can restrict console access based on network perimeters such as VPC IDs, VPC endpoints, and IP addresses. * from version 1.43.26 * api-change:`bedrock`: Adds support for the Amazon Bedrock account-level data retention APIs PutAccountDataRetention and GetAccountDataRetention. * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntimeCommand and GetAgentCard to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`cloudwatch`: This release adds the APIs (AssociateDatasetKmsKey, DisassociateDatasetKmsKey, GetDataset) to manage encryption at rest for OpenTelemetry metrics in CloudWatch using AWS KMS customer managed keys. * api-change:`ec2`: Added TagFieldSpecifications to CreateFlowLogs and DescribeFlowLogs APIs. Customers can now specify tag keys in their Flow Logs subscriptions to capture associated EC2 resource tag values in their logs, enabling tag-based visibility. * api-change:`odb`: Releases Autonomous Database Serverless APIs, autonomousDatabaseOciIntegrationIamRoles, linkedOciTenancyId, linkedOciCompartmentId, and subscriptionErrors fields in GetOciOnboardingStatus API response. * api-change:`outposts`: Added AWS Outposts APIs for self-service Outposts quoting and ordering. New operations include CreateQuote, GetQuote, UpdateQuote, DeleteQuote, ListQuotes, and ListOrderableInstanceTypes. * from version 1.43.25 * api-change:`compute-optimizer`: Adds new Idle Recommendation Resource types in the AWS Compute Optimizer API * api-change:`cost-optimization-hub`: Adds new Idle Recommendation types in the Cost Optimization Hub API * api-change:`deadline`: Added optional identityCenterRegion parameter to AssociateMember APIs to allow managing memberships for users and groups in other regions. * api-change:`devops-agent`: Add Asset APIs for managing versioned assets and asset files in AWS DevOps Agent agent spaces. * api-change:`mediapackagev2`: Adds support for DASH Audio Timeline Patternization. This enables your DASH manifests to templatize the repeating patterns that emerge in audio segment timelines. This compacts the total timeline length, utilizing the repeat notation, such that manifests don't grow indefinitely long. * api-change:`mgn`: AWS Transform discovery tool now supported as network migration input source. You can now use the AWS Transform Discovery tool as a source for network migration alongside modelizeIT, enabling hybrid network migrations for environments running both VMware and non-VMware workloads. * api-change:`observabilityadmin`: CloudWatch Observability Admin extends CentralizationRuleForOrganization APIs to support metrics, enabling centralization of metrics across accounts and Regions alongside logs. * api-change:`omics`: StartRunBatch API - Add EngineSettings * api-change:`taxsettings`: Adds support for additional tax information fields for Philippines, Belgium, Chile, France, Poland, and Italy in the Tax Settings API. * from version 1.43.24 * api-change:`emr-serverless`: Adds support for updating max capacity and custom fields while application is started * api-change:`mediaconvert`: Adds support for configurable number of Clear Lead segments at the beginning of encrypted output. Adds support for multiple trickplay variants. * api-change:`payment-cryptography`: Adds CloudFormation support for resource- based policies on AWS Payment Cryptography keys. * api-change:`quicksight`: Adds support for Knowledge Base APIs and Index Capacity API * api-change:`sagemaker`: This release adds support for MLflow experiment tracking in SageMaker inference optimization. CreateAIRecommendationJob and CreateAIBenchmarkJob now accept an optional OutputConfig.MlflowConfig (MLflow App ARN, experiment, run name) to stream benchmark metrics and artifacts to your own MLflow App. * from version 1.43.23 * api-change:`appflow`: Adding new BDD representation of endpoint ruleset * api-change:`appintegrations`: Adding new BDD representation of endpoint ruleset * api-change:`auditmanager`: Adding new BDD representation of endpoint ruleset * api-change:`chime-sdk-voice`: Adding new BDD representation of endpoint ruleset * api-change:`cloudformation`: Adding new BDD representation of endpoint ruleset * api-change:`config`: AWS Config now supports internal service-linked rules, allowing AWS service partners to deploy Config rules for customers and use the evaluation results to build enhanced features. * api-change:`connectparticipant`: Adding new BDD representation of endpoint ruleset * api-change:`efs`: Adding new BDD representation of endpoint ruleset * api-change:`emr`: Added support for Spark Connect interactive sessions on Amazon EMR on EC2 with new APIs - StartSession, GetSession, GetSessionEndpoint, ListSessions, and TerminateSession. Added sessionEnabled field in RunJobFlow and DescribeCluster to enable Spark Connect endpoints on EMR clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue Interactive Sessions now supports Apache Spark Connect, enabling remote Spark execution over gRPC with minimal client-side dependencies. Adds GetSessionEndpoint and GetDashboardUrl APIs. Modifies CreateSession now accepts SPARK CONNECT session type. * api-change:`guardduty`: Remove unsupported RDS field for filter * api-change:`ivs`: adds UpdateAdConfiguration operation to AWS IVS low- latency APIs * api-change:`kendra`: Adding new BDD representation of endpoint ruleset * api-change:`sagemaker`: Adds the IncludedData parameter to DescribeModelCard and DescribeModelPackage. Set it to MetadataOnly to retrieve a model card without decrypt permission on the customer managed AWS KMS key (default AllData returns full content). Adds support for the MTRL Job resource in SageMaker Search. * api-change:`sns`: Adding new BDD representation of endpoint ruleset * api-change:`wickr`: AWS Wickr now allows network administrators to configure a maximum session duration for non-SSO users in security groups, and display customizable consent popups to users at login for terms of use or compliance acknowledgements. * api-change:`workdocs`: Adding new BDD representation of endpoint ruleset * api-change:`workspaces`: Adding new BDD representation of endpoint ruleset * from version 1.43.22 * api-change:`arc-region-switch`: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. * api-change:`ce`: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration * api-change:`compute-optimizer`: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. * api-change:`connect`: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them * api-change:`inspector2`: Inspector support for enhanced scanning * api-change:`socialmessaging`: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs * from version 1.43.21 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Add "standardRegionalEndpoints" back to fix 'Could not connect to the endpoint URL' * from version 1.43.20 * api-change:`ec2`: Amazon EC2 now supports self-service cancellation of future-dated Capacity Reservations. A cancellation charge applies based on remaining commitment. Customers can generate a cancellation quote to review charges before confirming. * api-change:`elasticache`: Amazon ElastiCache for Valkey now supports durability. This new capability is enabled through a Multi-AZ transactional log, enabling fast recovery and restart during failures. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-routes`: Added Transit and Intermodal travel modes to CalculateRoutes. Plan routes using public transit (bus, subway, train, ferry) or combine transit with driving, taxi, and rental car segments in a single multi-modal route. * api-change:`guardduty`: Amazon GuardDuty Runtime Monitoring now supports 3 new SensitiveFileModified finding types (Persistence, PrivilegeEscalation, DefenseEvasion) that detect when security-sensitive system files are modified on EC2 instances or containers, indicating potential compromise through file tampering. * api-change:`iot`: Fleet indexing documentation update * api-change:`keyspacesstreams`: Added iterator description to the GetRecords API response for Amazon Keyspaces Change Data Capture (CDC) streams, enabling consumers to track their current position within the stream. * api-change:`lambda`: Adds configuration for tag propagation to Lambda- managed resources. * api-change:`sagemaker`: Amazon SageMaker Job is a new service to help you manage various workloads related to model fine tuning, evaluation etc. Two job categories are supported today, AgentRFT for multi-turn agentic reinforcement fine tuning, and AgentRFTEvaluation for evaluating base model or trained model from AgentRFT. * api-change:`sagemakerjobruntime`: Amazon SageMaker Job Runtime is a new service for managing trajectory data during multi-turn customization jobs. It provides APIs to send inference requests to models during job execution, mark rollouts as complete, and submit reward values for training trajectories. * api-change:`transcribe`: Release new Language locales including am-ET, es- MX, fa-AF, ht-HT, jv-ID, km-KH, my-MM, sq-AL, ne-NP. The commit shows past locales that have already been release which include cy-gb, ga-ie, gd-gb. * from version 1.43.19 * api-change:`cognito-idp`: Add support for multi-region replication, enabling synchronization of user data and configurations to a secondary user pool in a standby Region. Add support for customer managed keys (CMK) in AWS KMS for encrypting user pool data at rest. * api-change:`marketplace-agreement`: Adding Entitlements in SearchAgreements Response * api-change:`quicksight`: This release adds public APIs for Amazon QuickSight Spaces, Agents, and Flows. Spaces APIs enable management of curated resource collections. Agents APIs provide lifecycle control over AI-powered agents that leverage Spaces. Flows APIs add CRUDL APIs for automated workflows. * from version 1.43.18 * api-change:`bedrock`: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. * api-change:`bedrock-agentcore-control`: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service- managed secrets. * api-change:`groundstation`: Adds support for Alpha-5 satellite number encoding in the Two-Line Element ephemeris format. * api-change:`omics`: Add engineSettings to StartRun and GetRun. Add profiles and profileParameterTemplates to GetWorkflow and GetWorkflowVersion. * api-change:`quicksight`: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. * api-change:`rds-data`: RDS Data API arrays (longValues, doubleValues, stringValues, booleanValues) in ExecuteStatement responses now correctly support null elements. Runtime change for JS v3 and .NET. Compile-time change for C plus plus, .NET, Kotlin, Rust. No impact for Java, Python, Ruby, PHP, Go. * api-change:`route53resolver`: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. * api-change:`sesv2`: This release introduces support for Tenant Suppression Lists * from version 1.43.17 * api-change:`appstream`: Amazon WorkSpaces Applications now supports BYOL (Bring Your Own License). This enables customers to import their own WorkSpaces images and use them in WorkSpaces Applications. * api-change:`bedrock`: Add support for ModelPackageArn in Bedrock's CreateCustomModel API * api-change:`bedrock-agentcore`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId and runtimeClientError to InvokeHarness. * api-change:`bedrock-agentcore-control`: Added Harness support for LiteLLM model configuration for third-party model providers. Added S3 and Git skill source types. Added Responses API format for OpenAI and Bedrock models. Added runtimeUserId parameter to InvokeHarness for end-user identification. * api-change:`bedrock-runtime`: Support system role in message * api-change:`controlcatalog`: AWS Control Catalog - Added GovernedProviders response field and inclusion filter to GetControl and ListControls APIs to identify and filter by cloud provider. Added ParameterRequirementSummary response field indicating parameter requirements. * api-change:`customer-profiles`: BatchPutProfileObject API adds multiple profile objects to a domain of a given ObjectType in a single API call. * api-change:`deadline`: Added support for persistent storage on Service- Managed Fleets, allowing customers to configure persistent storage that preserves data across worker sessions which reduces job startup times for workloads with large software installations or asset caches. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: Adds new connectivity-related fields to Fleet Indexing API requests and responses. * api-change:`iot-data`: Adding GetConnection, ListSubscriptions, and SendDirectMessage APIs to IoT Data Plane * api-change:`opensearchserverless`: Adds support for deletion protection on collections, ability to create NEXTGEN collection groups and autoscaling visibility for NEXTGEN collection groups * api-change:`pcs`: This release adds support for configuring scaleDownIdleTimeInSeconds at the compute node group level, allowing customers to set different idle timeouts per node group. Previously this setting was only available at the cluster level. * api-change:`resiliencehubv2`: This is the initial SDK release for the next generation of Resilience Hub. * api-change:`s3control`: Update the minimum value of MinStorageBytesPercentage in StorageLensPrefixLevel.SelectionCriteria from 0.1 to 1, aligning the model with the documented contract. * from version 1.43.16 * api-change:`bedrock-data-automation`: Matcher Fallback extends the CustomOutputConfiguration for the Document modality in DataAutomationProjects, enabling a fallback blueprint when no match is found. A FALLBACK match status is returned, improving the matching experience and guaranteeing customers always receive CustomOutputResults. * api-change:`ecs`: Add support for Neuron device resource requirements for Amazon ECS * api-change:`elementalinference`: Added support for smart subtitles in Elemental Inference, enabling automatic generation of subtitles for media content. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`medialive`: AWS Elemental MediaLive now supports Smart Subtitles, a new caption source that uses AWS Elemental Inference to automatically generate WebVTT and TTML captions from source audio. Available in English, Spanish, French, German, Italian, and Portuguese. * api-change:`opensearch`: OpenSearch will now support multi-segment paths in JWKS URLs. * api-change:`organizations`: AWS Organizations now emits CloudTrail events (AccountJoinedOrganization, AccountDepartedOrganization) to the management account for membership changes, including join and departure method and timestamp. * api-change:`sagemaker`: Adds shared environment support for Restricted Instance Groups (RIGs) on SageMaker HyperPod, enabling cross-RIG workload scheduling and FSx sharing. This unlocks shared CPU-GPU environments needed for cost-efficient RL training (e.g., Nova Forge). Adds p6 instance support for recommendation jobs * Update to 1.43.15 * api-change:`backup`: Launching S3 PITR malware scanning support for AWS Backup * api-change:`batch`: Increase the maximum value of jobExecutionTimeoutMinutes to support longer job timeouts during compute environment infrastructure updates. * api-change:`budgets`: AWS Budget Name Validation Documentation Updates. * api-change:`datazone`: Added resourceConfigurations and allowUserProvidedConfigurations fields to environment blueprint configuration APIs, enabling customers who migrated from V1 to V2 domains to update resource configurations (such as lineage schedules) programmatically via the SDK. * api-change:`guardduty`: Add malware scan support for Continuous Backups, also known as Point-In-Time Recovery Points (PITR). * api-change:`resourcegroupstaggingapi`: The GetResources API now returns MissingTagKeys in ComplianceDetails, listing tag keys defined as required in the ReportRequiredTagBlock block of the effective tag policy that are absent from the resource. * from version 1.43.14 * api-change:`datazone`: Add support for VPC connection * api-change:`ec2`: The ModifyInstanceAttribute API now supports modification of EnclaveOptions for the instance as a typed parameter. * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6e instance family. These classes are designed for streaming high-fidelity, graphically demanding games and applications that benefit from additional GPU memory and performance. * api-change:`invoicing`: Adds support for idempotency with a new ClientToken field for the CreateInvoiceUnit, DeleteInvoiceUnit, UpdateInvoiceUnit, DeleteProcurementPortalPreference, PutProcurementPortalPreference, and UpdateProcurementPortalPreferenceStatus APIs. * api-change:`pi`: Added ListPerformanceAnalysisReportRecommendations API to retrieve recommendations for a performance analysis report. Added analysis configuration support to CreatePerformanceAnalysisReport for enhanced analysis types such as vacuum analysis. * api-change:`qconnect`: Added guardrail assessment results to inference spans in the ListSpans API. You can now see which AI Guardrail policies were evaluated, whether content was blocked or masked, and per-policy details for each Bedrock Converse call * api-change:`securityagent`: Adds support for verification scripts on penetration test findings. Customers can now download executable scripts to independently reproduce confirmed vulnerabilities, with instructions and required environment variables provided for each finding. * enhancement:`s3`: Improve caching of S3 endpoints, which should improve performance when working with multiple keys in the same bucket * from version 1.43.13 * api-change:`batch`: Clarified CreateComputeEnvironment parameter requirements - serviceRole is required for UNMANAGED compute environments, allocationStrategy is required for EKS compute environments, and compute environments must be created in the ENABLED state. * api-change:`bedrock-agentcore-control`: Adds dataset management APIs for creating, versioning, and managing evaluation datasets. * api-change:`cleanrooms`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`cleanroomsml`: Collaboration creators can update payment configurations without recreating the collaboration. When multiple payer candidates are configured for a cost type, analysis runners can specify the actual payer at submission time, providing granular control over billing. * api-change:`evs`: A new GetDepotUrl API has been added to retrieve a URL for accessing Amazon EVS custom addon packages. Customers can use this URL to configure vSphere Lifecycle Manager (vLCM) as an online depot source, enabling upgrades of addon components across ESXi hosts. * api-change:`mediaconnect`: Adds support for controlling the timecode source of NDI flow outputs. * api-change:`sagemaker`: Add support for disabling home EFS file system creation on SageMaker domains. * api-change:`verifiedpermissions`: Support hard deleting policy store aliases. Users can now delete an alias and immediately reassign it to a different policy store without waiting for the soft-delete retention period. * from version 1.43.12 * api-change:`bedrock-runtime`: Supporting Request Metadata for Invoke Model and Invoke Model with Response Stream * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds support for item catalog columns in RecommenderSchema, ExcludedColumns in Create and Update Recommender to specify columns to exclude from training, and the ability to disable automatic retraining by setting TrainingFrequency to 0. * api-change:`kms`: AWS KMS now supports creating grants for AWS service principals using new GranteeServicePrincipal and RetiringServicePrincipal parameters. This release adds SourceArn grant constraint and three condition keys for controlling CreateGrant access. For more information, see Grants in AWS KMS. * api-change:`mwaa`: Updated API documentation to describe the PublicAndPrivate webserver access mode. * api-change:`payment-cryptography-data`: GenerateAuthRequestCryptogram API launch. * Update to 1.43.11 * api-change:`bedrock-agentcore`: Add RetryableConflictException (HTTP 409) to InvokeAgentRuntime and StopRuntimeSession to prevent orphaned VMs during concurrent session access. The SDK automatically retries this exception with backoff. Enforcement is not yet active and will be enabled in a future service update. * api-change:`devops-agent`: Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs * api-change:`grafana`: Introduce degraded workspace status as a possible Amazon Managed Grafana workspace status, and a new field named degraded workspace reason which informs customers why the workspace is degraded in the DescribeWorkspace API response. * api-change:`guardduty`: Adding support for exposure and vulnerability context from AWS Security Hub in GuardDuty Extended Threat Detection attack sequence findings. * api-change:`rtbfabric`: This release is to deprecate 'inboundLinksCount' field in GetResponderGateway response and introduce the new field 'linksRequestedCount' to replace it. * api-change:`sagemaker`: Add support for ml.p5.4xlarge and ml.p5en.48xlarge instances on SageMaker Notebook Instances Platform. From 1.43.10 * api-change:`accessanalyzer`: Services manage service-linked analyzers through dedicated APIs - CreateServiceLinkedAnalyzer and DeleteServiceLinkedAnalyzer that separate service-linked specific operations from customer-managed operations. It also shows up in ListAnalyzers and GetAnalyzer responses. * api-change:`connect`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports tags on IPAM pool allocations, enabling all standard tagging features for allocations including tag-on-create. * api-change:`ecs`: Amazon ECS now supports Pause lifecycle hooks for service deployments, allowing customers to automatically pause deployments at specified stages and use the new ContinueServiceDeployment API to continue or roll back with confidence. * api-change:`evs`: Amazon EVS now supports up to 32 hosts per EVS environment, increasing the previous host limit to allow a larger scale of VMware workload deployments and reduce operational overhead. * api-change:`ivs`: Adds support for up to 3 mediaTailorPlaybackConfiguration objects in an ad configuration resource * api-change:`quicksight`: Support for dataset enrichment and geo spatial in new data preparation experience From 1.43.9 * api-change:`logs`: Updating the max limit for start query api parameter. * api-change:`mediapackagev2`: This release adds support for AvailabilityStartTimeConfiguration in MediaPackageV2 DASH manifests * api-change:`partnercentral-selling`: Enable TCV intake on Opportunity to improve Opportunities Hygiene and downstream revenue attribution. From 1.43.8 * api-change:`bedrock`: Advanced Prompt Optimization (AdvPO) allows you to optimize and migrate your prompts for any model on Bedrock by automatically evaluating responses and rewriting prompts to improve performance. This release provides a programmatic way to create, get, list, stop, and delete AdvPO jobs. * api-change:`cloudfront`: Adding a new boolean for OCSP Revocations in Viewer mTLS Create and Update APIs, and adding a new 'Passthrough' option for TrustStore modes * api-change:`datazone`: Adds support for SageMaker Unified Studio notebook operations, including notebook import and export * api-change:`dms`: Add 9 SDK waiters for DMS Schema Conversion async operations. Eliminates manual polling for import, assessment, conversion, export, and creation jobs. * api-change:`glue`: Release --has-databases parameter for AWS Glue get- catalogs API, which filters catalog responses to include only those capable of containing databases, excluding parent catalogs that hold only other catalogs. Remove model-level validation on partition index list size for AWS Glue tables. * api-change:`grafana`: Adds support for dual-stack (IPv4 and IPv6) connectivity to Amazon Managed Grafana workspaces. Customers can configure the ipAddressType parameter when creating or updating a workspace to choose between IPv4-only or dual-stack (IPv4 and IPv6) access. * api-change:`mgn`: Introducing new option for security groups mapping * with MAP-DHCP the service translates security rules from your source environment with DHCP compatibility. * api-change:`qconnect`: ListModels is an API that returns the available AI models for a Connect Assistant based on its region and AI prompt type. From 1.43.7 * api-change:`arc-region-switch`: Adds support for enabling and disabling Lambda event source mappings in Region switch plans. * api-change:`batch`: Adds a billing callout to docs regarding using the CE Scale Down Delay feature * api-change:`bedrock-agentcore-control`: Adds support for read-only summary APIs for Policy Engine, Policy, and Policy Generation resources, enabling metadata retrieval without KMS decryption for AWS Config integration. * api-change:`billingconductor`: Add ConflictException to UpdateCustomLineItem operation. * api-change:`connect`: This change added three new EventSourceName for schedule notification feature * api-change:`connectcampaignsv2`: This release added support for Outbound Campaign timezone detection using all available contact methods * api-change:`connectcases`: Amazon Connect Cases now supports SLA durations of up to 2 years (1,051,200 minutes), increased from the previous maximum of 90 days (129,600 minutes). This enables you to track long-running service level agreements for cases that require extended resolution timelines. * api-change:`dsql`: Added support for Amazon Aurora DSQL change data capture (CDC) streams that deliver row-level database changes to Amazon Kinesis in JSON format. Includes CreateStream, GetStream, ListStreams, and DeleteStream operations. * api-change:`ec2`: Include length limits in the SDK and documentation for text fields in Image (AMI) APIs such as the image name and description * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`glue`: AWS Glue now defaults the job timeout to 480 minutes for Glue version 5.0 and later when no timeout value is specified. The default remains 2,880 minutes for Glue version 4.0 and earlier. * api-change:`lightsail`: Added OriginIpAddressTypeEnum (ipv4, ipv6, dualstack) and ipAddressType field to Origin and InputOrigin structures for Lightsail CDN distributions. Allows customers to specify how the distribution connects to origins, using IPv4, IPv6, or dualstack networking * api-change:`opensearch`: Adds support for AutomatedSnapshotPauseOptions. * api-change:`partnercentral-account`: Added ServiceQuotaExceededExceptions for Profile operations * api-change:`pcs`: Add support for Amazon EC2 Interruptible-ODCR * api-change:`quicksight`: Adds five new custom permission option for Quick Apps so that these capabilities can be controlled by public SDK and CLI. * api-change:`redshift`: Added rg.xlarge and rg.4xlarge to valid NodeType values and updated documentation for CreateCluster, ModifyCluster, ResizeCluster, and RestoreFromClusterSnapshot APIs to reflect RG node type support. * api-change:`rtbfabric`: Customers can now configure custom domain names for their RTB Fabric gateways. This enables partners to use their own branded domain for RTB traffic instead of the default rtbfabric endpoint * api-change:`sagemaker`: Adds execution role session name mode to reflect user identity in Studio. Adds Flexible Training Plans on Studio apps. Adds restricted model packages to control access to proprietary model artifacts via IAM. Fixed instance type parity between inference endpoints and managed shadow tests. * api-change:`securityagent`: Add support for code reviews, a new resource type that enables automated security-focused static analysis of source code repositories. * api-change:`socialmessaging`: Adds parameters to call the GetWhatsAppMessageTemplate and UpdateWhatsAppMessageTemplate APIs with a template name and language code in place of the template ID. Linked WhatsApp accounts also describe whether the WABA is onboarded to Meta's Marketing Messages API. * api-change:`stepfunctions`: Updated default SDK endpoints for AWS Step Functions in AWS GovCloud (US) regions. The default Dual-Stack endpoints now resolve to "states-fips" prefixed hostnames. There are no changes to service behavior. No customer action is required. * Update _constraints to match current requirements * Update to 1.43.6 * api-change:`bcm-data-exports`: With this release, customers can configure their data exports to generate additional integration artifacts for Athena and Redshift. * api-change:`bedrock-agentcore`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`bedrock-agentcore-control`: Launching AgentCore payments - a capability that provides secure, instant microtransaction payments for AI agents to access paid APIs, MCP servers, and content. It handles payment processing for x402 protocol, payment limits, and 3P wallet integrations with Coinbase CDP and Stripe (Privy). * api-change:`ec2`: DescribeInstanceTypes now accepts an IncludeUnsupportedInRegion parameter. When set, the response also lists instance types that are not available in the current Region. Each instance type includes a SupportedInRegion field indicating its regional availability. * api-change:`guardduty`: This is a documentation update * api-change:`invoicing`: Updated ListInvoiceSummaries API to add new ReceiverRole filter in Request and Response * api-change:`route53resolver`: Adds supports for DNS64 on inbound endpoints and IPv6 forwarding through the internet gateway (IGW) on outbound endpoints, making it easier to manage hybrid DNS across IPv4 and IPv6 networks. * from version 1.43.5 * api-change:`bedrock-agentcore-control`: Adds support for bring-your-own file system in AgentCore Runtime. Developers can mount Amazon S3 Files and Amazon EFS access points directly into agent sessions using filesystemConfigurations. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Adds support for a CustomLogGroupPrefix parameter in StartDataQualityRulesetEvaluationRun to specify custom CloudWatch log group paths, and a RulesetName filter in ListDataQualityRulesetEvaluationRuns to filter evaluation runs by ruleset name. * api-change:`imagebuilder`: The ImportDiskImage API now enforces a maximum character limit of 128 characters on the image name field. * api-change:`lexv2-models`: Amazon Lex V2 introduces audio filler support for speech-to-speech bots. Configure melody or typing sounds that play during backend processing to reduce perceived latency and maintain a natural conversational experience for callers. * api-change:`mwaa`: Amazon MWAA now supports a PublicAndPrivate webserver access mode. The Airflow web server is accessible over both public and private endpoints, enabling workers in VPCs without internet access to reach the Task API privately while retaining public access to the Airflow UI. * api-change:`s3`: Validate outpost access point resource name * api-change:`sagemaker`: Amazon SageMaker HyperPod now returns ImageVersionStatus in DescribeCluster, DescribeClusterNode, and ListClusterNodes responses, indicating whether cluster instances are running the latest available image version. * api-change:`securityhub`: Release GenerateRecommendedPolicyV2 and GetRecommendedPolicyV2 APIs. This supports generating and retrieving policy recommendations to remediate unused permissions findings that are now being supported on Security Hub. * from version 1.43.4 * api-change:`cleanroomsml`: Increase max configurable output limits in the Clean Rooms ML configured model algorithm association resource. * api-change:`cloudfront`: Adds support for tagging CloudFront Functions and KeyValueStores resources. * api-change:`marketplace-agreement`: With this release, Agreements API provides a programmatic way to generate quotes, accept offers, track charges and entitlements, manage renewals and cancellations, and streamline operations entirely through APIs without navigating to the AWS Marketplace website or AWS Management Console. * api-change:`mediatailor`: Added support for Monetization Functions. Monetization Functions let you enrich ad requests with external data and transform session parameters using JSONata expressions, without deploying custom infrastructure. * api-change:`medical-imaging`: Add support for DICOM Json Metadata Override features in startDICOMImportJob API * api-change:`opensearch`: Amazon OpenSearch Service now supports VPC egress, enabling outbound traffic from your OpenSearch domain to route privately through your VPC instead of the public internet. * api-change:`route53domains`: This release adds the TLDInMaintenance exception. * api-change:`sagemaker`: Adds support for ml.p5.4xlarge instance type for SageMaker Studio JupyterLab and CodeEditor apps for IAD (us-east-1), NRT (ap-northeast-1), BOM (ap-south-1), CGK (ap-southeast-3), GRU (sa-east-1), PDX (us-west-2), CMH (us-east-2). * from version 1.43.3 * api-change:`bedrock-agentcore-control`: Amazon Bedrock AgentCore gateways now support MCP Sessions and response streaming from MCP targets. Session timeouts can be set between 15 minutes and 8 hours, and response streaming enables forwarding stream events sent by MCP targets to gateway users. * api-change:`ec2`: This feature allows customers to change the tunnel bandwidth on existing VPN connections using the ModifyVpnConnectionOptions API * api-change:`geo-routes`: Added support for TravelTimeExceedsDriverWorkHours, ViolatedBlockedRoad, and ViolatedVehicleRestriction notice codes to the CalculateRoutes API response. * api-change:`lex-models`: Lex V1 is deprecated, use Lex V2 instead * api-change:`logs`: Adding an additional optional deliverySourceConfiguration field to PutDeliverySource API. This enables customers to pass service- specific configurations through IngestionHub such as tracing enablement or sampling rates that will be propagated to the source resource. * api-change:`medialive`: Updates the type of the MediaLiveRouterOutputConnectionMap. * api-change:`securityagent`: AWS Security Agent is adding a new target domain verification method for private VPC penetration testing. Additionally, the target domain resource will now have a verification status reason field to surface additional details about domain verification * api-change:`vpc-lattice`: Amazon VPC Lattice now supports privately resolvable DNS resources * from version 1.43.2 * api-change:`appstream`: Amazon WorkSpaces Applications now enables AI agents to securely operate desktop applications. Administrators configure stacks to provide agents access to WorkSpaces. Agents can click, type, and take screenshots. Agents authenticate with AWS IAM credentials with activity logged in AWS CloudTrail. * api-change:`cloudwatch`: This release adds tag support for CloudWatch Dashboards. The PutDashboard API now accepts a Tags parameter, allowing you to tag dashboards at creation time. Additionally, the TagResource, UntagResource, and ListTagsForResource APIs now support dashboard ARNs as resources. * api-change:`entityresolution`: Add support for transitive matching in AWS Entity Resolution rule-based matching workflows. When enabled, records that match through different rules are grouped together into the same match group, allowing related records to be connected across rule levels. * api-change:`iam`: Added guidance for CreateOpenIDConnectProvider to include multiple thumbprints when OIDC discovery and JWKS endpoints use different hosts or certificates * api-change:`iot`: AWS IoT HTTP rule actions now support cross-topic batching, combining messages from different MQTT topics into single HTTP requests. * api-change:`logs`: Adds support for filtering log groups by tags in the ListLogGroups API via the new logGroupTags parameter. * api-change:`qconnect`: Added reasoning details, statusDescription, and timeToFirstTokenMs fields to the ListSpans response in Amazon Q in Connect to provide visibility into model thinking, error diagnostics, and inference latency metrics. * api-change:`quicksight`: Add IdentityProviderCACertificatesBundleS3Uri for private CA certs with OAuth datasources. 256-char limit for FontFamily in themes. ControlTitleFormatText on all 13 filters. ControlTitleFontConfiguration. ContextRegion for cross-region identity context. Story,scenario in CreateCustomCapability API. * from version 1.43.1 * api-change:`bedrock-agentcore`: AgentCore Identity now supports on-behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`bedrock-agentcore-control`: AgentCore Identity now supports on- behalf-of token exchange OAuth2. AgentCore Memory now supports metadata for LongTerm Memory Records. * api-change:`datazone`: Adds support for asynchronous notebook runs * api-change:`eks`: Vended logs update param for capability vended logs feature * api-change:`kafka`: Adds support for ZookeeperAccess field to control the Client-Zookeeper connectivity. * api-change:`observabilityadmin`: Observability Admin enablement launch for AWS Kafka, Bedrock Agent Core Workload Identity and OTel metric enablement. * api-change:`payment-cryptography`: Adds support for resource-based policies on AWS Payment Cryptography keys, enabling cross-account key sharing. Also adds Multi-Party Approval (MPA) team association APIs for protecting sensitive import root public key operations. * api-change:`route53globalresolver`: Adds support for regions in the UpdateGlobalResolver input. * api-change:`sagemaker`: Add InstancePools support to Endpoint for flexible provisioning across a prioritized list of instance types. Add Specifications support to InferenceComponent for per-instance-type model configurations. * api-change:`sso-admin`: Add InstanceArn and IdentityStoreArn in the response of CreateApplication API and IdentityStoreArn in the response of DescribeApplication API * from version 1.43.0 * api-change:`account`: Adds AccountState in the response for the GetAccountInformation API. Each state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. * api-change:`bedrock-agentcore`: Adds batch evaluation for running evaluators against multiple agent sessions with server-side orchestration, AI-powered recommendations for optimizing system prompts and tool descriptions, and AB testing with controlled traffic splitting and statistical significance reporting * api-change:`bedrock-agentcore-control`: Adds configuration bundles for versioned, immutable agent configuration snapshots with branch-based lineage * api-change:`cloudfront`: Amazon CloudFront now supports cache tag. Tag objects via response headers and invalidate all matching objects in a single request, replacing manual URL tracking and broad wildcards. * api-change:`deadline`: Adds support for rtx-pro-server-6000 GPU accelerator for service-managed fleets. * api-change:`ecr`: Removes support for registry policy V1 * api-change:`gamelift`: Amazon GameLift Servers adds a new DescribeContainerGroupPortMappings API for container fleets, making it easy to discover which connection ports map to your container ports without needing to remotely access the compute. * api-change:`mediapackagev2`: This feature adds configuration for specifying SCTE marker handling and allow greater control over generated manifest and segment URIs * api-change:`transfer`: This launch will increase the limits for customers to list the contents from the remote directories from 10k to 200k. * api-change:`workspaces-web`: Allow admins to configure IPv6 ranges on IP Access Settings. * enhancement:awscrt: Update awscrt version to 0.32.2 * feature:Python: End of support for Python 3.9 * from version 1.42.97 * api-change:`application-signals`: Application Signals now supports creating composite Service Level Objectives on Service Operations. Users can now create service SLO on multiple operations. * api-change:`billingconductor`: Add support for Passthrough pricing plan * api-change:`gameliftstreams`: Adds Proton 10.0-4 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: Addition of AdditionalAuditContext to GetPartition, GetPartitions, GetTableVersion, and GetTableVersions * api-change:`ivs`: Adds tags parameter to the CreateAdConfiguration operation * api-change:`kms`: KMS GetKeyLastUsage API provides information on the last successful cryptographic operation performed on KMS keys. This new API provides KMS customers with the last timestamp, CloudTrail eventId, and the cryptographic operation that was performed on the key. * api-change:`logs`: Adds support for selecting all logs sources and types in a single association. * api-change:`mgn`: Added network modernization support, enabling customers to edit, resize, merge, and split VPCs and subnets during migration while retaining functional, non-conflicting IP addresses. * api-change:`omics`: Enable Public Internet or VPC configuration to BatchRun * api-change:`opensearch`: Amazon OpenSearch Service now supports JWKS URL configuration for JWT authentication * api-change:`sagemaker`: Updated API documentation for endpoint MetricsConfig. Added details on supported metric publish frequencies and clarified how EnableEnhancedMetrics controls utilization and invocation metric behavior. * api-change:`workspaces`: Added support for Protocol as modified resource and added update failure as modification state * from version 1.42.96 * api-change:`bedrock-agentcore-control`: Added support for configuring identity providers and inbound authorizers within a private VPC for AWS Bedrock AgentCore, enabling secure network connection without public internet access * api-change:`connect`: Amazon Connect is expanding attachment capabilities to give customers greater flexibility and control. Currently limited to predefined file types, the new feature will allow contact center administrators to customize which file extensions and sizes are supported across chat, email, tasks, and cases. * api-change:`connecthealth`: Corrected CreateWebAppConfiguration documentation. Adding slash as an allowed character for the Ambient documentation agent to allow pronoun specifications. * api-change:`evs`: EVS now supports i7i.metal-24xl EC2 bare metal instance type, delivering high random IOPS performance with real-time latency, ideal for IO intensive and latency-sensitive workloads such as transactional databases, real-time analytics, and AI ML pre-processing. * api-change:`logs`: Adding nextToken and maxItems to the GetQueryResults API. * api-change:`transfer`: AWS Transfer Family now support configurable IP address types for Web Apps of type VPC, enabling customers to select IPv4-only or dual-stack (IPv4 and IPv6) configurations based on their network requirements. * from version 1.42.95 * api-change:`datazone`: Releasing For LakehouseProperties attributes in the Connections API's * api-change:`iot-managed-integrations`: Adds "Status" field to provisioning profile operation response types, giving users visibility into the readiness of a provisioning profile to be used for device provisioning. * api-change:`opensearch`: Amazon OpenSearch UI applications now support cross-Region domain association, enabling you to connect OpenSearch Dashboards in one AWS Region to OpenSearch domains in other Regions within the same partition for centralized data visualization. * api-change:`pcs`: This release adds support for Slurm 25.11 with expedited requeue enabled by default for jobs failing due to node issues, configurable requeue delay, health checks at node startup only, and unauthenticated HTTP endpoints disabled by default for improved security. * bugfix:`cloudwatch`: Alias `get_o_tel_enrichment`, `start_o_tel_enrichment`, and `stop_o_tel_enrichment` botocore methods to use `otel` instead of `o_tel`. * from version 1.42.94 * api-change:`batch`: Support of S3Files volume type, container start and stop timeouts. * api-change:`bedrock-agentcore`: Adds support for Amazon Bedrock AgentCore Harness data plane APIs, enabling customers to invoke managed agent loops and execute commands on live agent sessions with streaming responses. * api-change:`bedrock-agentcore-control`: Adds support for Amazon Bedrock AgentCore Harness control plane APIs, enabling customers to create, manage, and configure managed agent loops with customizable models, tools, memory, and isolated execution environments. * api-change:`ec2`: Managed resource visibility settings control whether resources that AWS services provision on your behalf within your AWS account appear in your Amazon console views and API list operations. * api-change:`ecs`: GPU health monitoring and auto-repair for ECS Managed Instances * api-change:`emr-serverless`: This release adds support for Spark connect sessions starting with release label emr-7.13.0. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iotwireless`: Enable customers to optionally specify a desired confidence level for Cellular and WiFi position estimates. Customers can use this to trade off confidence level and radius of uncertainty based on their needs. * api-change:`ivs`: Adds support for Amazon IVS server-side ad insertion * api-change:`lambda`: Add Ruby 4.0 (ruby4.0) support to AWS Lambda. * api-change:`opensearch`: Adds support for RollbackServiceSoftwareUpdate API * api-change:`osis`: Update the pipeline configuration body character limit for the CreatePipeline API call. * api-change:`s3`: This release adds five additional checksum algorithms for S3 data integrity (MD5, SHA-512, XXHash3, XXHash64, XXHash128) and support for S3 Inventory on directory buckets (S3 Express One Zone). * api-change:`s3control`: This release adds support for five additional checksum algorithms for data integrity checking in Amazon S3 - MD5, SHA-512, XXHash3, XXHash64, and XXHash128. * from version 1.42.93 * api-change:`cognito-idp`: Adding dutch language support for Cognito Managed Login and Terms on Console * api-change:`comprehendmedical`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`compute-optimizer-automation`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. * api-change:`gamelift`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`marketplace-entitlement`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * api-change:`network-firewall`: Support for new types of partner managed rulegroups for Network Firewall Service * api-change:`sagemaker`: SageMaker AI now supports generative AI inference recommendations. Provide your model and workload, and SageMaker AI optimizes configurations, benchmarks them on real GPUs, and returns deployment-ready recommendations with validated metrics, accelerating the path to production from weeks to hours. * api-change:`snowball`: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. * from version 1.42.92 * api-change:`application-signals`: Releasing Second phase of SLO Recommendations where you can create recommended SLOs out-of-the box using CreateSLO API * api-change:`bedrock-agentcore-control`: Supporting listingMode for AgentCore Gateway MCP server targets * api-change:`ec2`: Added Transit Gateway Integration into AWS Client VPN. * api-change:`evs`: Amazon EVS now allows you to create connectors to your vCenter appliances and create Windows Server entitlements for virtual machines running in your EVS environments * api-change:`guardduty`: Expanded support for new suppression rule fields. * api-change:`kafka`: Amazon MSK Replicator now supports data migration from external Apache Kafka clusters to Amazon MSK Express brokers. This release adds SaslScram authentication with TLS encryption, enhanced consumer offset synchronization, and customer log forwarding for troubleshooting. * api-change:`location`: This release adds support for new Job APIs for bulk workloads. The initial job type supported is Address Validation. The new APIs added are StartJob, CancelJob, ListJobs, and GetJob. * api-change:`observabilityadmin`: Enablement for Security Hub v2 via Observability Admin Telemetry Rule for account and organization level. * from version 1.42.91 * api-change:`cleanrooms`: This release adds support for configurable spark properties for Cleanrooms PySpark workloads. * api-change:`connect`: Fixes in SDK for customers using TestCase APIs * api-change:`connectcampaignsv2`: This release adds support for campaign entry limits configuration and hourly refresh frequency in Amazon Connect Outbound Campaigns. * api-change:`groundstation`: Adds support for updating contacts, listing antennas, and listing ground station reservations. New API operations - UpdateContact, ListContactVersions, DescribeContactVersion, ListAntennas, and ListGroundStationReservations. * api-change:`imagebuilder`: ImportDiskImage API adds registerImageOptions for Secure Boot control and custom UEFI data. It adds windowsConfiguration for selecting a specific edition from multi-image .wim files during ISO import. * api-change:`neptune`: Improving Documentation for Neptune * api-change:`quicksight`: Public release of dashboard customization summary, S3 Tables data source type, Athena cross-account connector, custom sorting for controls, and AI-powered analysis generation. * api-change:`sagemaker`: Adds support for providing NetworkInterface for efa enabled instances and Simplified cluster creation for Slurm-orchestrated clusters with optional Lifecycle Script (LCS) configuration. * api-change:`sts`: The STS client now supports configuring SigV4a through the auth scheme preference setting. SigV4a uses asymmetric cryptography, enabling customers using long-term IAM credentials to continue making STS API calls even when a region is isolated from the partition leader. * from version 1.42.90 * api-change:`appstream`: Add content redirection to Update Stack * api-change:`autoscaling`: This release adds support for specifying Availability Zone IDs as an alternative to Availability Zone names when creating or updating Auto Scaling groups. * api-change:`bedrock-agentcore`: Introducing NamespacePath in AgentCore Memory to support hierarchical prefix based memory record retrieval. * api-change:`cloudwatch`: Update documentation of alarm mute rules start and end date fields * api-change:`cognito-idp`: Adds support for passkey-based multi-factor authentication in Cognito User Pools. Users can authenticate securely using FIDO2-compliant passkeys with user verification, enabling passwordless MFA flows while maintaining backward compatibility with password-based authentication * api-change:`connect`: This release updates the Amazon Connect Rules CRUD APIs to support a new EventSourceName - OnEmailAnalysisAvailable. Use this event source to trigger rules when conversational analytics results are available for email contacts. * api-change:`connectcases`: Added error handling for service quota limits * api-change:`customer-profiles`: Amazon Connect Customer Profiles adds RecommenderSchema CRUD APIs for custom ML training columns. CreateRecommender and CreateRecommenderFilter now accept optional RecommenderSchemaName. * api-change:`datazone`: Launching SMUS IAM domain SDK support * api-change:`devops-agent`: Deprecate the userId from the Chat operations. This update also removes support of AllowVendedLogDeliveryForResource API from AWS SDKs. * api-change:`drs`: Updating regex for identification of AWS Regions. * api-change:`logs`: Endpoint update for CloudWatch Logs Streaming APIs. * api-change:`mediaconvert`: Adds support for Elemental Inference powered smart crop feature, enabling video verticalization * api-change:`rds`: Adds a new DescribeServerlessV2PlatformVersions API to describe platform version properties for Aurora Serverless v2. Also introduces a new valid maintenance action value for serverless platform version updates. * bugfix:signing: Fix bug so that configured auth scheme preference is used when auth scheme is resolved from endpoints rulesets, or from operation- level auth trait. Auth scheme preference can be configured using the existing `auth_scheme_preference` client config option, the `auth_scheme_preference` shared config setting, or the existing `AWS_AUTH_SCHEME_PREFERENCE` environment variable. * from version 1.42.89 * api-change:`customer-profiles`: This release introduces changes to SegmentDefinition APIs to support sorting by attributes. * api-change:`deadline`: Adds GetMonitorSettings and UpdateMonitorSettings APIs to Deadline Cloud. Enables reading and writing monitor settings as key- value pairs (up to 64 keys per monitor). UpdateMonitorSettings supports upsert and delete (via empty value) semantics and is idempotent. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: AWS Glue now defaults to Glue version 5.1 for newly created jobs if the Glue version is not specified in the request, and UpdateJob now preserves the existing Glue version of a job when the Glue version is not specified in the update request. * api-change:`interconnect`: Initial release of AWS Interconnect -- a managed private connectivity service that enables you to create high-speed network connections between your AWS Virtual Private Clouds (VPCs) and your VPCs on other public clouds or your on-premise networks. * api-change:`macie2`: This release adds an optional expectedBucketOwner field to the Macie S3 export configuration, allowing customers to verify bucket ownership before Macie writes results to the destination bucket. * api-change:`securityhub`: Provide organizational unit scoping capability for GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2, GetResourcesStatisticsV2 APIs. * from version 1.42.88 * api-change:`connect`: Conversational Analytics for Email * api-change:`devops-agent`: Devops Agent now supports associate Splunk, Datadog and custom MCP server to an Agent Space. * api-change:`ecs`: Minor updates to exceptions for completeness * api-change:`imagebuilder`: Image pipelines can now automatically apply tags to images they create. Set the imageTags property when creating or updating your pipelines to get started. * api-change:`mediaconvert`: Adds support for MV-HEVC video output and clear lead for AV1 DRM output. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds support for multi-region telemetry evaluation and telemetry enablement rules. * api-change:`rtbfabric`: Adds optional health check configuration for Responder Gateways with ASG Managed Endpoints. When provided, RTB Fabric continuously probes customers' instance IPs and routes traffic only to healthy ones, reducing errors during deployments, scaling events, and instance failures. * api-change:`sagemaker`: Support new SageMaker StartClusterHealthCheck API for on-demand DHC on Hyperpod EKS cluster. Support updated CreateCluster, UpdateCluster, DescribeCluster, BatchAddClusterNodes APIs for flexible instance group on HyperPod cluster * from version 1.42.87 * api-change:`bcm-dashboards`: Scheduled email reports of Billing and Cost Management Dashboards * api-change:`bedrock-agentcore`: Introducing support for SearchRegistryRecords API on AgentCoreRegistry * api-change:`bedrock-agentcore-control`: Initial release for CRUDL in AgentCore Registry Service * api-change:`mediaconnect`: Adds support for MediaLive Channel-type Router Inputs. * api-change:`redshift-data`: The BatchExecuteStatement API now supports named SQL parameters, enabling secure batch queries with parameterized values. This enhancement helps prevent SQL injection vulnerabilities and improves query reusability. * api-change:`sagemaker`: Release support for g7e instance types for SageMaker HyperPod * from version 1.42.86 * api-change:`backup`: Adding EKS specific backup vault notification types for AWS Backup. * api-change:`drs`: This changes adds support for modifying the replication configuration to support data replication using IPv6. * api-change:`ecr`: Add UnableToListUpstreamImageReferrersException in ListImageReferrers * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`ivs-realtime`: Adds support for Amazon IVS real-time streaming redundant ingest. * api-change:`marketplace-discovery`: AWS Marketplace Discovery API provides an interface that enables programmatic access to the AWS Marketplace catalog, including searching and browsing listings, retrieving product details and fulfillment options, and accessing public and private offer pricing and terms. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new output type called MEDIACONNECT ROUTER. This new output type will provide seamless encrypted transport between your MediaLive channel and MediaConnect Router. * api-change:`outposts`: Add AWS Outposts APIs to view renewal pricing options and submit renewal requests for Outpost contracts * from version 1.42.85 * api-change:`accessanalyzer`: Revert previous additions of API changes. * api-change:`bedrock-agentcore`: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. * api-change:`braket`: Added support for t3, g6, and g6e instance types for Hybrid Jobs. * api-change:`connect`: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. * api-change:`datasync`: Allow IAM role ARNs with IAM Paths for "SecretAccessRoleArn" field in "CustomSecretConfig" * api-change:`datazone`: Update Configurations and registerS3AccessGrantLocation as public attributes for cfn * api-change:`ec2`: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. * api-change:`ecs`: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. * api-change:`eks`: EKS MNG WarmPool feature to support ASG WarmPool feature. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`lambda`: Launching Lambda integration with S3 Files as a new file system configuration. * api-change:`outposts`: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. * api-change:`rtbfabric`: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * api-change:`s3files`: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. * bugfix:auth: Fix `sigv4a_signing_region_set` config being ignored when SigV4a is selected via `auth_scheme_preference`. The configured region set is now correctly applied to the signing context regardless of how SigV4a is resolved. * from version 1.42.84 * api-change:`accessanalyzer`: Brookie helps customers preview the impact of SCPs before deployment using historical access activity. It evaluates attached policies and proposed policy updates using collected access activity through CloudTrail authorization events and reports where currently allowed access will be denied. * api-change:`deadline`: Added 8 batch APIs (BatchGetJob, BatchGetStep, BatchGetTask, BatchGetSession, BatchGetSessionAction, BatchGetWorker, BatchUpdateJob, BatchUpdateTask) for bulk operations. Monitors can now use an Identity Center instance in a different region via the identityCenterRegion parameter. * api-change:`dlm`: This release adds support for Fast Snapshot Restore AvailabilityZone Ids in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`geo-maps`: This release updates API reference documentation for Amazon Location Service Maps APIs to reflect regional restrictions for Grab Maps users * api-change:`guardduty`: Migrated to Smithy. No functional changes * api-change:`lightsail`: This release adds support for the Asia Pacific (Malaysia) (ap-southeast-5) Region. * api-change:`mediatailor`: This change adds support for Tagging the resource types Programs and Prefetch Schedules * api-change:`qconnect`: Added optional originRequestId parameter to SendMessageRequest and ListSpans response in Amazon Q in Connect to support request tracing across service boundaries. * api-change:`transfer`: AWS Transfer Family Connectors now support IPv6 connectivity, enabling outbound connections to remote SFTP or AS2 servers using IPv4-only or dual-stack (IPv4 and IPv6) configurations based on network requirements. * from version 1.42.83 * api-change:`bedrock`: Amazon Bedrock Guardrails enforcement configuration APIs now support selective guarding controls for system prompts as well as user and assistant messages, along with SDK support for Amazon Bedrock resource policy APIs. * api-change:`bedrock-agent`: Added strict parameter to ToolSpecification to allow users to enforce strict JSON schema adherence for tool input schemas. * api-change:`bedrock-agentcore-control`: Documentation Update for Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`imagebuilder`: Updated pagination token validation for ListContainerRecipes API to support maximum size of 65K characters * api-change:`lightsail`: Add support for tagging of Alarm resource type * api-change:`logs`: Added queryDuration, bytesScanned, and userIdentity fields to the QueryInfo response object returned by DescribeQueries. Customers can now view detailed query cost information including who ran the query, how long it took, and the volume of data scanned. * api-change:`medialive`: AWS Elemental MediaLive released a new features that allows customers to use HLG 2020 as a color space for AV1 video codec. * api-change:`organizations`: Updates close Account quota for member accounts in an Organization. * api-change:`payment-cryptography`: Adds optional support to retrieve previously generated import and export tokens to simplify import and export functions * from version 1.42.82 * api-change:`appstream`: Amazon WorkSpaces Applications now supports drain mode for instances in multi-session fleets. This capability allows administrators to instruct individual fleet instances to stop accepting new user sessions while allowing existing sessions to continue uninterrupted. * api-change:`bedrock-agentcore-control`: Adds support for three-legged (Authorization Code grant type) OAuth along with predefined MCP tool schema configuration for Amazon Bedrock AgentCore gateway MCP server targets. * api-change:`bedrock-data-automation`: Data Automation Library is a BDA capability that lets you create reusable entity resources to improve extraction accuracy. Libraries support Custom Vocabulary entities that enhance speech recognition for audio and video content with domain-specific terminology shared across projects * api-change:`bedrock-runtime`: Relax ToolUseId pattern to allow dots and colons * api-change:`cloudwatch`: CloudWatch now supports OTel enrichment to make vended metrics for supported AWS resources queryable via PromQL with resource ARN and tag labels, and PromQL alarms for metrics ingested via the OTLP endpoint with multi-contributor evaluation. * api-change:`connect`: Include CUSTOMER to evaluation target and participant role. Support Korean, Japanese and Simplified Chinese in evaluation forms. * api-change:`deadline`: AWS Deadline Cloud now supports configurable scheduling on each queue. The scheduling configuration controls how workers are distributed across jobs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Amazon GameLift Servers now includes a ComputeName field in game session API responses, making it easier to identify which compute is hosting a game session without cross-referencing IP addresses. * api-change:`geo-places`: This release updates API reference documentation for Amazon Location Service Places APIs to reflect regional restrictions for Grab Maps users in ReverseGeocode, Suggest, SearchText, and GetPlace operations * api-change:`logs`: We are pleased to announce that our logs transformation csv processor now has a destination field, allowing you to specify under which parent node parsed columns be placed under. * api-change:`pricing`: This release increases the MaxResults parameter of the GetAttributeValues API from 100 to 10000. * from version 1.42.81 * api-change:`bedrock`: Adds support for Bedrock Batch Inference Job Progress Monitoring * api-change:`bedrock-agentcore`: Added the ability to filter out empty sessions when listing sessions. Customers can now retrieve only sessions that still contain events, eliminating the need to check each session individually. No changes required for existing integrations. * api-change:`bedrock-agentcore-control`: Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints * api-change:`ecs`: Amazon ECS now supports Managed Daemons with dedicated APIs for registering daemon task definitions, creating daemons, and managing daemon deployments. * api-change:`elasticache`: Updated SnapshotRetentionLimit documentation for ServerlessCache to correctly describe the parameter as number of days (max 35) instead of number of snapshots. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * api-change:`geo-routes`: This release makes RoutingBoundary optional in CalculateRouteMatrix, set StopDuration with a maximum value of 49999 for CalculateRoutes, set TrailerCount with a maximum value of 4, and introduces region restrictions for Grab Maps users. * api-change:`medical-imaging`: Added new boolean flag to persist metadata updates to all primary image sets in the same study as the requested image set. * api-change:`opensearch`: Adding Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08 as TLS Policy in Supported Regions * from version 1.42.80 * api-change:`acm`: Adds support for searching for ACM certificates using the new SearchCertificates API. * api-change:`cloudfront`: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. * api-change:`dataexchange`: Support Tags for AWS Data Exchange resource Assets * api-change:`datazone`: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments * api-change:`devops-agent`: AWS DevOps Agent service General Availability release. * api-change:`dms`: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. * api-change:`ec2`: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-maps`: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. * api-change:`kinesisanalyticsv2`: Support for Flink 2.2 in Managed Service for Apache Flink * api-change:`mailmanager`: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. * api-change:`marketplace-agreement`: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) * api-change:`observabilityadmin`: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. * api-change:`odb`: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. * api-change:`opensearch`: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications * api-change:`organizations`: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. * api-change:`partnercentral-selling`: Adding EURO Currency for MRR Amount * api-change:`pinpoint-sms-voice-v2`: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. * api-change:`quicksight`: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. * api-change:`s3`: Add Bucket Metrics configuration support to directory buckets * api-change:`s3control`: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs * api-change:`s3tables`: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. * api-change:`securityagent`: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. * api-change:`sustainability`: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. * from version 1.42.79 * api-change:`appstream`: Add support for URL Redirection * api-change:`autoscaling`: Adds support for new instance lifecycle states introduced by the instance lifecycle policy and replace root volume features. * api-change:`bedrock-agentcore`: Adds Ground Truth support for AgentCore Evaluations (Evaluate) * api-change:`deadline`: AWS Deadline Cloud now supports three new fleet auto scaling settings. With scale out rate, you can configure how quickly workers launch. With worker idle duration, you can set how long workers wait before shutting down. With standby worker count, you can keep idle workers ready for fast job start. * api-change:`devops-agent`: AWS DevOps Agent General Availability. * api-change:`ecs`: Adding Local Storage support for ECS Managed Instances by introducing a new field "localStorageConfiguration" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Update CreateScript API documentation. * api-change:`lakeformation`: Add setSourceIdentity to DataLakeSettings Parameters * api-change:`logs`: Adds Lookup Tables to CloudWatch Logs for log enrichment using CSV key-value data with KMS encryption support. * api-change:`opensearch`: Added Cluster Insights API's In OpenSearch Service SDK. * api-change:`partnercentral-account`: KYB Supplemental Form enables partners who fail business verification to submit additional details and supporting documentation through a self-service form, triggering an automated re- verification without requiring manual intervention from support teams. * api-change:`sagemaker`: Added support for placement strategy and consolidation for SageMaker inference component endpoints. Customers can now configure how inference component copies are distributed across instances and availability zones (AZs), and enable automatic consolidation to optimizes resource utilization. * enhancement:`s3`: Added support for opting out of Amazon S3 Express session authentication via the new `disable_s3_express_session_auth` S3 client configuration setting, or the new `AWS_S3_DISABLE_EXPRESS_SESSION_AUTH` environment variable, or the `s3_disable_express_session_auth` shared configuration setting. * from version 1.42.78 * api-change:`bedrock-agentcore`: Adding AgentCore Code Interpreter Node.js Runtime Support with an optional runtime field * api-change:`bedrock-agentcore-control`: Adds support for custom code-based evaluators using customer-managed Lambda functions. * api-change:`neptunedata`: Minor formatting changes to remove unnecessary symbols. * api-change:`omics`: AWS HealthOmics now supports VPC networking, allowing users to connect runs to external resources with NAT gateway, AWS VPC resources, and more. New Configuration APIs support configuring VPC settings. StartRun API now accepts networkingMode and configurationName parameters to enable VPC networking. * from version 1.42.77 * api-change:`bcm-data-exports`: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account. * api-change:`emr`: Add StepExecutionRoleArn to RunJobFlow API * api-change:`logs`: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK * api-change:`sagemaker`: Release support for ml.r5d.16xlarge instance types for SageMaker HyperPod * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for customer defined maintenance windows. This allows customers to define maintenance schedule during resource creation and updates * from version 1.42.76 * api-change:`apigatewayv2`: Added DISABLE IN PROGRESS and DISABLE FAILED Portal statuses. * api-change:`application-signals`: This release adds support for creating SLOs on RUM appMonitors, Synthetics canaries and services. * api-change:`batch`: Documentation-only update for AWS Batch. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`marketplace-agreement`: The Variable Payments APIs enable AWS Marketplace Sellers to perform manage their payment requests (send, get, list, cancel). * api-change:`polly`: Add support for Mu-law and A-law codecs for output format * api-change:`uxc`: GA release of AccountCustomizations, used to manage account color, visible services, and visible regions settings in the AWS Management Console. * from version 1.42.75 * api-change:`bedrock-agentcore-control`: Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API. * api-change:`gamelift`: Amazon GameLift Servers launches UDP ping beacons in the Beijing and Ningxia (China) Regions to help measure real-time network latency for multiplayer games. The ListLocations API is now available in these regions to provide endpoint domain and port information as part of the locations list. * api-change:`mediapackagev2`: Reduces the minimum allowed value for startOverWindowSeconds from 60 to 0, allowing customers to effectively disable the start-over window. * api-change:`opensearchserverless`: Adds support for updating the vector options field for existing collections. * api-change:`pcs`: This release adds support for custom slurmdbd and cgroup configuration in AWS PCS. Customers can now specify slurmdbd and cgroup settings to configure database accounting and reporting for their HPC workloads, and control resource allocation and limits for compute jobs. * api-change:`rds`: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. * from version 1.42.74 * api-change:`batch`: AWS Batch AMI Visibility feature support. Adds read-only batchImageStatus to Ec2Configuration to provide visibility on the status of Batch-vended AMIs used by Compute Environments. * api-change:`connectcases`: You can now use the UpdateRelatedItem API to update the content of comments and custom related items associated with a case. * api-change:`lightsail`: Add support for tagging of ContactMethod resource type * api-change:`omics`: Adds support for batch workflow runs in Amazon Omics, enabling users to submit, manage, and monitor multiple runs as a single batch. Includes APIs to create, cancel, and delete batches, track submission statuses and counts, list runs within a batch, and configure default settings. * from version 1.42.73 * api-change:`backup`: Fix Typo for S3Backup Options ( S3BackupACLs to BackupACLs) * api-change:`dynamodb`: Adding ReplicaArn to ReplicaDescription of a global table replica * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`opensearch`: Added support for Amazon Managed Service for Prometheus (AMP) as a connected data source in OpenSearch UI. Now users can analyze Prometheus metrics in OpenSearch UI without data copy. * api-change:`verifiedpermissions`: Adds support for Policy Store Aliases, Policy Names, and Policy Template Names. These are customizable identifiers that can be used in place of Policy Store ids, Policy ids, and Policy Template ids respectively in Amazon Verified Permissions APIs. * bugfix:s3: Fix aws-chunked requests with non-seekable streams sending both `Content-Length` and `Transfer-Encoding: chunked`, which violated HTTP/1.1 (RFC 7230) and caused `SignatureDoesNotMatch` errors. * from version 1.42.72 * api-change:`batch`: AWS Batch now supports quota management, enabling administrators to allocate shared compute resources across teams and projects through quota shares with capacity limits, resource-sharing strategies, and priority-based preemption - currently available for SageMaker Training job queues. * api-change:`bedrock-agentcore`: This release includes SDK support for the following new features on AgentCore Built In Tools. 1. Enterprise Policies for AgentCore Browser Tool. 2. Root CA Configuration Support for AgentCore Browser Tool and Code Interpreter. 3. API changes to AgentCore Browser Profile APIs * api-change:`bedrock-agentcore-control`: Adds support for the following new features. 1. Enterprise Policies support for AgentCore Browser Tool. 2. Root CA Configuration support for AgentCore Browser Tool and Code Interpreter. * api-change:`ec2`: Amazon EC2 Fleet instant mode now supports launching instances into Interruptible Capacity Reservations, enabling customers to use spare capacity shared by Capacity Reservation owners within their AWS Organization. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`polly`: Added bi-directional streaming functionality through a new API, StartSpeechSynthesisStream. This API allows streaming input text through inbound events and receiving audio as part of an output stream simultaneously. * from version 1.42.71 * api-change:`ec2`: The DescribeInstanceTypes API now returns default connection tracking timeout values for TCP, UDP, and UDP stream via the new connectionTrackingConfiguration field on NetworkInfo. * api-change:`mediaconvert`: This update adds additional bitrate options for Dolby AC-4 audio outputs. * Update to 1.42.70 * api-change:`bedrock-agentcore-control`: Deprecating namespaces field and adding namespaceTemplates. * api-change:`emr`: Add S3LoggingConfiguration to Control LogUploads * api-change:`glue`: Provide approval to overwrite existing Lake Formation permissions on all child resources with the default permissions specified in 'CreateTableDefaultPermissions' and 'CreateDatabaseDefaultPermissions' when updating catalog. Allowed values are ["Accept","Deny"] . * from version 1.42.69 * api-change:`bedrock`: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. * api-change:`bedrock-agentcore`: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API * api-change:`bedrock-agentcore-control`: Supporting hosting of public ECR Container Images in AgentCore Runtime * api-change:`ecs`: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. * from version 1.42.68 * api-change:`apigateway`: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography * api-change:`config`: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. * api-change:`connect`: Deprecating PredefinedNotificationID field * api-change:`gameliftstreams`: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. * api-change:`glue`: Add QuerySessionContext to BatchGetPartitionRequest * api-change:`ivs-realtime`: Updates maximum reconnect window seconds from 60 to 300 for participant replication * api-change:`mediaconvert`: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. * api-change:`medialive`: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. * api-change:`mgn`: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. * api-change:`quicksight`: The change adds a new capability named ManageSharedFolders in Custom Permissions * from version 1.42.67 * api-change:`datasync`: DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret. * api-change:`ecr`: Add Chainguard to PTC upstreamRegistry enum * api-change:`s3`: Adds support for account regional namespaces for general purpose buckets. The account regional namespace is a reserved subdivision of the global bucket namespace where only your account can create general purpose buckets. * enhancement:`sso-oidc`: Fixed missing error messages in SSO OIDC error responses by mapping OAuth2 error_description field to the standard Message field. Issue was raised in `#2216 <https://github.com/boto/botocore/issues/2216>`__. * from version 1.42.66 * api-change:`customer-profiles`: Today, Amazon Connect is announcing the ability to filter (include or exclude) recommendations based on properties of items and interactions. * api-change:`eks`: Adds support for a new tier in controlPlaneScalingConfig on EKS Clusters. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`polly`: Added support for the new voices - Ambre (fr-FR), Beatrice (it-IT), Florian (fr-FR), Lennart (de-DE), Lorenzo (it-IT) and Tiffany (en-US). They are available as a Generative voices only. * api-change:`sagemaker`: SageMaker training plans allow you to extend your existing training plans to avoid workload interruptions without workload reconfiguration. When a training plan is approaching expiration, you can extend it directly through the SageMaker AI console or programmatically using the API or AWS CLI. * api-change:`simpledbv2`: Introduced Amazon SimpleDB export functionality enabling domain data export to S3 in JSON format. Added three new APIs StartDomainExport, GetExport, and ListExports via SimpleDBv2 service. Supports cross-region exports and KMS encryption. * api-change:`workspaces`: Added WINDOWS SERVER 2025 OperatingSystemName. * from version 1.42.65 * api-change:`bedrock-agentcore-control`: Adding first class support for AG-UI protocol in AgentCore Runtime. * api-change:`connectcases`: Added functionality for the Required and Hidden case rule types to be conditionally evaluated on up to 5 conditions. * api-change:`dms`: Not need to include to any release notes. The only change is to correct LoadTimeout unit from milliseconds to seconds in RedshiftSettings * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kafka`: Add dual stack endpoint to SDK * api-change:`lexv2-models`: This release introduces a new generative AI feature called Lex Bot Analyzer. This feature leverage AI to analyze the bot configuration against AWS Lex best practices to identify configuration issues and provides recommendations. * from version 1.42.64 * api-change:`iam`: Added support for CloudWatch Logs long-term API keys, currently available in Preview * api-change:`mgn`: Adds support for new storeSnapshotOnLocalZone field in ReplicationConfiguration and updateReplicationConfiguration * api-change:`opensearch`: This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data. * api-change:`route53globalresolver`: Adds support for dual stack Global Resolvers and Dictionary-based Domain Generation Firewall Advanced Protection. * from version 1.42.63 * api-change:`appintegrations`: This release adds support for webhooks, allowing customers to create an Event Integration with a webhook source. * api-change:`bcm-data-exports`: Fixed wrong endpoint resolutions in few regions. Added AWS CFN resource schema for BCM Data Exports. Added max value validation for pagination parameter. Fixed ARN format validation for BCM Data Exports resources. Updated size constraints for table properties. Added AccessDeniedException error. * api-change:`bedrock`: Amazon Bedrock Guardrails account-level enforcement APIs now support lists for model inclusion and exclusion from guardrail enforcement. * api-change:`bedrock-agentcore-control`: Adds support for streaming memory records in AgentCore Memory * api-change:`connect`: Amazon Connect now supports the ability to programmatically configure and run automated tests for contact center experiences for Chat. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of chat interactions and workflows. * api-change:`deadline`: AWS Deadline Cloud now supports cost scale factors for farms, enabling studios to adjust reported costs to reflect their actual rendering economics. Adjusted costs are reflected in Deadline Cloud's Usage Explorer and Budgets. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gameliftstreams`: Added new Gen6 stream classes based on the EC2 G6f instance family. These stream classes provide cost-optimized options for streaming well-optimized or lower-fidelity games on Windows environments. * api-change:`sesv2`: Adds support for longer email message header values, increasing the maximum length from 870 to 995 characters for RFC 5322 compliance. * from version 1.42.62 * api-change:`connecthealth`: Connect-Health SDK is AWS's unified SDK for the Amazon Connect Health offering. It allows healthcare developers to integrate purpose-built agents - such as patient insights, ambient documentation, and medical coding - into their existing applications, including EHRs, telehealth, and revenue cycle. * api-change:`ec2`: Added metadata field to CapacityAllocation. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Added MALICIOUS FILE to IndicatorType enum in MDC Sequence * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for approval team baseline operations. * api-change:`sagemaker`: Adds support for S3 Bucket Ownership validation for SageMaker Managed MLflow. * api-change:`savingsplans`: Added support for OpenSearch and Neptune Analytics to Database Savings Plans. * enhancement:S3 redirect: Validate new region name when redirecting. * Update to 1.42.61 * api-change:`connect`: Added support for configuring additional email addresses on queues in Amazon Connect. Agents can now select an outbound email address and associate additional email addresses for replying to or initiating emails. * api-change:`elasticbeanstalk`: As part of this release, Beanstalk introduce a new info type - analyze for request environment info and retrieve environment info operations. When customers request an Al analysis, Elastic Beanstalk runs a script on an instance in their environment and returns an analysis of events, health and logs. * api-change:`es`: Adds support for DeploymentStrategyOptions. * api-change:`gamelift`: Amazon GameLift Servers now offers DDoS protection for Linux-based EC2 and Container Fleets on SDKv5. The player gateway proxy relay network provides traffic validation, per-player rate limiting, and game server IP address obfuscation all with negligible added latency and no additional cost. * api-change:`opensearch`: Adding support for DeploymentStrategyOptions * api-change:`quicksight`: Added several new values for Capabilities, increased visual limit per sheet from previous limit to 75, renamed Quick Suite to Quick in several places. * enhancement:auth: Exclude additional hop-by-hop headers from SigV4 signing to prevent signature mismatches when intermediaries mutate transport headers (connection, keep-alive, proxy-authenticate, proxy-authorization, TE, trailer, upgrade). * from version 1.42.60 * api-change:`bedrock-agentcore-control`: Support for AgentCore Policy GA * api-change:`datazone`: Adding QueryGraph operation to DataZone SDK * api-change:`logs`: CloudWatch Logs updates- Added support for the PutBearerTokenAuthentication API to enable or disable bearer token authentication on a log group. For more information, see CloudWatch Logs API documentation. * api-change:`partnercentral-channel`: Adds the Resold Unified Operations support plan and removes the Resold Business support plan in the CreateRelationship and UpdateRelationship APIs * api-change:`sagemaker`: This release adds b300 and g7e instance types for SageMaker inference endpoints. * from version 1.42.59 * api-change:`arc-region-switch`: Post-Recovery Workflows enable customers to maintain comprehensive disaster recovery automation. This allows customer SREs and leadership to have complete recovery orchestration from failover through post-recovery preparation, ensuring Regions remain ready for subsequent recovery events. * api-change:`batch`: This feature allows customers to specify the minimum time (in minutes) that AWS Batch keeps instances running in a compute environment after all jobs on the instance complete * api-change:`bedrock`: Added four new model lifecycle date fields, startOfLifeTime, endOfLifeTime, legacyTime, and publicExtendedAccessTime. Adds support for using the Converse API with Bedrock Batch inference jobs. * api-change:`cognito-idp`: Cognito is introducing a two-secret rotation model for app clients, enabling seamless credential rotation without downtime. Dedicated APIs support passing in a custom secret. Custom secrets need to be at least 24 characters. This eliminates reconfiguration needs and reduces security risks. * api-change:`connect`: Deprecate EvaluationReviewMetadata's CreatedBy and CreatedTime, add EvaluationReviewMetadata's RequestedBy and RequestedTime * api-change:`customer-profiles`: This release introduces an optional SourcePriority parameter to the ProfileObjectType APIs, allowing you to control the precedence of object types when ingesting data from multiple sources. Additionally, WebAnalytics and Device have been added as new StandardIdentifier values. * api-change:`health`: Updates the regex for validating availabilityZone strings used in the describe events filters. * api-change:`keyspacesstreams`: Added support for Change Data Capture (CDC) streams with Duration DataType. * api-change:`odb`: ODB Networking Route Management is a feature improvement which allows for implicit creation and deletion of EC2 Routes in the Peer Network Route Table designated by the customer via new optional input. This feature release is combined with Multiple App-VPC functionality for ODB Network Peering(s). * api-change:`ram`: Resource owners can now specify ResourceShareConfiguration request parameter for CreateResourceShare API including RetainSharingOnAccountLeaveOrganization boolean parameter * from version 1.42.58 * api-change:`backup-gateway`: This release updates GetGateway API to include deprecationDate and softwareVersion in the response, enabling customers to track gateway software versions and upcoming deprecation dates. * api-change:`ec2`: Add c8id, m8id and hpc8a instance types. * api-change:`ecs`: Adding support for Capacity Reservations for ECS Managed Instances by introducing a new "capacityOptionType" value of "RESERVED" and new field "capacityReservations" for CreateCapacityProvider and UpdateCapacityProvider APIs. * api-change:`marketplace-entitlement`: Added License Arn as a new optional filter for GetEntitlements and LicenseArn field in each entitlement in the response. * api-change:`meteringmarketplace`: Added LicenseArn to ResolveCustomer response and BatchMeterUsage usage records. BatchMeterUsage now accepts LicenseArn in each UsageRecord to report usage at the license level. Added InvalidLicenseException error response for invalid license parameters. * api-change:`securityhub`: Security Hub added EXTENDED PLAN integration type to DescribeProductsV2 and added metadata.product.vendor name GroupBy support to GetFindingStatisticsV2 * from version 1.42.57 * api-change:`batch`: AWS Batch documentation update for service job capacity units. * api-change:`ec2`: Add support for EC2 Capacity Blocks in Local Zones. * api-change:`ecr`: Update repository name regex to comply with OCI Distribution Specification * api-change:`neptune`: Neptune global clusters now supports tags * api-change:`wafv2`: AWS WAF now supports GetTopPathStatisticsByTraffic that provides aggregated statistics on the top URI paths accessed by bot traffic. Use this operation to see which paths receive the most bot traffic, identify the specific bots accessing them, and filter by category, organization, or bot name. * from version 1.42.56 * api-change:`cloudwatch`: This release adds the APIs (PutAlarmMuteRule, ListAlarmMuteRules, GetAlarmMuteRule and DeleteAlarmMuteRule) to manage a new Cloudwatch resource, AlarmMuteRules. AlarmMuteRules allow customers to temporarily mute alarm notifications during expected downtime periods. * api-change:`ec2`: Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization- wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances. * api-change:`elementalinference`: Initial GA launch for AWS Elemental Inference including capabilities of Smart Crop and Live Event Clipping * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`medialive`: AWS Elemental MediaLive - Added support for Elemental Inference for Smart Cropping and Clipping features for MediaLive. * api-change:`observabilityadmin`: Adding a new field in the CreateCentralizationRuleForOrganization, UpdateCentralizationRuleForOrganization API and updating the GetCentralizationRuleForOrganization API response to include the new field * api-change:`opensearch`: Fixed HTTP binding for DescribeDomainAutoTunes API to correctly pass request parameters as query parameters in the HTTP request. * api-change:`partnercentral-selling`: Added support for filtering opportunities by target close date in the ListOpportunities API. You can now filter results to return opportunities with a target close date before or after a specified date, enabling more precise opportunity searches based on expected closure timelines. * from version 1.42.55 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now support fidelity report generation. The new workflow type assesses policy coverage and accuracy against customer documents. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds support for the three new asset types. * api-change:`connectcases`: SearchCases API can now accept 25 fields in the request and response as opposed to the previous limit of 10. DeleteField's hard limit of 100 fields per domain has been lifted. * api-change:`controlcatalog`: Updated ExemptedPrincipalArns parameter documentation for improved accuracy * api-change:`datazone`: Add workflow properties support to connections APIs * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds one new arguments to UpdateTable, GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`mediatailor`: Updated endpoint rule set for dualstack endpoints. Added a new opt-in option to log raw ad decision server requests for Playback Configurations. * api-change:`quicksight`: Adds support for SEMISTRUCT to InputColumn Type * api-change:`wickr`: AWS Wickr now provides APIs to manage your Wickr OpenTDF integration. These APIs enable you to test and save your OpenTDF configuration allowing you to manage rooms based on Trusted Data Format attributes. * from version 1.42.54 * api-change:`appstream`: Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances. * api-change:`ecs`: Migrated to Smithy. No functional changes * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`sagemaker-runtime`: Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads. * api-change:`signer-data`: This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs. * api-change:`ssm`: Add support for AssociationDispatchAssumeRole in AWS SSM State Manager. * api-change:`trustedadvisor`: Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios. * from version 1.42.53 * api-change:`bcm-dashboards`: The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards. * api-change:`ecr`: Adds multiple artifact types filter support in ListImageReferrers API. * api-change:`pca-connector-scep`: AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately. * enhancement:`checksums`: Added support for the SHA512 checksum algorithm. When the optional AWS CRT (`awscrt`) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation). * from version 1.42.52 * api-change:`cleanrooms`: This release adds support for federated catalogs in Athena-sourced configured tables. * api-change:`connect`: Correcting in-app notifications API documentation. * from version 1.42.51 * api-change:`ec2`: Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs. * api-change:`evidently`: The evidently client has been removed following the deprecation of the service. * api-change:`grafana`: This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys. * api-change:`iotanalytics`: The iotanalytics client has been removed following the deprecation of the service. * api-change:`rds`: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. * api-change:`workspaces-web`: Adds support for branding customization without requiring a custom wallpaper. * from version 1.42.50 * api-change:`arc-region-switch`: Clarify documentation on ARC Region Switch start-plan-execution operation * api-change:`ec2`: Documentation updates for EC2 Secondary Networks * api-change:`ecr`: Adds support for enabling blob mounting, and removes support for Clair based image scanning * api-change:`kafka`: Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API. * api-change:`kms`: Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation * api-change:`qconnect`: Update MessageType enum to include missing types. * from version 1.42.49 * api-change:`cloudwatch`: Adding new evaluation states that provides information about the alarm evaluation process. Evaluation error Indicates configuration errors in alarm setup that require review and correction. Evaluation failure Indicates temporary CloudWatch issues. * api-change:`connect`: API release for headerr notifications in the admin website. APIs allow customers to publish brief messages (including URLs) to a specified audience, and a new header icon will indicate when unread messages are available. * api-change:`ec2`: This release adds geography information to EC2 region and availability zone APIs. DescribeRegions now includes a Geography field, while DescribeAvailabilityZones includes both Geography and SubGeography fields, enabling better geographic classification for AWS regions and zones. * api-change:`inspector2`: Added .Net 10 (dotnet10) and Node 24.x (node24.x) runtime support for lambda package scanning * api-change:`sagemaker`: Enable g7e instance type support for SageMaker Processing, and enable single file configuration provisioning for HyperPod Slurm, where customers have the option to use HyperPod API to provide the provisioning parameters. * enhancement:AWSCRT: Update awscrt version to 0.31.2 * from version 1.42.48 * api-change:`ec2`: Launching nested virtualization. This feature allows you to run nested VMs inside virtual (non-bare metal) EC2 instances. * from version 1.42.47 * api-change:`batch`: Add support for listing jobs by share identifier and getting snapshots of active capacity utilization by job queue and share. * api-change:`ec2`: R8i instances powered by custom Intel Xeon 6 processors available only on AWS with sustained all-core 3.9 GHz turbo frequency * api-change:`eks`: This release adds support for Windows Server 2025 in Amazon EKS Managed Node Groups. * api-change:`kafkaconnect`: Support configurable upper limits on task count during autoscaling operations via maxAutoscalingTaskCount parameter. * api-change:`s3tables`: S3 Tables now supports setting partition specifications and sort orders on tables. Partition specs allow users to define how data is organized using transform functions. Sort order configurations enable users to specify sort directions and null ordering preferences for optimized data layout. * from version 1.42.46 * api-change:`bedrock-agentcore`: Added AgentCore browser proxy configuration support, allowing routing of browser traffic through HTTP and HTTPS proxy servers with authentication and bypass rules. * api-change:`connect`: Amazon Connect now supports per-channel auto-accept and After Contact Work (ACW) timeouts. Configure agents with auto-accept and ACW timeout settings for chat, tasks, emails, and callbacks. Use the new UpdateUserConfig API to manage these settings. * api-change:`eks`: Introducing an optional policy field, an IAM policy applied to pod identity associations in addition to IAM role policies. When specified, pod permissions are the intersection of IAM role policies and the policy field, ensuring the principle of least privilege. * api-change:`kafka`: Amazon MSK adds three new APIs, CreateTopic, UpdateTopic, and DeleteTopic for managing Kafka topics in your MSK clusters. * api-change:`rds`: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. * from version 1.42.45 * api-change:`connectcampaignsv2`: Add the missing event type for WhatsApp * api-change:`ec2`: Amazon Secondary Networks is a networking feature that provides high-performance, low-latency connectivity for specialized workloads. * api-change:`eks`: Amazon EKS adds a new DescribeUpdate update type, VendedLogsUpdate, to support an integration between EKS Auto Mode and Amazon CloudWatch Vended Logs. * api-change:`imagebuilder`: EC2 Image Builder now supports wildcard patterns in lifecycle policies with recipes and enhances the experience of tag-scoped policies. * api-change:`lakeformation`: Allow cross account v5 in put data lake settings * api-change:`neptunedata`: Added edgeOnlyLoad boolean parameter to Neptune bulk load request. When TRUE, files are loaded in order without scanning. When FALSE (default), the loader scans files first, then loads vertex files before edge files automatically. * api-change:`pcs`: Introduces RESUMING state for clusters, compute node groups, and queues. * api-change:`transfer`: This release adds a documentation update for MdnResponse of type "ASYNC" * from version 1.42.44 * api-change:`bedrock-data-automation-runtime`: Add OutputConfiguration to InvokeDataAutomation input and output to support S3 output * api-change:`deadline`: Adds support for tagging jobs during job creation * api-change:`iot-managed-integrations`: Adding support for Custom(General) Authorization in managed integrations for AWS IoT Device Management cloud connectors. * api-change:`partnercentral-selling`: Releasing AWS Opportunity Snapshots for SDK release. * api-change:`sagemaker`: Adding g7e instance support in Sagemaker Training * from version 1.42.43 * api-change:`arc-region-switch`: Updates documentation for ARC Region switch and provides stronger validation for Amazon Aurora Global Database execution block parameters. * api-change:`athena`: Reduces the minimum TargetDpus to create or update capacity reservations from 24 to 4. * api-change:`bedrock-agentcore`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`bedrock-agentcore-control`: Support Browser profile persistence (cookies and local storage) across sessions for AgentCore Browser. * api-change:`glue`: This release adds the capability to easily create custom AWS Glue connections to data sources with REST APIs. * api-change:`medialive`: Outputs using the AV1 codec in CMAF Ingest output groups in MediaLive now have the ability to specify a target bit depth of 8 or 10. * api-change:`neptune-graph`: Minor neptune-graph documentation changes * api-change:`ram`: Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination. * api-change:`transfer`: Adds support for the customer to send custom HTTP headers and configure an AS2 Connector to receive Asynchronous MDNs from their trading partner * api-change:`workspaces`: Added support for 12 new graphics-optimized compute types - Graphics.g6 (xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge), Graphics.gr6 (4xlarge, 8xlarge), Graphics.g6f (large, xlarge, 2xlarge, 4xlarge), and Graphics.gr6f (4xlarge). * enhancement:HTTP session: Set blocksize from default 16KB to 128KB if urllib3 v2 is installed * from version 1.42.42 * api-change:`bedrock-runtime`: Added support for structured outputs to Converse and ConverseStream APIs. * api-change:`connectcases`: Amazon Connect Cases now supports larger, multi- line text fields with up to 4,100 characters. Administrators can use the Admin UI to select the appropriate configuration (single-line or multi-line) on a per-field basis, improving case documentation capabilities. * api-change:`eks`: Update delete cluster description * api-change:`medialive`: AWS Elemental MediaLive now supports SRT listener mode for inputs and outputs, in addition to the existing SRT caller mode. * api-change:`redshift`: We have increased the maximum duration for a deferred maintenance window from 45 days to 60 days for Amazon Redshift provisioned clusters. This enhancement provides customers with greater flexibility in scheduling patching and maintenance activities while also maintaining security compliance. * api-change:`workspaces-web`: Support for configuring and managing custom domain names for WorkSpaces Secure Browser portals. * enhancement:Validation: Updated list validation to add fast-path for list members that only require basic type checking. * from version 1.42.41 * api-change:`batch`: AWS Batch Array Job Visibility feature support. Includes new statusSummaryLastUpdatedAt for array job parent DescribeJobs responses for the last time the statusSummary was updated. Includes both statusSummary and statusSummaryLastUpdatedAt in ListJobs responses for array job parents. * api-change:`dynamodb`: This change supports the creation of multi-account global tables. It adds two new arguments to CreateTable, GlobalTableSourceArn and GlobalTableSettingsReplicationMode. DescribeTable is also updated to include information about GlobalTableSettingsReplicationMode. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-maps`: Added support for optional style parameters in maps, including 3D terrain and 3D Buildings * api-change:`kinesis`: Adds StreamId parameter to AWS Kinesis Data Streams APIs that is reserved for future use. * api-change:`marketplace-catalog`: Adds support for Catalog API us-east-1 dualstack endpoint catalog-marketplace.us-east-1.api.aws * api-change:`organizations`: Updated the CloseAccount description. * api-change:`sso-admin`: Added new Region management APIs to support multi- Region replication in IAM Identity Center. * from version 1.42.40 * api-change:`bedrock-agentcore-control`: Adds tagging support for AgentCore Evaluations (evaluator and online evaluation config) * api-change:`cloudfront`: Add OriginMTLS support to CloudFront Distribution APIs * api-change:`mpa`: Updates to multi-party approval (MPA) service to add support for multi-factor authentication (MFA) for voting operations. * from version 1.42.39 * api-change:`connect`: This release adds Estimated Wait Time support to the GetContactMetrics API for Amazon Connect. * api-change:`quicksight`: Improve SessionTag usage guidelines in the GenerateEmbedURLForAnonymousUser API documentation. Update the GetIdentityContext document with the region support context. * from version 1.42.38 * api-change:`ec2`: G7e instances feature up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory, and up to 15.2 TB of local NVMe SSD storage. * api-change:`gamelift`: Amazon GameLift Servers now supports automatic scaling to and from zero instances based on game session activity. Fleets scale down to zero following a defined period of no game session activity and scale up from zero when game sessions are requested, providing an option for cost optimization. * from version 1.42.37 * api-change:`cognito-idp`: This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login. * api-change:`connect`: Adds support for filtering search results based on tags assigned to contacts. * api-change:`ec2`: SearchTransitGatewayRoutes API response now includes a NextToken field, enabling pagination when retrieving large sets of transit gateway routes. Pass the returned NextToken value in subsequent requests to retrieve the next page of results. * api-change:`lambda`: We are launching ESM Metrics and logging for Kafka ESM to allow customers to monitor Kafka event processing using CloudWatch Metrics and Logs. * api-change:`mediaconnect`: This release adds support for NDI flow sources in AWS Elemental MediaConnect. You can now send content to your MediaConnect transport streams directly from your NDI environment using the new NDI source type. Also adds support for LARGE 4X flow size, which can be used when creating CDI JPEG-XS flows. * api-change:`mediaconvert`: This release adds a follow source mode for audio output channel count, an AES audio frame wrapping option for MXF outputs, and an option to signal DolbyVision compatibility using the SUPPLEMENTAL- CODECS tag in HLS manifests. * api-change:`s3`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * api-change:`s3control`: Adds support for the UpdateObjectEncryption API to change the server-side encryption type of objects in general purpose buckets. * from version 1.42.36 * api-change:`connect`: Added support for task attachments. The StartTaskContact API now accepts file attachments, enabling customers to include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts. Supports up to 5 attachments per task. * api-change:`deadline`: AWS Deadline Cloud now supports editing job names and descriptions after submission. * api-change:`ec2`: Releasing new EC2 instances. C8gb and M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent faster builds. * api-change:`medialive`: AWS Elemental MediaLive released two new features that allows customers 1) to set Output Timecode for AV1 encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2 output groups when using Pipeline Locking or Disabled Locking modes. * api-change:`sagemaker`: Idle resource sharing enables teams to borrow unused compute resources in your SageMaker HyperPod cluster. This capability maximizes resource utilization by allowing teams to borrow idle compute capacity beyond their allocated compute quotas. * from version 1.42.35 * api-change:`connectcases`: Amazon Connect now enables you to use tag-based access controls to define who can access specific cases. You can associate tags with case templates and configure security profiles to determine which users can access cases with those tags. * api-change:`ec2`: DescribeInstanceTypes API response now includes an additionalFlexibleNetworkInterfaces field, the number of interfaces attachable to an instance when using flexible Elastic Network Adapter (ENA) queues in addition to the base number specified by maximumNetworkInterfaces. * api-change:`evidently`: Deprecate all Evidently API for AWS CloudWatch Evidently deprecation * api-change:`groundstation`: Adds support for AWS Ground Station Telemetry. * from version 1.42.34 * api-change:`connect`: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. * api-change:`datazone`: Added api for deleting data export configuration for a domain * api-change:`qconnect`: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. * from version 1.42.33 * api-change:`autoscaling`: This release adds support for Amazon EC2 Auto Scaling group deletion protection * api-change:`budgets`: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. * api-change:`dynamodb`: Adds additional waiters to Amazon DynamoDB. * api-change:`ec2`: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gamelift`: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. * api-change:`guardduty`: Adding new enum value for ScanStatusReason * api-change:`health`: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. * api-change:`meteringmarketplace`: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. * api-change:`verifiedpermissions`: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. * from version 1.42.32 * api-change:`bedrock-agentcore`: Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory * api-change:`config`: AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. * api-change:`ec2`: Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. * api-change:`quicksight`: Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs * from version 1.42.31 * api-change:`autoscaling`: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. * api-change:`bedrock-runtime`: Added support for extended prompt caching with one hour TTL. * api-change:`keyspaces`: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) * api-change:`odb`: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. * api-change:`verifiedpermissions`: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. * api-change:`workspaces-instances`: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. * from version 1.42.30 * api-change:`connect`: Adds support to allow customers to create form with Dispute configuration * api-change:`datazone`: This release adds support for numeric filtering and complex free-text searches cases for the Search and SearchListings APIs. * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`launch-wizard`: Added UpdateDeployment, ListDeploymentPatternVersions and GetDeploymentPatternVersion APIs for Launch Wizard * api-change:`resource-explorer-2`: Added ViewName to View-related responses and ServiceViewName to GetServiceView response. * api-change:`sagemaker`: Adding security consideration comments for lcc accessing execution role under root access * from version 1.42.29 * api-change:`cleanrooms`: This release adds support for parameters in PySpark analysis templates. * api-change:`deadline`: AWS Deadline Cloud now supports tagging Budget resources with ABAC for permissions management and selecting up to 16 filter values in the monitor and Search API. * api-change:`ec2`: This release includes documentation updates to support up to four Elastic Volume modifications per Amazon EBS volume within a rolling 24-hour period. * api-change:`ecs`: Adds support for configuring FIPS in AWS GovCloud (US) Regions via a new ECS Capacity Provider field fipsEnabled. When enabled, instances launched by the capacity provider will use a FIPS-140 enabled AMI. Instances will use FIPS-140 compliant cryptographic modules and AWS FIPS endpoints. * api-change:`evs`: A new GetVersions API has been added to retrieve VCF, ESX versions, and EC2 instances provided by Amazon EVS. The CreateEnvironment API now allows you to select a VCF version and the CreateEnvironmentHost API introduces a optional esxVersion parameter. * api-change:`lakeformation`: API Changes for GTCForLocation feature. Includes a new API, GetTemporaryDataLocationCredentials and updates to the APIs RegisterResource and UpdateResource * api-change:`opensearchserverless`: Collection groups in Amazon OpenSearch Serverless enables to organize multiple collections and enable compute resource sharing across collections with different KMS keys. This shared compute model reduces costs by eliminating the need for separate OpenSearch Compute Units (OCUs) for each KMS key. * api-change:`qconnect`: Fix inference configuration shapes for the CreateAIPrompt and UpdateAIPrompt APIs, Modify Text Length Limit for SendMessage API * enhancement:config: Add support for TCP Keep-Alive configuration via BOTOCORE_TCP_KEEPALIVE environment variable * from version 1.42.28 * api-change:`ce`: Cost Categories added support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`connect`: Amazon Connect makes it easier to manage contact center operating hours by enabling automated scheduling for recurring events like holidays and maintenance windows. Set up recurring patterns (weekly, monthly, etc.) or link to another hours of operation to inherit overrides. * api-change:`eks`: Added support for BOTTLEROCKET NVIDIA FIPS AMIs to AMI types in US regions. * api-change:`rds`: no feature changes. model migrated to Smithy * api-change:`redshift`: Adds support for enabling extra compute resources for automatic optimization during create and modify operations in Amazon Redshift clusters. * api-change:`redshift-serverless`: Adds support for enabling extra compute resources for automatic optimization during create and update operations in Amazon Redshift Serverless workgroups. * api-change:`socialmessaging`: This release clarifies WhatsApp template operations as a resource-authenticated operation via the parent WhatsApp Business Account. It also introduces new parameters for parameter format, CTA URL link tracking, and template body examples, and increases the phone number ID length. * Update to 1.42.27 * api-change:`bedrock`: This change will increase TestCase guardContent input size from 1024 to 2028 characters and PolicyBuildDocumentDescription from 2000 to 4000 characters * api-change:`datazone`: Adds support for IAM role subscriptions to Glue table listings via CreateSubscriptionRequest API. Also adds owningIamPrincipalArn filter to List APIs and subscriptionGrantCreationMode parameter to subscription target APIs for controlling grant creation behavior. * from version 1.42.26 * api-change:`billing`: Cost Categories filtering support to BillingView data filter expressions through the new costCategories parameter, enabling users to filter billing views by AWS Cost Categories for more granular cost management and allocation. * api-change:`iot-managed-integrations`: This release introduces WiFi Simple Setup (WSS) enabling device provisioning via barcode scanning with automated network discovery, authentication, and credential provisioning. Additionally, it introduces 2P Device Capability Rediscovery for updating hub-managed device capabilities post-onboarding. * api-change:`sagemaker`: Added ultraServerType to the UltraServerInfo structure to support server type identification for SageMaker HyperPod * from version 1.42.25 * api-change:`bedrock-agentcore-control`: Adds optional field "view" to GetMemory API input to give customers control over whether CMK encrypted data such as strategy decryption or override prompts is returned or not. * api-change:`cloudfront`: Added EntityLimitExceeded exception handling to the following API operations AssociateDistributionWebACL, AssociateDistributionTenantWebACL, UpdateDistributionWithStagingConfig * api-change:`glue`: Adding MaterializedViews task run APIs * api-change:`medialive`: MediaPackage v2 output groups in MediaLive can now accept one additional destination for single pipeline channels and up to two additional destinations for standard channels. MediaPackage v2 destinations now support sending to cross region MediaPackage channels. * api-change:`transcribe`: Adds waiters to Amazon Transcribe. * from version 1.42.24 * api-change:`workspaces`: Add StateMessage and ProgressPercentage fields to DescribeCustomWorkspaceImageImport API response. * from version 1.42.23 * api-change:`ce`: This release updates existing reservation recommendations API to support deployment model. * api-change:`emr-serverless`: Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs. * from version 1.42.22 * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports advanced Spark configurations to optimize SQL performance when creating an MLInputChannel or an audience generation job. * from version 1.42.21 * bugfix:`s3`: Clarify `payload_signing_enabled` documentation to cover interaction with `request_checksum_calculation` * from version 1.42.20 * api-change:`cleanrooms`: Added support for publishing detailed metrics to CloudWatch for operational monitoring of collaborations, including query performance and resource utilization. * api-change:`identitystore`: This change introduces "Roles" attribute for User entities supported by AWS Identity Store SDK. * from version 1.42.19 * api-change:`connect`: Adds support for searching global contacts using the ActiveRegions filter, and pagination support for ListSecurityProfileFlowModules and ListEntitySecurityProfiles. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kafkaconnect`: This change sets the KafkaConnect GovCloud FIPS and FIPS DualStack endpoints to use kafkaconnect instead of kafkaconnect- fips as the service name. This is done to match the Kafka endpoints. * from version 1.42.18 * api-change:`connect`: Changes for Contact for Global Search * api-change:`elastictranscoder`: The elastictranscoder client has been removed following the deprecation of the service. * api-change:`quicksight`: This release adds support for quick users to be able to perform role upgrades on their own. Additionally it allows admins to make this feature admin or auto approval along with new self upgrade capability that can be restricted by Admins. * from version 1.42.17 * api-change:`medialive`: AWS Elemental MediaLive now supports Pipeline Locking using Video Alignment as well as linked single pipeline channels to enable cross-channel and cross-region Pipeline Locking workflows. * from version 1.42.16 * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`geo-places`: Adds support for InferredSecondaryAddress place type, Designator in SecondaryAddressComponent and Heading in ReverseGeocode. * api-change:`pinpoint-sms-voice-v2`: This release adds support for the Registration Reviewer feature, which provides generative AI feedback on a phone number or sender ID registration to ensure completeness before sending to downstream (carrier) review. * api-change:`s3`: Add additional validation to Outpost bucket names. * from version 1.42.15 * api-change:`config`: Added supported resourceTypes for Config from July to November 2025 * api-change:`ec2`: Adds support for linkedGroupId on the CreatePlacementGroup and DescribePlacementGroups APIs. The linkedGroupId parameter is reserved for future use. * api-change:`guardduty`: Make accountIds a required field in GetRemainingFreeTrialDays API to reflect service behavior. * api-change:`pcs`: Change API Reference Documentation for default Mode in Accounting and SlurmRest * from version 1.42.14 * api-change:`arc-region-switch`: Automatic Plan Execution Reports allow customers to maintain a concise record of their Region switch Plan executions. This enables customer SREs and leadership to have a clear view of their recovery posture based on the generated reports for their Plan executions. * api-change:`connect`: Adding support for Custom Metrics and Pre-Defined Attributes to GetCurrentMetricData API. * api-change:`emr-serverless`: Added JobLevelCostAllocationConfiguration field to enable cost allocation reporting at the job level, providing more granular visibility into EMR Serverless charges * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: This release adds event-based logging feature that enables granular event logging controls for AWS IoT logs. * api-change:`qbusiness`: It is a internal bug fix for region expansion * api-change:`wickr`: AWS Wickr now provides a suite of admin APIs to allow you to programmatically manage secure communication for Wickr networks at scale. These APIs enable you to automate administrative workflows including user lifecycle management, network configuration, and security group administration. * api-change:`workspaces-web`: Add support for WebAuthn under user settings. * from version 1.42.13 * api-change:`appstream`: Added support for new operating systems (1) Ubuntu 24.04 Pro LTS on Elastic fleets, and (2) Microsoft Server 2025 on Always-On and On-Demand fleets * api-change:`arc-region-switch`: New API to list Route 53 health checks created by ARC region switch for a plan in a specific AWS Region using the Region switch Regional data plane. * api-change:`artifact`: Add support for ListReportVersions API for the calling AWS account. * api-change:`bedrock-agentcore-control`: Feature to support header exchanges between Bedrock AgentCore Gateway Targets and client, along with propagating query parameter to the configured targets. * api-change:`bedrock-data-automation`: Blueprint Optimization (BPO) is a new Amazon Bedrock Data Automation (BDA) capability that improves blueprint inference accuracy using example content assets and ground truth data. BPO works by generating better instructions for fields in the Blueprint using provided data. * api-change:`cleanrooms`: Adding support for collaboration change requests requiring an approval workflow. Adding support for change requests that grant or revoke results receiver ability and modifying auto approved change types in an existing collaboration. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateFleet, ModifyFleet, DescribeFleets, RequestSpotFleet, ModifySpotFleetRequests and DescribeSpotFleetRequests APIs. * api-change:`ecr`: Adds support for ECR Create On Push * api-change:`ecs`: Adding support for Event Windows via a new ECS account setting "fargateEventWindows". When enabled, ECS Fargate will use the configured event window for patching tasks. Introducing "CapacityOptionType" for CreateCapacityProvider API, allowing support for Spot capacity for ECS Managed Instances. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iot`: This release adds message batching for the IoT Rules Engine HTTP action. * api-change:`opensearch`: Amazon OpenSearch Service adds support for warm nodes, enabling new multi-tier architecture. * api-change:`sesv2`: Amazon SES introduces Email Validation feature which checks email addresses for syntax errors, domain validity, and risky addresses to help maintain deliverability and protect sender reputation. SES also adds resource tagging and ABAC support for EmailTemplates and CustomVerificationEmailTemplates. * api-change:`ssm-sap`: Added "Stopping" for the HANA Database Status. * from version 1.42.12 * api-change:`gameliftstreams`: Added new stream group operation parameters for scale-on-demand capacity with automatic prewarming. Added new Gen6 stream classes based on the EC2 G6 instance family. Added new StartStreamSession parameter for exposure of real-time performance stats to clients. * api-change:`guardduty`: Add support for dbiResourceId in finding. * api-change:`inspector-scan`: Adds an additional OutputFormat * api-change:`kafkaconnect`: Support dual-stack network connectivity for connectors via NetworkType field. * api-change:`mediaconvert`: Adds support for tile encoding in HEVC and audio for video overlays. * api-change:`mediapackagev2`: This release adds support for SPEKE V2 content key encryption in MediaPackage v2 Origin Endpoints. * api-change:`payment-cryptography`: Support for AS2805 standard. Modifications to import-key and export-key to support AS2805 variants. * api-change:`payment-cryptography-data`: Support for AS2805 standard. New API GenerateAs2805KekValidation and changes to translate pin, GenerateMac and VerifyMac to support AS2805 key variants. * api-change:`sagemaker`: Adding the newly launched p6-b300.48xlarge ec2 instance support in Sagemaker(Hyperpod,Training and Sceptor) * from version 1.42.11 * api-change:`iot`: Add support for dynamic payloads in IoT Device Management Commands * api-change:`timestream-influxdb`: This release adds support for rebooting InfluxDB DbInstances and DbClusters * from version 1.42.10 * api-change:`bedrock-agentcore-control`: This release updates broken links for AgentCore Policy APIs in the AWS CLI and SDK resources. * api-change:`connect`: Amazon Connect now supports outbound WhatsApp contacts via the Send message block or StartOutboundChatContact API. Send proactive messages for surveys, reminders, and updates. Offer customers the option to switch to WhatsApp while in queue, eliminating hold time. * api-change:`ec2`: EC2 Capacity Manager now supports SpotTotalCount, SpotTotalInterruptions and SpotInterruptionRate metrics for both vCPU and instance units. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`entityresolution`: Support Customer Profiles Integration for AWS Entity Resolution * api-change:`glacier`: Documentation updates for Amazon Glacier's maintenance mode * api-change:`health`: Updating Health API endpoint generation for dualstack only regions * api-change:`logs`: This release allows you to import your historical CloudTrail Lake data into CloudWatch with a few steps, enabling you to easily consolidate operational, security, and compliance data in one place. * api-change:`mediatailor`: Added support for Ad Decision Server Configuration enabling HTTP POST requests with custom bodies, headers, GZIP compression, and dynamic variables. No changes required for existing GET request configurations. * api-change:`route53resolver`: Adds support for enabling detailed metrics on Route 53 Resolver endpoints using RniEnhancedMetricsEnabled and TargetNameServerMetricsEnabled in the CreateResolverEndpoint and UpdateResolverEndpoint APIs, providing enhanced visibility into Resolver endpoint and target name server performance. * api-change:`s3`: This release adds support for the new optional field 'LifecycleExpirationDate' in S3 Inventory configurations. * api-change:`service-quotas`: Add support for SQ Dashboard Api * from version 1.42.9 * api-change:`bcm-recommended-actions`: Added new freetier action types to RecommendedAction.type. * api-change:`connect`: Amazon Connect now offers automated post-chat surveys triggered when customers end conversations. This captures timely feedback while experience is fresh, using either a no-code form builder or Amazon Lex-powered interactive surveys. * api-change:`datasync`: Adds Enhanced mode support for NFS and SMB locations. SMB credentials are now managed via Secrets Manager, and may be encrypted with service or customer managed keys. Increases AgentArns maximum count to 8 (max 4 per TaskMode). Adds folder counters to DescribeTaskExecution for Enhanced mode tasks. * api-change:`workspaces-web`: Adds support for portal branding customization, enabling administrators to personalize end-user portals with custom assets. * from version 1.42.8 * api-change:`lambda`: Add Dotnet 10 (dotnet10) support to AWS Lambda. * api-change:`organizations`: Add support for policy operations on the NETWORK SECURITY DIRECTOR POLICY policy type. * api-change:`quicksight`: This release adds new GetIdentityContext API, Dashboard customization options for tables and pivot tables, Visual styling options- borders and decals, map GeocodingPreferences, KeyPairCredentials for DataSourceCredentials. Snapshot APIs now support registered users. Parameters limit increased to 400 * api-change:`secretsmanager`: Add SortBy parameter to ListSecrets * api-change:`sesv2`: Update GetEmailIdentity and CreateEmailIdentity response to include SigningHostedZone in DkimAttributes. Updated PutEmailIdentityDkimSigningAttributes Response to include SigningHostedZone. * from version 1.42.7 * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails is capable of generating policy scenarios to validate policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API now adds POLICY SCENARIO asset type, allowing customers to retrieve scenarios generated by the build workflow. * api-change:`billingconductor`: Launch itemized custom line item and service line item filter * api-change:`cloudwatch`: This release introduces two additional protocols AWS JSON 1.1 and Smithy RPC v2 CBOR, replacing the currently utilized one, AWSQuery. AWS SDKs will prioritize the protocol that is the most performant for each language. * api-change:`odb`: The following APIs now return CloudExadataInfrastructureArn and OdbNetworkArn fields for improved resource identification and AWS service integration - GetCloudVmCluster, ListCloudVmClusters, GetCloudAutonomousVmCluster, and ListCloudAutonomousVmClusters. * api-change:`opensearch`: The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption. * api-change:`partnercentral-selling`: Adds support for the new Project.AwsPartition field on Opportunity and AWS Opportunity Summary. Use this field to specify the AWS partition where the opportunity will be deployed. * api-change:`signer`: Adds support for Signer GetRevocationStatus with updated endpoints * Update to 1.42.6 * api-change:`account`: This release adds a new API (GetGovCloudAccountInformation) used to retrieve information about a linked GovCloud account from the standard AWS partition. * api-change:`appsync`: Update Event API to require EventConfig parameter in creation and update requests. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Adding support for Ec2LaunchTemplate Version field * api-change:`ivs-realtime`: Token Exchange introduces seamless token exchange capabilities for IVS RTX, enabling customers to upgrade or downgrade token capabilities and update token attributes within the IVS client SDK without forcing clients to disconnect and reconnect. * api-change:`mgn`: Added parameters encryption, IPv4/IPv6 protocol configuration, and enhanced tagging support for replication operations. * api-change:`route53`: Amazon Route 53 now supports the EU (Germany) Region (eusc-de-east-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * Update to 1.42.5 * api-change:`ce`: Add support for Cost Category resource associations including filtering by resource type on ListCostCategoryDefinitions and new ListCostCategoryResourceAssociations API. * api-change:`ec2`: Amazon EC2 P6-B300 instances provide 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. Amazon EC2 C8a instances are powered by 5th Gen AMD EPYC processors with a maximum frequency of 4.5 GHz. * api-change:`identitystore`: Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support. * api-change:`partnercentral-selling`: Deal Sizing Service for AI-based deal size estimation with AWS service-level breakdown, supporting Expansion and Migration deals across Technology, and Reseller partner cohorts, including Pricing Calculator AddOn for MAP deals and funding incentives. * api-change:`rds`: Adding support for tagging RDS Instance/Cluster Automated Backups * api-change:`redshift-serverless`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated serverless workgroups. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`rolesanywhere`: Increases certificate string length for trust anchor source data to support ML-DSA certificates. * api-change:`sesv2`: Update Mail Manager Archive ARN validation * enhancement:ContainerProvider: The ContainerProvider now works with arbitray HTTPS URLs for `AWS_CONTAINER_CREDENTIALS_FULL_URI`. * from version 1.42.4 * api-change:`ecs`: Updating stop-task API to encapsulate containers with custom stop signal * api-change:`iam`: Adding the ExpirationTime attribute to the delegation request resource. * api-change:`inspector2`: This release adds a new ScanStatus called "Unsupported Code Artifacts". This ScanStatus will be returned when a Lambda function was not code scanned because it has unsupported code artifacts. * api-change:`partnercentral-account`: Adding Verification API's to Partner Central Account SDK. * api-change:`sesv2`: Updating the desired url for `PutEmailIdentityDkimSigningAttributes` from v1 to v2 * enhancement:AWSCRT: Update awscrt version to 0.29.2 * from version 1.42.3 * api-change:`lambda`: Add DisallowedByVpcEncryptionControl to the LastUpdateStatusReasonCode and StateReasonCode enums to represent failures caused by VPC Encryption Controls. * from version 1.42.2 * api-change:`bedrock`: Adding support in Amazon Bedrock to customize models with reinforcement fine-tuning (RFT) and support for updating the existing Custom Model Deployments. * api-change:`sagemaker`: Introduces Serverless training: A fully managed compute infrastructure that abstracts away all infrastructure complexity, allowing you to focus purely on model development. Added AI model customization assets used to train, refine, and evaluate custom models during the model customization process. * from version 1.42.1 * api-change:`bedrock`: Adds the audioDataDeliveryEnabled boolean field to the Model Invocation Logging Configuration. * api-change:`bedrock-agentcore`: Support for AgentCore Evaluations and Episodic memory strategy for AgentCore Memory. * api-change:`bedrock-agentcore-control`: Supports AgentCore Evaluations, Policy, Episodic Memory Strategy, Resource Based Policy for Runtime and Gateway APIs, API Gateway Rest API Targets and enhances JWT authorizer. * api-change:`bedrock-runtime`: Adds support for Audio Blocks and Streaming Image Output plus new Stop Reasons of malformed_model_output and malformed_tool_use. * api-change:`ce`: This release updates existing Savings Plans Purchase Analyzer and Recommendations APIs to support Database Savings Plans. * api-change:`datazone`: Amazon DataZone now supports exporting Catalog datasets as Amazon S3 tables, and provides automatic business glossary term suggestions for data assets. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: S3 Access Points support for FSx for NetApp ONTAP * api-change:`guardduty`: Adding support for extended threat detection for Amazon EC2 and Amazon ECS. Adding support for wild card suppression rules. * api-change:`lambda`: Launching Lambda durable functions - a new feature to build reliable multi-step applications and AI workflows natively within the Lambda developer experience. * api-change:`logs`: CloudWatch Logs adds managed S3 Tables integration to access logs using other analytical tools, as well as facets and field indexing to simplify log analytics in CloudWatch Logs Insights. * api-change:`nova-act`: Initial release of Nova Act SDK. The Nova Act service enables customers to build and manage fleets of agents for automating production UI workflows with high reliability, fastest time-to-value, and ease of implementation at scale. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds pipelines configuration for third party log ingestion and transformation of all logs ingested, integration of CloudWatch logs with S3 Tables, and AWS account or organization level enablement for 7 AWS services. * api-change:`opensearch`: GPU-acceleration helps you build large-scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`opensearchserverless`: GPU-acceleration helps you build large- scale vector databases faster and more efficiently. You can enable this feature on new OpenSearch domains and OpenSearch Serverless collections. This feature uses GPU-acceleration to reduce the time needed to index data into vector indexes. * api-change:`rds`: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. * api-change:`s3`: New S3 Storage Class FSX_ONTAP * api-change:`s3control`: Add support for S3 Storage Lens Advanced Performance Metrics, Expanded Prefixes metrics report, and export to S3 Tables. * api-change:`s3tables`: Add storage class, replication, and table record expiration features to S3 Tables. * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added support for serverless MLflow Apps. Added support for new HubContentTypes (DataSet and JsonDoc) in Private Hub for AI model customization assets, enabling tracking and management of training datasets and evaluators (reward functions/prompts) throughout the ML lifecycle. * api-change:`savingsplans`: Added support for Amazon Database Savings Plans * api-change:`securityhub`: ITSM enhancements: DRYRUN mode for testing ticket creation, ServiceNow now uses AWS Secrets Manager for credentials, ConnectorRegistrationsV2 renamed to RegisterConnectorV2, added ServiceQuotaExceededException error, and ConnectorStatus visibility in CreateConnectorV2. * from version 1.41.6 * api-change:`appintegrations`: This release adds support for MCP servers via the ApplicationType field, allowing customers to register their Bedrock AgentCore gateways as third party applications. * api-change:`bedrock-agent`: Support audio and video ingestion on Bedrock Knowledge Bases. * api-change:`bedrock-agent-runtime`: Support audio and video content retrieval on Bedrock Knowledge Bases. * api-change:`cleanrooms`: AWS Clean Rooms now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`cleanroomsml`: AWS Clean Rooms ML now supports privacy-enhancing synthetic dataset generation for custom ML training. * api-change:`connect`: This is a combined re:Invent release for Amazon Connect. * api-change:`connectcampaignsv2`: This release added support for new WhatsApp channel and Journey type outbound campaign * api-change:`connectparticipant`: Amazon Connect now supports message processing that intercepts and processes chat messages before they reach any participant. * api-change:`customer-profiles`: This release introduces, CRUD APIs for the DomainObjectType and Recommender resources, APIs to offer statistical insights on Object Type Attributes, Changes to SegmentDefinition APIs to support SQL queries to create Segments, and Changes to Domain APIs to support Data Store. * api-change:`eks`: This release adds support for EKS Capabilities * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: feature: Glue: Add support for Iceberg materialized view in Glue Data Catalog, including updated CreateTable API to support materialized views and new APIs for managing data refresh for materialized views. feature: Glue: Add support for Iceberg table encryption keys and struct field defaults. * api-change:`lambda`: Launching Lambda Managed Instances - a new feature to run Lambda on EC2. * api-change:`lexv2-models`: Adds support for speech-to-speech models for human-like, adaptive, and expressive voice interactions. Also adds support for speech model preference, allowing customers to select which speech model they want to use for speech-to-text requests. * api-change:`marketplace-agreement`: This release supports 1/multi-product transactions via offer sets. DescribeAgreement and SearchAgreements APIs now return offer set IDs. SearchAgreements also supports filtering by offer set ID and 2/variable payment pricing terms will be returned through GetAgreementTerms. * api-change:`marketplace-catalog`: This release introduces offer set entity in AWS Marketplace Catalog API to enable multi-product transaction. Offer set enables sellers to group multiple private offers into a single-click purchase experience, simplifying procurement for customers purchasing multi- product solutions. * api-change:`partnercentral-account`: Initial GA launch of Partner Central Account * api-change:`partnercentral-benefits`: Initial GA launch of Partner Central Benefits * api-change:`partnercentral-selling`: New Features: Lead Management APIs for capturing and nurturing leads Lead invitation support for partner collaboration Lead-to-opportunity conversion operations AWS Marketplace OfferSets support for opportunities * api-change:`personalize`: This release adds support for includedDatasetColumns and performIncrementalUpdate in solution APIs, and rankingInfluence in campaign and batch inference APIs. * api-change:`qconnect`: New AIAgent types: Orchestration for ModelContextProtocol tool integration, CaseSummary for Amazon Connect Case summaries, NoteTaker for Agent Assistance notes. Added ListSpans and Retrieve APIs. Enhanced Q in Connect AssistantAssociationType to support Bring Your Own Bedrock Knowledge Bases. * api-change:`route53globalresolver`: Add SDK for Amazon Route 53 Global Resolver, a fully managed DNS resolver service that offers broad DNS- filtering security controls. * enhancement:AWSCRT: Update awscrt version to 0.29.1 * from version 1.41.5 * api-change:`bedrock-runtime`: Bedrock Runtime Reserved Service Support * api-change:`compute-optimizer`: Compute Optimizer now identifies idle NAT Gateway resources for cost optimization based on traffic patterns and backup configuration analysis. Access recommendations via the GetIdleRecommendations API. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for NAT Gateway. * from version 1.41.4 * api-change:`ec2`: This release adds support to view Network firewall proxy appliances attached to an existing NAT Gateway via DescribeNatGateways API NatGatewayAttachedAppliance structure. * api-change:`network-firewall`: Network Firewall release of the Proxy feature. * api-change:`organizations`: Add support for policy operations on the S3_POLICY and BEDROCK_POLICY policy type. * api-change:`route53`: Adds support for new route53 feature: accelerated recovery. * Update to 1.41.3 * api-change:`cloudfront`: Add TrustStore, ConnectionFunction APIs to CloudFront SDK * api-change:`logs`: New CloudWatch Logs feature - LogGroup Deletion Protection, a capability that allows customers to safeguard their critical CloudWatch log groups from accidental or unintended deletion. * enhancement:awscrt: Update awscrt version to 0.29.0 * from version 1.41.2 * api-change:`apigateway`: API Gateway supports VPC link V2 for REST APIs. * api-change:`athena`: Introduces Spark workgroup features including log persistence, S3/CloudWatch delivery, UI and History Server APIs, and SparkConnect 3.5.6 support. Adds DPU usage limits at workgroup and query levels as well as DPU usage tracking for Capacity Reservation queries to optimize performance and costs. * api-change:`bedrock`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`bedrock-agentcore-control`: Support for agentcore gateway interceptor configurations and NONE authorizer type * api-change:`bedrock-data-automation-runtime`: Adding new fields to GetDataAutomationStatus: jobSubmissionTime, jobCompletionTime, and jobDurationInSeconds * api-change:`bedrock-runtime`: Add support to automatically enforce safeguards across accounts within an AWS Organization. * api-change:`cloudformation`: Adds the DependsOn field to the AutoDeployment configuration parameter for CreateStackSet, UpdateStackSet, and DescribeStackSet APIs, allowing users to set and read auto-deployment dependencies between StackSets * api-change:`compute-optimizer-automation`: Initial release of AWS Compute Optimizer Automation. Create automation rules to implement recommended actions on a recurring schedule based on your specified criteria. Supported actions include: snapshot and delete unattached EBS volumes and upgrade volume types to the latest generation. * api-change:`connect`: New APIs to support aliases and versions for ContactFlowModule. Updated ContactFlowModule APIs to support custom blocks. * api-change:`controltower`: The manifest field is now optional for the AWS Control Tower CreateLandingZone and UpdateLandingZone APIs for Landing Zone version 4.0 * api-change:`ec2`: This release adds a new capability to create and manage interruptible EC2 Capacity Reservations. * api-change:`ecr`: Add support for ECR managed signing * api-change:`eks`: Adds support for controlPlaneScalingConfig on EKS Clusters. * api-change:`elbv2`: This release adds the health check log feature in ALB, allowing customers to send detailed target health check log data directly to their designated Amazon S3 bucket. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`invoicing`: Added the CreateProcurementPortalPreference, GetProcurementPortalPreference, PutProcurementPortalPreference, UpdateProcurementPortalPreferenceStatus, ListProcurementPortalPreferences and DeleteProcurementPortalPreference APIs for procurement portal preference management. * api-change:`kinesisvideo`: This release adds support for Tiered Storage * api-change:`kms`: Support for on-demand rotation of AWS KMS Multi-Region keys with imported key material * api-change:`lambda`: Launching Enhanced Error Handling and ESM Grouping capabilities for Kafka ESMs * api-change:`lexv2-models`: Adds support for Intent Disambiguation, allowing resolution of ambiguous user inputs when multiple intents match by presenting clarifying questions to users. Also adds Speech Detection Sensitivity configuration for optimizing voice activity detection sensitivity levels in various noise environments. * api-change:`mailmanager`: Add support for resources in the aws-eusc partition. * api-change:`marketplace-entitlement`: Endpoint update for new region * api-change:`mediapackagev2`: Adds support for excluding session key tags from HLS multivariant playlists * api-change:`meteringmarketplace`: Endpoint update for new region * api-change:`odb`: Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API. * api-change:`organizations`: Add support for policy operations on the UPGRADE_ROLLOUT_POLICY policy type. * api-change:`qconnect`: This release introduces two new messaging channel subtypes: Push, WhatsApp, under MessageTemplate which is a resource in Amazon Q in Connect. * api-change:`quicksight`: Amazon Quick Suite now supports QuickChat as an embedding type when calling the GenerateEmbedUrlForRegisteredUser API, enabling developers to embed conversational AI agents directly into their applications. * api-change:`rds`: Add support for Upgrade Rollout Order * api-change:`redshift`: Added support for Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation. * api-change:`redshift-serverless`: Added UpdateLakehouseConfiguration API to manage Amazon Redshift Federated Permissions and AWS IAM Identity Center trusted identity propagation for namespaces. * api-change:`sagemaker`: Enhanced SageMaker HyperPod instance groups with support for MinInstanceCount, CapacityRequirements (Spot/On-Demand), and KubernetesConfig (labels and taints). Also Added speculative decoding and MaxInstanceCount for model optimization jobs. * api-change:`security-ir`: Add ListInvestigations and SendFeedback APIs to support SecurityIR AI agents * api-change:`sesv2`: Added support for new SES regions - Asia Pacific (Malaysia) and Canada (Calgary) * api-change:`transfer`: Adds support for creating Webapps accessible from a VPC. * from version 1.41.1 * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports un-instrumented services discovery, cross-account views, and change history, helping SRE and DevOps teams monitor and troubleshoot their large- scale distributed applications. * api-change:`autoscaling`: This release adds support for three new features: 1) Image ID overrides in mixed instances policy, 2) Replace Root Volume - a new strategy for Instance Refresh, and 3) Instance Lifecycle Policy for enhanced instance lifecycle management. * api-change:`bedrock-agentcore`: Bedrock AgentCore Memory release for redriving memory extraction jobs (StartMemoryExtractionJob and ListMemoryExtractionJob) * api-change:`bedrock-data-automation`: Added support for Synchronous project type and PII Detection and Redaction * api-change:`bedrock-data-automation-runtime`: Bedrock Data Automation Runtime Sync API * api-change:`braket`: Add support for Braket spending limits. * api-change:`budgets`: Add BillingViewHealthStatusException to DescribeBudgetPerformanceHistory and ServiceQuotaExceededException to UpdateBudget for improved error handling with Billing Views. * api-change:`cloudfront`: This release adds support for bring your own IP (BYOIP) to CloudFront's CreateAnycastIpList API through an optional IpamCidrConfigs field. * api-change:`cloudtrail`: AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic. * api-change:`connect`: Add optional ability to exclude users from send notification actions for Contact Lens Rules. * api-change:`datasync`: The partition value "aws-eusc" is now permitted for ARN (Amazon Resource Name) fields. * api-change:`devicefarm`: Add support for environment variables and an IAM execution role. * api-change:`dms`: Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses. * api-change:`dsql`: Added clusterVpcEndpoint field to GetVpcEndpointServiceName API response, returning the VPC connection endpoint for the cluster * api-change:`ec2`: This release adds support for multiple features including: VPC Encryption Control for the status of traffic flow; S2S VPN BGP Logging; TGW Flexible Costs; IPAM allocation of static IPs from IPAM pools to CF Anycast IP lists used on CloudFront distribution; and EBS Volume Integration with Recycle Bin * api-change:`ecs`: Launching Amazon ECS Express Mode - a new feature that enables developers to quickly launch highly available, scalable containerized applications with a single command. * api-change:`elbv2`: This release adds the target optimizer feature in ALB, enabling strict concurrency enforcement on targets. * api-change:`emr`: Add support for configuring S3 destination for step logs on a per-step basis. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Added FunctionType parameter to Glue GetuserDefinedFunctions. * api-change:`imagebuilder`: EC2 Image Builder now enables the distribution of existing AMIs, retry distribution, and define distribution workflows. It also supports automatic versioning for recipes and components, allowing automatic version increments and dynamic referencing in pipelines. * api-change:`kinesis`: Kinesis Data Streams now supports up to 50 Enhance Fan-out consumers for On-demand Advantage Streams. On-demand Standard and Provisioned streams will continue with the existing limit of 20 consumers for Enhanced Fan-out. * api-change:`lakeformation`: Added ServiceIntegrations as a request parameter for CreateLakeFormationIdentityCenterConfigurationRequest and UpdateLakeFormationIdentityCenterConfigurationRequest and response parameter for DescribeLakeFormationIdentityCenterConfigurationResponse * api-change:`license-manager`: Added cross-account resource aggregation via license asset groups and expiry tracking for Self-Managed Licenses. Extended Org-Wide View to Self-Managed Licenses, added reporting for license asset groups, and removed Athena/Glue dependencies for cross-account resource discovery in commercial regions. * api-change:`networkmanager`: This release adds support for Cloud WAN Routing Policy providing customers sophisticated routing controls to better manage their global networks * api-change:`organizations`: Added new APIs for Billing Transfer, new policy type INSPECTOR_POLICY, and allow an account to transfer between organizations * api-change:`quicksight`: Introducing comprehensive theme styling controls. New features include border customization (radius, width, color), flexible padding controls, background styling for cards and sheets, centralized typography management, and visual-level override support across layouts. * api-change:`rbin`: Add support for EBS volume in Recycle Bin * api-change:`rds`: Add support for VPC Encryption Controls. * api-change:`redshift-data`: Increasing the length limit of Statement Name from 500 to 2048. * api-change:`s3`: Enable / Disable ABAC on a general purpose bucket. * api-change:`sagemaker`: Added training plan support for inference endpoints. Added HyperPod task governance with accelerator partition-based quota allocation. Added BatchRebootClusterNodes and BatchReplaceClusterNodes APIs. Updated ListClusterNodes to include privateDnsHostName. * api-change:`securityhub`: Release Findings and Resources Trends APIs- GetFindingsTrendsV2 and GetResourcesTrendsV2. This supports time-series aggregated counts with composite filtering for 1-year of historical data analysis of Findings and Resources. * from version 1.41.0 * api-change:`apigateway`: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names. * api-change:`apigatewayv2`: Support for API Gateway portals and portal products. * api-change:`backup`: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups. * api-change:`bcm-pricing-calculator`: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario. * api-change:`bedrock-runtime`: This release includes support for Search Results. * api-change:`billing`: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name. * api-change:`billingconductor`: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor. * api-change:`ce`: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors * api-change:`cloudtrail`: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations. * api-change:`connectcampaignsv2`: This release added support for ring timer configuration for campaign calls. * api-change:`cost-optimization-hub`: Release ListEfficiencyMetrics API * api-change:`datazone`: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit. * api-change:`dynamodb`: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes. * api-change:`ec2`: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability. * api-change:`ecr`: Add support for ECR archival storage class and Inspector org policy for scanning * api-change:`ecs`: Added support for Amazon ECS Managed Instances infrastructure optimization configuration. * api-change:`emr`: Add CloudWatch Logs integration for Spark driver, executor and step logs * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Adding File Server Resource Manager configuration to FSx Windows * api-change:`guardduty`: Add support for scanning and viewing scan results for backup resource types * api-change:`health`: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter. * api-change:`iam`: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature. * api-change:`inspector2`: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR. * api-change:`invoicing`: Add support for adding Billing transfers in Invoice configuration * api-change:`lambda`: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs. * api-change:`logs`: Adding support for ocsf version 1.5, add optional parameter MappingVersion * api-change:`mediaconnect`: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet. * api-change:`medialive`: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel. * api-change:`network-firewall`: Partner Managed Rulegroup feature support * api-change:`networkflowmonitor`: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource * api-change:`partnercentral-channel`: Initial GA launch of Partner Central Channel * api-change:`route53`: Add dual-stack endpoint support for Route53 * api-change:`rum`: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms * api-change:`s3`: Adds support for blocking SSE-C writes to general purpose buckets. * api-change:`sagemaker`: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins * api-change:`secretsmanager`: Adds support to create, update, retrieve, rotate, and delete managed external secrets. * api-change:`signin`: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In. * api-change:`stepfunctions`: Adds support to TestState for mocked results and exceptions, along with additional inspection data. * api-change:`sts`: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens. * feature:credentials: Adds support for the login credential provider, allowing users to use AWS Management Console credentials for authentication. * from version 1.40.76 * api-change:`autoscaling`: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. * api-change:`backup`: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. * api-change:`bedrock-runtime`: Amazon Bedrock Runtime Service Tier Support Launch * api-change:`cloudformation`: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. * api-change:`connect`: This release added support for ring timer configuration for campaign calls. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. * api-change:`iam`: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. * api-change:`kafka`: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. * api-change:`logs`: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. * api-change:`resourcegroupstaggingapi`: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. * api-change:`storagegateway`: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. * api-change:`wafv2`: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. * from version 1.40.75 * api-change:`appstream`: Adding support for additional instances and extended storage * api-change:`backup`: AWS Backup now supports specifying a logically air- gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. * api-change:`bedrock`: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. * api-change:`devicefarm`: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface * api-change:`dms`: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. * api-change:`ec2`: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`glue`: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). * api-change:`guardduty`: Add S3 On-Demand Object Scanning * api-change:`lexv2-models`: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. * api-change:`medialive`: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. * api-change:`mediapackagev2`: Add support for SCTE messages in Segment file output * api-change:`mwaa-serverless`: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. * api-change:`opensearch`: This release adds index operation APIs to support Automatic Semantic Enrichment feature * api-change:`pcs`: Added support for the managed Slurm REST API endpoint * api-change:`route53resolver`: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection * from version 1.40.74 * api-change:`datazone`: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. * api-change:`imagebuilder`: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. * api-change:`medialive`: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. * enhancement:AWSCRT: Update awscrt version to 0.28.4 * from version 1.40.73 * api-change:`cloudformation`: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. * api-change:`controlcatalog`: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. * api-change:`ec2`: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. * api-change:`ecr`: Add Amazon ECR FIPS PrivateLink endpoint support * api-change:`elbv2`: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`iotwireless`: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices * api-change:`mediaconvert`: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. * api-change:`rds`: Updated endpoint and service metadata * api-change:`sagemaker`: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. * api-change:`workspaces-web`: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. * from version 1.40.72 * api-change:`amp`: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. * api-change:`connect`: Updated Authentication Profile APIs to add support for automatic logout on user inactivity * api-change:`dms`: Added support of SQL statements creation, metadata model discovery and selection rules transformation. * api-change:`ec2`: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI * api-change:`elbv2`: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. * api-change:`redshift`: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. * api-change:`s3tables`: Adds support for request metrics metrics APIs for S3 Tables * api-change:`sagemaker`: Add support for trn2.3xlarge instance type for SageMaker Hyperpod * from version 1.40.71 * api-change:`batch`: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. * api-change:`bedrock-data-automation`: Added support for Language Expansion feature for BDA Audio modality. * api-change:`ec2`: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`medical-imaging`: Added new fields in existing APIs. * api-change:`rtbfabric`: Added LogSettings and LinkAttribute fields to external links * api-change:`security-ir`: Added support for configuring communication preferences as well as clearly displaying case comment author identities. * from version 1.40.70 * api-change:`acm-pca`: Private Certificate Authority service now supports ML- DSA key algorithms. * api-change:`appstream`: AWS Appstream support for IPv6 * api-change:`backup`: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). * api-change:`braket`: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. * api-change:`datazone`: Remove trackingServerName from DataZone Connection MLflowProperties * api-change:`dsql`: Cluster endpoint added to CreateCluster and GetCluster API responses * api-change:`ec2`: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. * api-change:`guardduty`: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. * api-change:`iam`: Added CreateDelegationRequest API, which is not available for general use at this time. * api-change:`invoicing`: Added new invoicing get-invoice-pdf API Operation * api-change:`kafka`: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. * api-change:`sts`: Added GetDelegatedAccessToken API, which is not available for general use at this time. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. * api-change:`wafv2`: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. * from version 1.40.69 * api-change:`controltower`: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs * api-change:`ec2`: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service * api-change:`kms`: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec * api-change:`opensearch`: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. * api-change:`vpc-lattice`: Amazon VPC Lattice now supports custom domain name for resource configurations * from version 1.40.68 * api-change:`accessanalyzer`: New field totalActiveErrors added to getFindingsStatistics response. * api-change:`backup`: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. * api-change:`connect`: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. * api-change:`ec2`: Add Amazon EC2 R8a instance types * api-change:`gamelift`: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. * api-change:`identitystore`: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. * api-change:`quicksight`: Support for New Data Prep Experience * api-change:`s3tables`: Adds support for tagging APIs for S3 Tables * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. * api-change:`ssm`: Provides NoLongerSupportedException error message * from version 1.40.67 * api-change:`cloudfront`: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts * api-change:`datazone`: Added support for Project Resource Tags * api-change:`ec2`: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. * api-change:`groundstation`: Introduce CreateDataflowEndpointGroupV2 action * api-change:`s3`: Launch IPv6 dual-stack support for S3 Express * api-change:`sagemaker`: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . * from version 1.40.66 * api-change:`pinpoint-sms-voice-v2`: This release adds support for the CarrierLookup API, which returns information about a destination phone number including if the number is valid, the carrier, and more. * from version 1.40.65 * api-change:`bedrock-agentcore-control`: Adds support for direct code deploy with CreateAgentRuntime and UpdateAgentRuntime * api-change:`budgets`: Fix the AWS Budgets endpoint for the aws-eusc partition. * api-change:`ec2`: Add Amazon EC2 trn2.3xlarge instance type. * api-change:`ecs`: Documentation-only update for LINEAR and CANARY deployment strategies. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kinesis`: Adds support for MinimumThroughputBillingCommitment with new UpdateAccountSettings API. Adds support to configure warm throughput for on-demand streams in new UpdateStreamWarmThroughput API and existing CreateStream API and UpdateStreamMode API. * from version 1.40.64 * api-change:`connectcases`: Added two new case rule types: Parent Child Field Options (restricts child field options based on parent field value) and Hidden (controls child field visibility based on parent field value). Both enable dynamic field behavior within templates. * api-change:`ec2`: Amazon VPC IP Address Manager (IPAM) now supports automated prefix list management, allowing you to create rules that automatically populate customer-managed prefix lists with CIDRs from your IPAM pools or AWS resources based on tags, Regions, or other criteria. * api-change:`emr`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fms`: Update endpoint ruleset parameters casing * api-change:`fsx`: Update endpoint ruleset parameters casing * api-change:`health`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add Python3.14 (python3.14) and Java 25 (java25) support to AWS Lambda * api-change:`logs`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: Update endpoint ruleset parameters casing * api-change:`mediaconvert`: Adds SlowPalPitchCorrection to audio pitch correction settings. Enables opacity for VideoOverlays. Adds REMUX_ALL option to enable multi-rendition passthrough to VideoSelector for allow listed accounts. * api-change:`omics`: Added WDL_LENIENT engine type that enables implicit typecasting of variable values to its compatible declared types * api-change:`payment-cryptography`: Allow additional characters in the CertificateSubject for GetCertificateSigningRequest API. * api-change:`redshift`: Update endpoint ruleset parameters casing * api-change:`resourcegroupstaggingapi`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Allow update of platform identifier via UpdateNotebookInstance operation. * api-change:`savingsplans`: Add dual-stack endpoint support for Savings Plans * api-change:`snowball`: Update endpoint ruleset parameters casing * api-change:`ssm-quicksetup`: Update endpoint ruleset parameters casing * api-change:`textract`: Update endpoint ruleset parameters casing * api-change:`waf`: Update endpoint ruleset parameters casing * from version 1.40.63 * api-change:`amp`: Add Anomaly Detection APIs for Amazon Managed Prometheus * api-change:`apigateway`: Update endpoint ruleset parameters casing * api-change:`appconfig`: Update endpoint ruleset parameters casing * api-change:`appflow`: Update endpoint ruleset parameters casing * api-change:`applicationcostprofiler`: Update endpoint ruleset parameters casing * api-change:`appmesh`: Update endpoint ruleset parameters casing * api-change:`appsync`: Update endpoint ruleset parameters casing * api-change:`artifact`: Update endpoint ruleset parameters casing * api-change:`auditmanager`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore-control`: Web-Bot-Auth support for AgentCore Browser tool to help reduce captcha challenges. * api-change:`chime`: Update endpoint ruleset parameters casing * api-change:`cleanrooms`: Added support for advanced Spark configurations to optimize SQL performance * api-change:`cloudcontrol`: Update endpoint ruleset parameters casing * api-change:`clouddirectory`: Update endpoint ruleset parameters casing * api-change:`cloudsearch`: Update endpoint ruleset parameters casing * api-change:`cloudwatch`: Update endpoint ruleset parameters casing * api-change:`codecatalyst`: Update endpoint ruleset parameters casing * api-change:`codecommit`: Update endpoint ruleset parameters casing * api-change:`codedeploy`: Update endpoint ruleset parameters casing * api-change:`cognito-sync`: Update endpoint ruleset parameters casing * api-change:`compute-optimizer`: Update endpoint ruleset parameters casing * api-change:`connectcases`: Update endpoint ruleset parameters casing * api-change:`deadline`: Update endpoint ruleset parameters casing * api-change:`devops-guru`: Update endpoint ruleset parameters casing * api-change:`docdb`: Adding FailoverState and TagList to GlobalCluster and SynchronizationStatus to GlobalClusterMember. * api-change:`ecs`: Amazon ECS Service Connect now supports Envoy access logs, providing deeper observability into request-level traffic patterns and service interactions. * api-change:`eks-auth`: Update endpoint ruleset parameters casing * api-change:`elasticache`: Update endpoint ruleset parameters casing * api-change:`emr-serverless`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on EMR Serverless Applications. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`firehose`: Update endpoint ruleset parameters casing * api-change:`frauddetector`: Update endpoint ruleset parameters casing * api-change:`geo-places`: Update endpoint ruleset parameters casing * api-change:`glue`: This release adds the capability to enable User Background Sessions for customers running Trusted Identity Propagation enabled Interactive Sessions on AWS Glue. * api-change:`greengrassv2`: Update endpoint ruleset parameters casing * api-change:`iotevents-data`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Add a new GetManagedThingCertificate API to expose Iot ManagedIntegrations (MI) device certificate, and add "-" support for name, properties, actions and events in the CapabilityReportCapability object. * api-change:`keyspacesstreams`: Update endpoint ruleset parameters casing * api-change:`kms`: Add cross account VPC endpoint service connectivity support to CustomKeyStore. * api-change:`license-manager-linux-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-reporting`: Update endpoint ruleset parameters casing * api-change:`neptune`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: RTB Fabric documentation update. * api-change:`s3outposts`: Update endpoint ruleset parameters casing * api-change:`sagemaker-runtime`: Update endpoint ruleset parameters casing * api-change:`schemas`: Update endpoint ruleset parameters casing * api-change:`serverlessrepo`: Update endpoint ruleset parameters casing * api-change:`servicecatalog`: Update endpoint ruleset parameters casing * api-change:`sso`: Update endpoint ruleset parameters casing * api-change:`sts`: Update endpoint ruleset parameters casing * from version 1.40.62 * api-change:`bedrock-runtime`: Add support for system tool and web citation response. * from version 1.40.61 * api-change:`apigatewayv2`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Added support for CloudWatch Synthetics Canary resources in ListAuditFindings API. This enhancement allows customers to retrieve audit findings specifically for CloudWatch Synthetics canaries and enables service-canary correlation analysis. * api-change:`backupsearch`: Update endpoint ruleset parameters casing * api-change:`bcm-pricing-calculator`: Update endpoint ruleset parameters casing * api-change:`bedrock-agent-runtime`: Update endpoint ruleset parameters casing * api-change:`bedrock-runtime`: Update endpoint ruleset parameters casing * api-change:`cleanroomsml`: Update endpoint ruleset parameters casing * api-change:clients: The following clients have been removed per deprecation of the services - qldb, qldb-session, robomaker, lookoutmetrics, lookoutvision, iotfleethub, apptest * api-change:`cloud9`: Update endpoint ruleset parameters casing * api-change:`cloudsearchdomain`: Update endpoint ruleset parameters casing * api-change:`codeconnections`: Update endpoint ruleset parameters casing * api-change:`codeguru-security`: Update endpoint ruleset parameters casing * api-change:`detective`: Update endpoint ruleset parameters casing * api-change:`ec2`: This released the DescribeCapacityReservationTopology API. * api-change:`ecs`: Amazon ECS supports native linear and canary service deployments, allowing you to shift traffic in increments for more control. * api-change:`efs`: Update endpoint ruleset parameters casing * api-change:`elastictranscoder`: Update endpoint ruleset parameters casing * api-change:`emr-containers`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`gameliftstreams`: Add stream group expiration date and expired status * api-change:`glacier`: Update endpoint ruleset parameters casing * api-change:`groundstation`: Enable use of AzEl ephemerides * api-change:`inspector-scan`: Update endpoint ruleset parameters casing * api-change:`kafkaconnect`: Update endpoint ruleset parameters casing * api-change:`kendra`: Update endpoint ruleset parameters casing * api-change:`kinesisvideo`: Update endpoint ruleset parameters casing * api-change:`lambda`: Added SerializedRequestEntityTooLargeException to Lambda Invoke API * api-change:`marketplace-deployment`: Update endpoint ruleset parameters casing * api-change:`mediapackage-vod`: Update endpoint ruleset parameters casing * api-change:`migrationhuborchestrator`: Update endpoint ruleset parameters casing * api-change:`notifications`: Update endpoint ruleset parameters casing * api-change:`opensearch`: Update endpoint ruleset parameters casing * api-change:`organizations`: Added Account State field to the ListDelegatedAdministrators API response. * api-change:`partnercentral-selling`: Update endpoint ruleset parameters casing * api-change:`pipes`: Update endpoint ruleset parameters casing * api-change:`ram`: Update endpoint ruleset parameters casing * api-change:`resource-groups`: Update endpoint ruleset parameters casing * api-change:`s3`: Amazon Simple Storage Service / Features: Add conditional writes in CopyObject on destination key to prevent unintended object modifications. * api-change:`s3control`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Amazon SageMaker now supports deleting training and processing jobs in a terminal status. * api-change:`sagemaker-featurestore-runtime`: Update endpoint ruleset parameters casing * api-change:`security-ir`: Update endpoint ruleset parameters casing * api-change:`servicecatalog-appregistry`: Update endpoint ruleset parameters casing * api-change:`sqs`: Update endpoint ruleset parameters casing * api-change:`support-app`: Update endpoint ruleset parameters casing * api-change:`taxsettings`: Update endpoint ruleset parameters casing * api-change:`trustedadvisor`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Added IPv6 address support for WorkSpaces using Dual-Stack subnets * api-change:`workspaces-instances`: Update endpoint ruleset parameters casing * api-change:`xray`: Update endpoint ruleset parameters casing * from version 1.40.60 * api-change:`accessanalyzer`: Update endpoint ruleset parameters casing * api-change:`aiops`: Update endpoint ruleset parameters casing * api-change:`athena`: Update endpoint ruleset parameters casing * api-change:`backup-gateway`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation`: Update endpoint ruleset parameters casing * api-change:`braket`: Update endpoint ruleset parameters casing * api-change:`ce`: Updated endpoint for eusc-de-east-1 region. * api-change:`chime-sdk-identity`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-media-pipelines`: Update endpoint ruleset parameters casing * api-change:`codeartifact`: Update endpoint ruleset parameters casing * api-change:`codeguruprofiler`: Update endpoint ruleset parameters casing * api-change:`cognito-idp`: Update endpoint ruleset parameters casing * api-change:`comprehend`: Update endpoint ruleset parameters casing * api-change:`connectcampaigns`: Update endpoint ruleset parameters casing * api-change:`controltower`: Update endpoint ruleset parameters casing * api-change:`cost-optimization-hub`: Update endpoint ruleset parameters casing * api-change:`dax`: Update endpoint ruleset parameters casing * api-change:`elasticbeanstalk`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`entityresolution`: Update endpoint ruleset parameters casing * api-change:`forecast`: Update endpoint ruleset parameters casing * api-change:`greengrass`: Update endpoint ruleset parameters casing * api-change:`iam`: Fixed missing SummaryMap keys in GetAccountSummary response that were being filtered out during deserialization in AWS Java SDK v2 * api-change:`invoicing`: Update endpoint ruleset parameters casing * api-change:`kinesis`: Adds support for record sizes up to 10MiB and introduces new UpdateMaxRecordSize API to modify stream record size limits. Adds record size parameters to existing CreateStream and DescribeStreamSummary APIs for request and response payloads respectively. * api-change:`launch-wizard`: Update endpoint ruleset parameters casing * api-change:`lex-runtime`: Update endpoint ruleset parameters casing * api-change:`managedblockchain`: Update endpoint ruleset parameters casing * api-change:`mturk`: Update endpoint ruleset parameters casing * api-change:`neptune-graph`: Update endpoint ruleset parameters casing * api-change:`outposts`: Update endpoint ruleset parameters casing * api-change:`pinpoint`: Update endpoint ruleset parameters casing * api-change:`rbin`: Update endpoint ruleset parameters casing * api-change:`rds-data`: Update endpoint ruleset parameters casing * api-change:`redshift-serverless`: Update endpoint ruleset parameters casing * api-change:`rekognition`: Update endpoint ruleset parameters casing * api-change:`repostspace`: Update endpoint ruleset parameters casing * api-change:`route53profiles`: Update endpoint ruleset parameters casing * api-change:`route53resolver`: Update endpoint ruleset parameters casing * api-change:`s3vectors`: Update endpoint ruleset parameters casing * api-change:`scheduler`: Update endpoint ruleset parameters casing * api-change:`secretsmanager`: Update endpoint ruleset parameters casing * api-change:`ses`: Update endpoint ruleset parameters casing * api-change:`shield`: Update endpoint ruleset parameters casing * api-change:`simspaceweaver`: Update endpoint ruleset parameters casing * api-change:`socialmessaging`: Update endpoint ruleset parameters casing * api-change:`ssm-sap`: Update endpoint ruleset parameters casing * api-change:`sso-admin`: Update endpoint ruleset parameters casing * api-change:`stepfunctions`: Update endpoint ruleset parameters casing * api-change:`waf-regional`: Update endpoint ruleset parameters casing * api-change:`workmailmessageflow`: Update endpoint ruleset parameters casing * from version 1.40.59 * api-change:`acm`: Update endpoint ruleset parameters casing * api-change:`amplifyuibuilder`: Update endpoint ruleset parameters casing * api-change:`application-signals`: Update endpoint ruleset parameters casing * api-change:`billing`: Update endpoint ruleset parameters casing * api-change:`budgets`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-messaging`: Update endpoint ruleset parameters casing * api-change:`cloudtrail`: Update endpoint ruleset parameters casing * api-change:`codepipeline`: Update endpoint ruleset parameters casing * api-change:`datapipeline`: Update endpoint ruleset parameters casing * api-change:`datazone`: This release adds support for MLflow connections Creation in DataZone * api-change:`docdb`: Update endpoint ruleset parameters casing * api-change:`dynamodbstreams`: Update endpoint ruleset parameters casing * api-change:`eks`: Update endpoint ruleset parameters casing * api-change:`elb`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`evs`: Update endpoint ruleset parameters casing * api-change:`fis`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Add status reasons for TERMINATED stream sessions * api-change:`geo-maps`: Added support for optional AdditionalFeatures parameter in the V2 GetTile API. * api-change:`inspector`: Update endpoint ruleset parameters casing * api-change:`iot-managed-integrations`: Update endpoint ruleset parameters casing * api-change:`iotwireless`: Update endpoint ruleset parameters casing * api-change:`kinesisanalytics`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-signaling`: Update endpoint ruleset parameters casing * api-change:`location`: Added support for mobile app restrictions in Amazon Location API keys. * api-change:`lookoutvision`: Update endpoint ruleset parameters casing * api-change:`mediapackage`: Update endpoint ruleset parameters casing * api-change:`mediastore`: Update endpoint ruleset parameters casing * api-change:`mediastore-data`: Update endpoint ruleset parameters casing * api-change:`migrationhubstrategy`: Update endpoint ruleset parameters casing * api-change:`mq`: Update endpoint ruleset parameters casing * api-change:`panorama`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography`: Update endpoint ruleset parameters casing * api-change:`payment-cryptography-data`: Update endpoint ruleset parameters casing * api-change:`pca-connector-ad`: Update endpoint ruleset parameters casing * api-change:`qbusiness`: Update endpoint ruleset parameters casing * api-change:`robomaker`: Update endpoint ruleset parameters casing * api-change:`route53domains`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Add support for custom rate limits. * api-change:`s3tables`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Added inference components model data caching feature * api-change:`sagemaker-metrics`: Update endpoint ruleset parameters casing * api-change:`securityhub`: Release 3 layer filter support in GetFindingsV2, GetFindingStatisticsV2, GetResourcesV2,GetResourcesStatisticsV2, AutomationRule V2 APIs. Update filter casing in GetResourcesV2, GetResourcesStatisticsV2 APIs. Add new filters in GetFindingsV2, GetFindingStatisticsV2, AutomationRule V2 APIs. * api-change:`servicediscovery`: Update endpoint ruleset parameters casing * api-change:`snow-device-management`: Update endpoint ruleset parameters casing * api-change:`sso-oidc`: Update endpoint ruleset parameters casing * api-change:`supplychain`: Update endpoint ruleset parameters casing * api-change:`translate`: Update endpoint ruleset parameters casing * api-change:`verifiedpermissions`: Update endpoint ruleset parameters casing * api-change:`vpc-lattice`: Update endpoint ruleset parameters casing * api-change:`wisdom`: Update endpoint ruleset parameters casing * api-change:`workspaces-thin-client`: Update endpoint ruleset parameters casing * from version 1.40.58 * api-change:`account`: Update endpoint ruleset parameters casing * api-change:`application-autoscaling`: Update endpoint ruleset parameters casing * api-change:`bedrock-agentcore`: Fixing the service documentation name * api-change:`bedrock-agentcore-control`: Fixing the service documentation name * api-change:`chime-sdk-voice`: Update endpoint ruleset parameters casing * api-change:`cloudtrail-data`: Update endpoint ruleset parameters casing * api-change:`codebuild`: Update endpoint ruleset parameters casing * api-change:`codestar-connections`: Update endpoint ruleset parameters casing * api-change:`config`: Update endpoint ruleset parameters casing * api-change:`connect-contact-lens`: Update endpoint ruleset parameters casing * api-change:`cur`: Update endpoint ruleset parameters casing * api-change:`discovery`: Update endpoint ruleset parameters casing * api-change:`dms`: Update endpoint ruleset parameters casing * api-change:`docdb-elastic`: Update endpoint ruleset parameters casing * api-change:`drs`: Update endpoint ruleset parameters casing * api-change:`dsql`: Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints. * api-change:`ebs`: Update endpoint ruleset parameters casing * api-change:`ecr`: Update endpoint ruleset parameters casing * api-change:`ecr-public`: Update endpoint ruleset parameters casing * api-change:`healthlake`: Update endpoint ruleset parameters casing * api-change:`internetmonitor`: Update endpoint ruleset parameters casing * api-change:`iotevents`: Update endpoint ruleset parameters casing * api-change:`iot-jobs-data`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-archived-media`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-webrtc-storage`: Update endpoint ruleset parameters casing * api-change:`lambda`: Add NodeJs 24 (nodejs24.x) support to AWS Lambda. * api-change:`macie2`: Update endpoint ruleset parameters casing * api-change:`managedblockchain-query`: Update endpoint ruleset parameters casing * api-change:`marketplacecommerceanalytics`: Update endpoint ruleset parameters casing * api-change:`mediatailor`: Update endpoint ruleset parameters casing * api-change:`mgh`: Update endpoint ruleset parameters casing * api-change:`mgn`: Update endpoint ruleset parameters casing * api-change:`mpa`: Update endpoint ruleset parameters casing * api-change:`neptunedata`: Update endpoint ruleset parameters casing * api-change:`networkmonitor`: Update endpoint ruleset parameters casing * api-change:`odb`: Doc-only update that removes duplicate values from descriptions of ODB peering APIs. * api-change:`omics`: Update endpoint ruleset parameters casing * api-change:`opensearchserverless`: Update endpoint ruleset parameters casing * api-change:`pca-connector-scep`: Update endpoint ruleset parameters casing * api-change:`personalize-events`: Update endpoint ruleset parameters casing * api-change:`pinpoint-email`: Update endpoint ruleset parameters casing * api-change:`resiliencehub`: Update endpoint ruleset parameters casing * api-change:`rum`: Update endpoint ruleset parameters casing * api-change:`sagemaker`: Update endpoint ruleset parameters casing * api-change:`sagemaker-edge`: Update endpoint ruleset parameters casing * api-change:`savingsplans`: Update endpoint ruleset parameters casing * api-change:`securitylake`: Update endpoint ruleset parameters casing * api-change:`sesv2`: Update endpoint ruleset parameters casing * api-change:`storagegateway`: Update endpoint ruleset parameters casing * api-change:`synthetics`: Update endpoint ruleset parameters casing * from version 1.40.57 * api-change:`appfabric`: Update endpoint ruleset parameters casing * api-change:`autoscaling`: Update endpoint ruleset parameters casing * api-change:`b2bi`: Update endpoint ruleset parameters casing * api-change:`bcm-dashboards`: Update endpoint ruleset parameters casing * api-change:`ce`: Update endpoint ruleset parameters casing * api-change:`chatbot`: Update endpoint ruleset parameters casing * api-change:`cloudformation`: Update endpoint ruleset parameters casing * api-change:`cloudhsm`: Update endpoint ruleset parameters casing * api-change:`cloudhsmv2`: Update endpoint ruleset parameters casing * api-change:`codeguru-reviewer`: Update endpoint ruleset parameters casing * api-change:`cognito-identity`: Update endpoint ruleset parameters casing * api-change:`comprehendmedical`: Update endpoint ruleset parameters casing * api-change:`connect`: This release added support for email address alias configuration and outbound campaign preview mode. * api-change:`connectcampaignsv2`: Updated Amazon Connect Outbound Campaigns V2 SDK to support Preview Outbound Mode * api-change:`connectparticipant`: Update endpoint ruleset parameters casing * api-change:`devicefarm`: This release adds support for optionally including an app as part of a CreateRemoteAccessSession request * api-change:`directconnect`: Update endpoint ruleset parameters casing * api-change:`ds-data`: Update endpoint ruleset parameters casing * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateNetworkInterface and DescribeNetworkInterfaces APIs. * api-change:`ec2-instance-connect`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`forecastquery`: Update endpoint ruleset parameters casing * api-change:`iam`: Updated OIDC and SAML apis to reject multiple simultaneous requests to change a unique object. * api-change:`inspector2`: Update endpoint ruleset parameters casing * api-change:`iot`: Update endpoint ruleset parameters casing * api-change:`iotanalytics`: Update endpoint ruleset parameters casing * api-change:`iotfleetwise`: Update endpoint ruleset parameters casing * api-change:`iotsecuretunneling`: Update endpoint ruleset parameters casing * api-change:`iotsitewise`: Update endpoint ruleset parameters casing * api-change:`ivschat`: Update endpoint ruleset parameters casing * api-change:`kinesisanalyticsv2`: Update endpoint ruleset parameters casing * api-change:`lexv2-models`: Update endpoint ruleset parameters casing * api-change:`mailmanager`: Update endpoint ruleset parameters casing * api-change:`marketplace-agreement`: Update endpoint ruleset parameters casing * api-change:`medialive`: Add 3 API operations for fetching alerts: ListAlerts (Channels), ListClusterAlerts (MediaLive Anywhere), and ListMultiplexAlerts * api-change:`mwaa`: Update endpoint ruleset parameters casing * api-change:`notificationscontacts`: Update endpoint ruleset parameters casing * api-change:`oam`: Update endpoint ruleset parameters casing * api-change:`pcs`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice-v2`: Update endpoint ruleset parameters casing * api-change:`redshift-data`: Update endpoint ruleset parameters casing * api-change:`route53`: Amazon Route 53 now supports the ISOB West Region for private DNS for Amazon VPCs and cloudwatch healthchecks. * api-change:`route53-recovery-cluster`: Update endpoint ruleset parameters casing * api-change:`rtbfabric`: Update for general availability of AWS RTB Fabric service. * api-change:`sagemaker-a2i-runtime`: Update endpoint ruleset parameters casing * api-change:`sns`: Update endpoint ruleset parameters casing * api-change:`ssm-incidents`: Update endpoint ruleset parameters casing * api-change:`workdocs`: Update endpoint ruleset parameters casing * api-change:`workmail`: Update endpoint ruleset parameters casing * api-change:`workspaces`: Update endpoint ruleset parameters casing * from version 1.40.56 * api-change:`dynamodb`: Add AccountID based endpoint metric to endpoint rules. * api-change:`emr`: Added RECONFIGURING to the InstanceFleetState convenience enum. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`mediaconvert`: This release adds the ability to set resolution for the black video generator and also adds the StartJobsQuery and GetJobsQueryResults APIs which allow asynchronous search of job history using new filters. * api-change:`meteringmarketplace`: Added ClientToken parameter to MeterUsage API for specifying idempotent requests. * from version 1.40.55 * api-change:`amp`: Update endpoint ruleset parameters casing * api-change:`amplifybackend`: Update endpoint ruleset parameters casing * api-change:`appconfigdata`: Update endpoint ruleset parameters casing * api-change:`appintegrations`: Update endpoint ruleset parameters casing * api-change:`application-insights`: Update endpoint ruleset parameters casing * api-change:`arc-zonal-shift`: Update endpoint ruleset parameters casing * api-change:`bcm-recommended-actions`: Update endpoint ruleset parameters casing * api-change:`bedrock-data-automation-runtime`: Update endpoint ruleset parameters casing * api-change:`chime-sdk-meetings`: Update endpoint ruleset parameters casing * api-change:`cloudfront`: Update endpoint ruleset parameters casing * api-change:`cloudfront-keyvaluestore`: Update endpoint ruleset parameters casing * api-change:`codestar-notifications`: Update endpoint ruleset parameters casing * api-change:`controlcatalog`: Update endpoint ruleset parameters casing * api-change:`datasync`: Update endpoint ruleset parameters casing * api-change:`ds`: Update endpoint ruleset parameters casing * api-change:`dsql`: Update endpoint ruleset parameters casing * api-change:`ec2`: Documentation updates for Amazon EC2. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Update endpoint ruleset parameters casing * api-change:`events`: Update endpoint ruleset parameters casing * api-change:`evidently`: Update endpoint ruleset parameters casing * api-change:`finspace`: Update endpoint ruleset parameters casing * api-change:`finspace-data`: Update endpoint ruleset parameters casing * api-change:`gameliftstreams`: Updates documentation to clarify valid application binaries for an Amazon GameLift Streams application and provide descriptions of stream session error status reasons * api-change:`geo-maps`: Added support for optional style parameters in maps, including Terrain, ContourDensity, Traffic, and TravelModes. * api-change:`imagebuilder`: Update endpoint ruleset parameters casing * api-change:`iot-data`: Update endpoint ruleset parameters casing * api-change:`iotdeviceadvisor`: Update endpoint ruleset parameters casing * api-change:`iotthingsgraph`: Update endpoint ruleset parameters casing * api-change:`iottwinmaker`: Update endpoint ruleset parameters casing * api-change:`kendra-ranking`: Update endpoint ruleset parameters casing * api-change:`kinesis-video-media`: Update endpoint ruleset parameters casing * api-change:`lakeformation`: Update endpoint ruleset parameters casing * api-change:`license-manager`: Update endpoint ruleset parameters casing * api-change:`license-manager-user-subscriptions`: Update endpoint ruleset parameters casing * api-change:`marketplace-catalog`: The ListEntities API now supports two new CAPI filters: DeliveryOptionTypes for SaaS products and CompatibleAWSServices for Container products. * api-change:`mediaconnect`: Update endpoint ruleset parameters casing * api-change:`migration-hub-refactor-spaces`: Update endpoint ruleset parameters casing * api-change:`network-firewall`: Update endpoint ruleset parameters casing * api-change:`networkmanager`: Update endpoint ruleset parameters casing * api-change:`organizations`: Update endpoint ruleset parameters casing * api-change:`pi`: Update endpoint ruleset parameters casing * api-change:`qapps`: Update endpoint ruleset parameters casing * api-change:`rolesanywhere`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-readiness`: Update endpoint ruleset parameters casing * api-change:`sagemaker-geospatial`: Update endpoint ruleset parameters casing * api-change:`signer`: Update endpoint ruleset parameters casing * api-change:`swf`: Releasing minor endpoint updates. * api-change:`timestream-write`: Update endpoint ruleset parameters casing * api-change:`tnb`: Update endpoint ruleset parameters casing * api-change:`wellarchitected`: Update endpoint ruleset parameters casing * from version 1.40.54 * api-change:`acm-pca`: Update endpoint ruleset parameters casing * api-change:`amplify`: Update endpoint ruleset parameters casing * api-change:`apigatewaymanagementapi`: Update endpoint ruleset parameters casing * api-change:`apprunner`: Update endpoint ruleset parameters casing * api-change:`apptest`: Update endpoint ruleset parameters casing * api-change:`autoscaling-plans`: Updated FIPS endpoints for US GovCloud regions * api-change:`batch`: Update endpoint ruleset parameters casing * api-change:`bcm-data-exports`: Update endpoint ruleset parameters casing * api-change:`billingconductor`: New feature: service flat CLI and first AWS managed pricing plan (BasicPricingPlan) * api-change:`customer-profiles`: Update endpoint ruleset parameters casing * api-change:`databrew`: Update endpoint ruleset parameters casing * api-change:`dataexchange`: Update endpoint ruleset parameters casing * api-change:`dlm`: Update endpoint ruleset parameters casing * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`freetier`: Update endpoint ruleset parameters casing * api-change:`gamelift`: Update endpoint ruleset parameters casing * api-change:`geo-routes`: Update endpoint ruleset parameters casing * api-change:`globalaccelerator`: Update endpoint ruleset parameters casing * api-change:`grafana`: Update endpoint ruleset parameters casing * api-change:`identitystore`: Update endpoint ruleset parameters casing * api-change:`ivs`: Update endpoint ruleset parameters casing * api-change:`ivs-realtime`: Update endpoint ruleset parameters casing * api-change:`kafka`: Update endpoint ruleset parameters casing * api-change:`keyspaces`: Update endpoint ruleset parameters casing * api-change:`kms`: Update endpoint ruleset parameters casing * api-change:`lex-models`: Update endpoint ruleset parameters casing * api-change:`lexv2-runtime`: Update endpoint ruleset parameters casing * api-change:`lookoutequipment`: Update endpoint ruleset parameters casing * api-change:`m2`: Update endpoint ruleset parameters casing * api-change:`machinelearning`: Update endpoint ruleset parameters casing * api-change:`marketplace-entitlement`: Update endpoint ruleset parameters casing * api-change:`mediapackagev2`: Update endpoint ruleset parameters casing * api-change:`medical-imaging`: Update endpoint ruleset parameters casing * api-change:`memorydb`: Update endpoint ruleset parameters casing * api-change:`migrationhub-config`: Update endpoint ruleset parameters casing * api-change:`networkflowmonitor`: Update endpoint ruleset parameters casing * api-change:`osis`: Update endpoint ruleset parameters casing * api-change:`personalize`: Update endpoint ruleset parameters casing * api-change:`personalize-runtime`: Update endpoint ruleset parameters casing * api-change:`pinpoint-sms-voice`: Update endpoint ruleset parameters casing * api-change:`polly`: Update endpoint ruleset parameters casing * api-change:`pricing`: Update endpoint ruleset parameters casing * api-change:`qldb`: Update endpoint ruleset parameters casing * api-change:`qldb-session`: Update endpoint ruleset parameters casing * api-change:`route53-recovery-control-config`: Update endpoint ruleset parameters casing * api-change:`ssm`: Update endpoint ruleset parameters casing * api-change:`ssm-contacts`: Update endpoint ruleset parameters casing * api-change:`ssm-guiconnect`: Update endpoint ruleset parameters casing * api-change:`timestream-query`: Update endpoint ruleset parameters casing * api-change:`voice-id`: Update endpoint ruleset parameters casing * api-change:`workspaces-web`: Update endpoint ruleset parameters casing * from version 1.40.53 * api-change:`bedrock`: Amazon Bedrock Automated Reasoning Policy now offers enhanced AWS KMS integration. The CreateAutomatedReasoningPolicy API includes a new kmsKeyId field, allowing customers to specify their preferred KMS key for encryption, improving control and compliance with AWS encryption mandates. * api-change:`docdb`: Add support for NetworkType field in CreateDbCluster, ModifyDbCluster, RestoreDbClusterFromSnapshot and RestoreDbClusterToPointInTime for DocumentDB. * api-change:`ec2`: Introducing EC2 Capacity Manager for monitoring and analyzing capacity usage across On-Demand Instances, Spot Instances, and Capacity Reservations. * api-change:`elbv2`: This release expands Listener Rule Conditions to support RegexValues and adds support for a new Transforms field in Listener Rules. * api-change:`guardduty`: Added default pagination value for ListMalwareProtectionPlans API and updated UpdateFindingsFeedback API * api-change:`lightsail`: Add support for manage Lightsail Bucket CORS configuration * api-change:`timestream-influxdb`: This release adds support for creating and managing InfluxDB 3 Core and Enterprise DbClusters. * from version 1.40.52 * api-change:`appstream`: This release introduces support for Microsoft license included applications streaming. * api-change:`backup`: The AWS Backup job attribute extension enhancement helps customers better understand the plan that initiated each job, and the properties of the resource each job creates. * api-change:`connect`: SDK release for TaskTemplateInfo in Contact for DescribeContact response. * api-change:`datazone`: Support creating scoped and trustedIdentityPropagation enabled connections. * api-change:`ec2`: This release adds support for creating instant, point-in- time copies of EBS volumes within the same Availability Zone * api-change:`transcribe`: Move UntagResource API body member to query parameter * api-change:`transfer`: SFTP connectors now support routing connections via customers' VPC. This enables connections to remote servers that are only accessible in a customer's VPC environment, and to servers that are accessible over the internet but need connections coming from an IP address in a customer VPC's CIDR range. * from version 1.40.51 * api-change:`bedrock-agentcore`: Updated InvokeAgentRuntime API to accept account id optionally and added CompleteResourceTokenAuth API. * api-change:`bedrock-agentcore-control`: Updated http status code in control plane apis of agentcore runtime, tools and identity. Additional included provider types for AgentCore Identity * api-change:`ec2`: Release Amazon EC2 c8i, c8i-flex, m8a, and r8gb * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable Resource tags for telemetry in a customer account. The release introduces new APIs to enable, disable and describe the status of Resource tags for telemetry feature. This new capability simplifies monitoring AWS resources using tags. * Update to 1.40.50 * api-change:`bedrock-agentcore`: Bedrock AgentCore release for Runtime, and Memory. * api-change:`bedrock-agentcore-control`: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.2_2025, for CloudFront. * api-change:`glue`: Addition of AuditContext in GetTable/GetTables Request * api-change:`lambda`: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. * api-change:`odb`: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. * api-change:`rds`: Updated the text in the Important section of the ModifyDBClusterParameterGroup page. * Update to 1.40.49 * api-change:`quicksight`: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. * api-change:`wafv2`: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. * from version 1.40.48 * api-change:`bedrock-agentcore-control`: Adding support for authorizer type AWS_IAM to AgentCore Control Gateway. * api-change:`license-manager-user-subscriptions`: Released support for IPv6 and dual-stack active directories * api-change:`outposts`: This release adds the new StartOutpostDecommission API, which starts the decommission process to return Outposts racks or servers. * api-change:`service-quotas`: introduces Service Quotas Automatic Management. Users can opt-in to monitoring and managing service quotas, receive notifications when quota usage reaches thresholds, configure notification channels, subscribe to EventBridge events for automation, and view notifications in the AWS Health dashboard. * from version 1.40.47 * api-change:`proton`: Deprecating APIs in AWS Proton namespace. * from version 1.40.46 * api-change:`backup`: Adds optional MaxScheduledRunsPreview input to GetBackupPlan API to provide a preview of up to 10 next scheduled backup plan runs in the GetBackupPlan response. * api-change:`bedrock-agentcore`: Add support for batch memory management, agent card retrieval and session termination * api-change:`bedrock-agentcore-control`: Add support for VM lifecycle configuration parameters and A2A protocol * api-change:`glue`: Adds labeling for DataQualityRuleResult for GetDataQualityResult and PublishDataQualityResult APIs * api-change:`mediaconnect`: Enabling Tag-on-Create for AWS Elemental MediaConnect flow-based resource types * api-change:`memorydb`: Support for DescribeMultiRegionParameterGroups and DescribeMultiRegionParameters API. * api-change:`quicksight`: Documentation improvements for QuickSight API documentation to clarify that delete operation APIs are global. * api-change:`rds`: Documentation updates to the CreateDBClusterMessage$PubliclyAccessible and CreateDBInstanceMessage$PubliclyAccessible properties. * api-change:`resource-explorer-2`: Add new AWS Resource Explorer APIs * from version 1.40.45 * api-change:`cleanrooms`: Added support for reading data sources across regions, and results delivery to allowedlisted regions. * api-change:`medialive`: AWS Elemental MediaLive enables Mediapackage V2 users to configure ID3, KLV, Nielsen ID3, and Segment Length related parameters through the Mediapackage output group. * api-change:`payment-cryptography-data`: Added a new API - translateKeyMaterial; allows keys wrapped by ECDH derived keys to be rewrapped under a static AES keyblock without first importing the key into the service. * api-change:`qconnect`: Updated Amazon Q in Connect APIs to support Email Contact Recommendations. * from version 1.40.44 * api-change:`cloudformation`: Add new warning type 'EXCLUDED_RESOURCES' * api-change:`connectcases`: New Search All Related Items API enables searching related items across cases * api-change:`dynamodb`: Add support for dual-stack account endpoint generation * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`guardduty`: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet. * api-change:`synthetics`: Adds support to configure canaries with pre- configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.40.43 * api-change:`chime-sdk-meetings`: Add support to receive dual stack MediaPlacement URLs in Chime Meetings SDK * api-change:`cleanrooms`: This release introduces data access budgets to control how many times a table can be used for queries and jobs in a collaboration. * api-change:`cleanroomsml`: This release introduces data access budgets to view how many times an input channel can be used for ML jobs in a collaboration. * api-change:`dms`: This is a doc-only update, revising text for kms-key-arns. * api-change:`ecs`: This is a documentation only Amazon ECS release that adds additional information for health checks. * api-change:`pcs`: Added the UpdateCluster API action to modify cluster configurations, and Slurm custom settings for queues. * from version 1.40.42 * api-change:`application-signals`: Amazon CloudWatch Application Signals is introducing the Application Map to give users a more comprehensive view of their service health. Users will now be able to group services, track their latest deployments, and view automated audit findings concerning service performance. * api-change:`bedrock-agentcore-control`: Tagging support for AgentCore Gateway * api-change:`chime-sdk-voice`: Added support for IPv4-only and dual-stack network configurations for VoiceConnector and CreateVoiceConnector API. * api-change:`connectcases`: This release adds support for two new related item types: ConnectCase for linking Amazon Connect cases and Custom for user-defined related items with configurable fields. * api-change:`customer-profiles`: This release introduces ListProfileHistoryRecords and GetProfileHistoryRecord APIs for comprehensive profile history tracking with complete audit trails of creation, updates, merges, deletions, and data ingestion events. * api-change:`datasync`: Added support for FIPS VPC endpoints in FIPS-enabled AWS Regions. * api-change:`datazone`: This release adds support for creation of EMR on EKS Connections in Amazon DataZone. * api-change:`ds`: AWS Directory service now supports IPv6-native and dual- stack configurations for AWS Managed Microsoft AD, AD Connector, and Simple AD (dual-stack only). Additionally, AWS Managed Microsoft AD Standard Edition directories can be upgraded to Enterprise Edition directories through a single API call. * api-change:`ecs`: This release adds support for Managed Instances on Amazon ECS. * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for NetApp ONTAP and Windows File Server * api-change:`mediatailor`: Adding TPS Traffic Shaping to Prefetch Schedules * api-change:`quicksight`: added warnings to a few CLI pages * api-change:`rds`: Enhanced RDS error handling: Added DBProxyEndpointNotFoundFault, DBShardGroupNotFoundFault, KMSKeyNotAccessibleFault for snapshots/restores/backups, NetworkTypeNotSupported, StorageTypeNotSupportedFault for restores, and granular state validation faults. Changed DBInstanceNotReadyFault to HTTP 400. * api-change:`transfer`: Add support for updating server identity provider type * from version 1.40.41 * api-change:`bedrock`: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input * api-change:`bedrock-runtime`: New stop reason for Converse and ConverseStream * api-change:`imagebuilder`: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. * api-change:`vpc-lattice`: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. * from version 1.40.40 * api-change:`bedrock-agent-runtime`: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. * api-change:`bedrock-data-automation`: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. * api-change:`billing`: Add ability to combine custom billing views to create new consolidated views. * api-change:`ce`: Support for payer account dimension and billing view health status. * api-change:`connect`: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. * api-change:`dynamodbstreams`: Added support for IPv6 compatible endpoints for DynamoDB Streams. * api-change:`ec2`: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`redshift`: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications * from version 1.40.39 * api-change:`glue`: Update GetConnection(s) API to return KmsKeyArn & Add 63 missing connection types * api-change:`lightsail`: Attribute HTTP binding update for Get/Delete operations * api-change:`network-firewall`: Network Firewall now introduces Reject and Alert action support for stateful domain list rule groups, providing customers with more granular control over their network traffic. * from version 1.40.38 * api-change:`appstream`: G6f instance support for AppStream 2.0 * api-change:`cloudwatch`: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions * api-change:`dax`: This release adds support for IPv6-only, DUAL_STACK DAX instances * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kms`: Documentation only updates for KMS. * api-change:`neptune`: Doc-only update to address customer use. * from version 1.40.37 * api-change:`cleanrooms`: Added support for running incremental ID mapping for rule-based workflows. * api-change:`ec2`: Add Amazon EC2 R8gn instance types * api-change:`entityresolution`: Support incremental id mapping workflow for AWS Entity Resolution * api-change:`ssm`: Added Dualstack support to GetDeployablePatchSnapshotForInstance * api-change:`sso-admin`: Add support for encryption at rest with Customer Managed KMS Key in AWS IAM Identity Center * api-change:`sso-oidc`: This release includes exception definition and documentation updates. * from version 1.40.36 * api-change:`batch`: Starting in JAN 2026, AWS Batch will change the default AMI for new Amazon ECS compute environments from Amazon Linux 2 to Amazon Linux 2023. We recommend migrating AWS Batch Amazon ECS compute environments to Amazon Linux 2023 to maintain optimal performance and security. * api-change:`eks`: Adds support for RepairConfig overrides and configurations in EKS Managed Node Groups. * api-change:`imagebuilder`: Version ARNs are no longer required for the EC2 Image Builder list-image-build-version, list-component-build-version, and list-workflow-build-version APIs. Calling these APIs without the ARN returns all build versions for the given resource type in the requesting account. * from version 1.40.35 * api-change:`bedrock-agentcore-control`: Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names. * api-change:`config`: Add UNKNOWN state to RemediationExecutionState and add IN_PROGRESS/EXITED/UNKNOWN states to RemediationExecutionStepState. * api-change:`connect`: This release adds a persistent connection field to UserPhoneConfig that maintains agent's softphone media connection for faster call connections. * api-change:`kendra-ranking`: Model whitespace change - no client difference * api-change:`license-manager-user-subscriptions`: Added support for cross- account Active Directories. * api-change:`medialive`: Add MinBitrate for QVBR mode under H264/H265/AV1 output codec. Add GopBReference, GopNumBFrames, SubGopLength fields under H265 output codec. * api-change:`sms-voice`: Updated the `sms-voice` client to the latest version. Note: this client is maintained only for backwards compatibility and should not be used for new development. We recommend using the `pinpoint-sms-voice` client for full support and ongoing updates. * api-change:`sqs`: Update invalid character handling documentation for SQS SendMessage API * from version 1.40.34 * api-change:`bedrock`: Release includes an increase to the maximum policy build document size, an update to DeleteAutomatedReasoningPolicyBuildWorkflow to add ResourceInUseException, and corrections to UpdateAutomatedReasoningPolicyTestCaseRequest. * api-change:`budgets`: Added BillingViewHealthStatus Exception which is thrown when a Budget is created or updated with a Billing View that is not in the HEALTHY status * api-change:`chime-sdk-messaging`: Amazon Chime SDK Messaging GetMessagingSessionEndpoint API now returns dual-stack WebSocket endpoints supporting IPv4/IPv6. * api-change:`ec2`: Allowed AMIs adds support for four new parameters - marketplaceProductCodes, deprecationTimeCondition, creationDateCondition and imageNames * from version 1.40.33 * api-change:`ec2`: Add mac-m4.metal and mac-m4pro.metal instance types. * api-change:`network-firewall`: Network Firewall now prevents TLS handshakes with the target server until after the Server Name Indication (SNI) has been seen and verified. The monitoring dashboard now provides deeper insights into PrivateLink endpoint candidates and offers filters based on IP addresses and protocol. * api-change:`pcs`: Add support for Amazon EC2 Capacity Blocks for ML * Update to 1.40.32 * api-change:`budgets`: [`botocore`] Add support for custom time periods in budget configuration * api-change:`ivs-realtime`: [`botocore`] IVS now offers customers the ability to control the positioning of participants in both grid and PiP layouts based on custom attribute values in participant tokens. * api-change:`logs`: [`botocore`] Cloudwatch Logs added support for 2 new API parameters in metric and subscription filter APIs to filter log events based on system field values and emit system field values as dimensions and send them to customer destination as additional metadata. * api-change:`osis`: [`botocore`] Adds support for cross-account ingestion for push-based sources. This includes resource policies for sharing pipelines across accounts and features for managing pipeline endpoints which enable accessing pipelines across different VPCs, including VPCs in other accounts. * Update to 1.40.31 * api-change:`ce`: Added endpoint support for eusc-de-east-1 region. * api-change:`medical-imaging`: Added support for OpenID Connect (OIDC) custom authorizer * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry centralization in customers' Organizations. The release introduces new APIs to manage centralization rules, which define settings to replicate telemetry data to a central destination in the customers' Organization. * api-change:`s3control`: Introduce three new encryption filters: EncryptionType (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, NOT-SSE), KmsKeyArn (for SSE-KMS and DSSE-KMS), and BucketKeyEnabled (for SSE-KMS). * api-change:`sms`: The sms client has been removed following the deprecation of the service. * from version 1.40.30 * api-change:`payment-cryptography`: Add support for certificates to be signed by 3rd party certificate authorities. New API GetCertificateSigningRequest API and support for providing certificates at run-time for tr-34 import/export * from version 1.40.29 * api-change:`amp`: Add Vended Logs APIs for Amazon Prometheus Managed Collector * api-change:`datazone`: adding IAM principal id to IAM user profile details * api-change:`ecs`: This release supports hook details for Amazon ECS lifecycle hooks. * api-change:`emr-containers`: Added nodeLabel support in container provider to aid hardware isolation support for virtual cluster and security configuration. * api-change:`evs`: CreateEnvironment API now supports parameters (isHcxPublic & hcxNetworkAclId) for HCX migration via public internet, adding flexibility for migration scenarios. New APIs have been added for associating (AssociateEipToVlan) & disassociating (DisassociateEipFromVlan) Elastic IP (EIP) addresses. * api-change:`guardduty`: Updated Java SDK implementation of entity set status in GuardDuty API. * api-change:`medialive`: AWS Elemental MediaLive adds a new feature in MediaPackage output group that enables MediaPackage V2 users to control HLS- related parameters directly in MediaLive. These parameter settings are then reflected in MediaPackage outputs, providing more streamlined control over HLS configurations. * api-change:`quicksight`: This release adds support for Account level custom permissions, additional Dashboard Options, and Null support for Q&A. * api-change:`rds`: Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines. * from version 1.40.28 * api-change:`networkflowmonitor`: Added new enum value (AWS::Region) for type field under MonitorLocalResource and MonitorRemoteResource. Workload Insights and Monitor top contributors queries now support a new DestinationCategory (INTER_REGION). * api-change:`payment-cryptography`: AWS Payment Cryptography Service now supports Multi-Region key replication. Customers can choose to automatically distribute keys across AWS Regions. * from version 1.40.27 * api-change:`autoscaling`: Added WaitForTransitioningInstances parameter to the CancelInstanceRefresh API, allowing the caller to cancel an instance refresh without waiting for on-going launches and terminations. * api-change:`cloudwatch`: Added a new API - DescribeAlarmContributors API, to retrieve alarm contributors in ALARM state. Added support in DescribeAlarmHistory API to query alarm contributor history * api-change:`connect`: SDK release for user defined predefined attributes. * api-change:`datazone`: Adds support for custom blueprints * api-change:`mediapackagev2`: Added CUE tag SCTE output to MediaPackageV2 HLS and LL-HLS manifests. * api-change:`organizations`: Documentation updates for AWS Organizations APIs. * api-change:`sagemaker`: Released IPv6 support with dual-stack domain options on SageMaker Studio and introduced support for p6-b200.48xlarge instance type on SageMaker Studio for JupyterLab and CodeEditor applications. * from version 1.40.26 * api-change:`iotsitewise`: Add ComputationModelVersion support in IoT SiteWise APIs * api-change:`s3`: This release includes backward compatibility work on the "Expires" parameter. * api-change:`securityhub`: This release adds the RESOURCE_NOT_FOUND error code as a possible value in responses to the following operations: BatchGetStandardsControlAssociations, BatchUpdateStandardsControlAssociations, and BatchGetSecurityControls. * Update to 1.40.25 * api-change:`ecs`: This is a documentation only release that adds additional information for Amazon ECS Availability Zone rebalancing. * api-change:`pcs`: Documentation-only update to add AccountingStorageEnforce to SlurmCustomSetting. * api-change:`sagemaker`: Release IPv6 support with dualstack in SageMaker Notebooks, Tiered Storage Checkpointing Support in SageMaker HyperPod and P5.4xlarge instance type for SageMaker Hosting. * from version 1.40.24 * api-change:`cleanrooms`: Add support for configurable compute sizes for PySpark jobs. * api-change:`cloudformation`: ListHookResults API now supports retrieving invocation results for all CloudFormation Hooks (previously limited to create change set and Cloud Control operations) with new optional parameters for filtering by Hook status and ARN. * api-change:`ec2`: Add m8i, m8i-flex and i8ge instance types. * api-change:`opensearchserverless`: Add support for Federal Information Processing Standards (FIPS) and Federal Risk and Authorization Management Program (FedRAMP) compliance * api-change:`rds`: Added new EndpointNetworkType and TargetConnectionNetworkType fields in Proxy APIs to support IPv6 * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for datetime and duration attribute values. * from version 1.40.23 * api-change:`cleanrooms`: Added support for adding new data provider members to an existing collaboration. * api-change:`cleanroomsml`: AWS Clean Rooms ML adds log sanitization for privacy-enhanced error summaries, supports new instance types for custom models providing better performance and lower costs, and deprecates P3-series instances. * api-change:`cloudfront`: Adding an optional field IpAddressType in CustomOriginConfig * api-change:`mq`: Add CONFIG_MANAGED as a supported AuthenticationStrategy for Amazon MQ for RabbitMQ brokers. Make username and password optional on broker creation for CONFIG_MANAGED brokers. * api-change:`rds`: This release adds support for MasterUserAuthenticationType parameter on CreateDBInstance, ModifyDBInstance, CreateDBCluster, and ModifyDBCluster operations. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (New Zealand) Region (ap-southeast-6) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`route53domains`: Added new ExtraParams AU_ELIGIBILITY_TYPE, AU_POLICY_REASON, and AU_REGISTRANT_NAME * from version 1.40.22 * api-change:`ec2`: MaximumEbsAttachments and AttachmentLimitType fields added to DescribeInstanceTypesResponse. G6f, Gr6f, R8i, R8i-flex and p5.4xlarge instance types added to InstanceTypes enum. * api-change:`neptune`: Removed the deprecated marker from publiclyAccessible parameter from DbInstance, CreateDbInstance and ModifyDbInstance and added relevant usage information for the parameter. * api-change:`notifications`: Added Org support for notifications: - `ListMemberAccounts` gets member accounts list, `AssociateOrganizationalUnit` links OU to notification configuration, `DisassociateOrganizationalUnit` removes OU from notification configuration, `ListOrganizationalUnits` shows OUs configured for notifications. * api-change:`workmail`: Make RoleArn an optional parameter for the PutEmailMonitoringConfiguration API, and add UnsupportedOperationException to RegisterToWorkMail. * from version 1.40.21 * api-change:`bedrock-runtime`: Fixed stop sequence limit for converse API. * api-change:`ec2`: Release shows new route types such as filtered and advertisement. * api-change:`xray`: AWS X-Ray Features: Support Sampling Rate Boost On Anomaly * from version 1.40.20 * api-change:`applicationcostprofiler`: Remove incorrect endpoint tests * api-change:`apprunner`: Doc only updates for APIs and and datatypes related to IPAddressType and Subnets for IPv6 dualstack support. * api-change:`autoscaling-plans`: Remove incorrect endpoint tests * api-change:`cloud9`: Remove incorrect endpoint tests * api-change:`cloudhsmv2`: Remove incorrect endpoint tests * api-change:`cloudsearchdomain`: Remove incorrect endpoint tests * api-change:`codedeploy`: Remove incorrect endpoint tests * api-change:`codeguru-reviewer`: Remove incorrect endpoint tests * api-change:`connect`: AgentStatusDrillDown feature in GetCurrentMetricData API. Adding AGENT_STATUS as filter and grouping in GetCurrentMetricData API * api-change:`databrew`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`ec2`: This release adds support for copying Amazon EBS snapshot and AMIs to and from Local Zones. * api-change:`ec2-instance-connect`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fis`: Remove incorrect endpoint tests * api-change:`fms`: Remove incorrect endpoint tests * api-change:`geo-maps`: Remove incorrect endpoint tests * api-change:`glue`: Adding support to fetch TargetDatabase field during GetDatabases with AttributesToGet * api-change:`healthlake`: Add ValidationLevel parameter to StartFHIRImportJob API, allowing users to specify a FHIR validation level for their asynchronous import jobs. * api-change:`machinelearning`: Remove incorrect endpoint tests * api-change:`mediastore-data`: Remove incorrect endpoint tests * api-change:`mturk`: Remove incorrect endpoint tests * api-change:`omics`: Adds Amazon ECR pull through cache support to AWS HealthOmics, so you can more easily use container images from external sources. * api-change:`osis`: Remove incorrect endpoint tests * api-change:`pinpoint-sms-voice`: Remove incorrect endpoint tests * api-change:`rds`: Added RDS HTTP Endpoint feature support flag to DescribeOrderableDBInstanceOptions API * api-change:`route53domains`: Remove incorrect endpoint tests * api-change:`savingsplans`: Remove incorrect endpoint tests * api-change:`scheduler`: Remove incorrect endpoint tests * api-change:`ses`: Remove incorrect endpoint tests * api-change:`ssm-sap`: Added support for Configuration Checks on SAP HANA Applications. * api-change:`sso`: Remove incorrect endpoint tests * api-change:`timestream-query`: Remove incorrect endpoint tests * api-change:`waf`: Remove incorrect endpoint tests * api-change:`workmailmessageflow`: Remove incorrect endpoint tests * api-change:`xray`: Remove incorrect endpoint tests * from version 1.40.19 * api-change:`amplifybackend`: Remove incorrect endpoint tests * api-change:`application-insights`: Remove incorrect endpoint tests * api-change:`batch`: Added ECS_AL2023_NVIDIA as an option for Ec2Configuration.imageType. * api-change:`chime`: Remove incorrect endpoint tests * api-change:`chime-sdk-identity`: Remove incorrect endpoint tests * api-change:`chime-sdk-meetings`: Remove incorrect endpoint tests * api-change:`chime-sdk-voice`: Remove incorrect endpoint tests * api-change:`codeguruprofiler`: Remove incorrect endpoint tests * api-change:`datapipeline`: Remove incorrect endpoint tests * api-change:`discovery`: Remove incorrect endpoint tests * api-change:`ds`: Add APIs for CA AutoEnrollment support: DescribeCAEnrollmentPolicy, EnableCAEnrollmentPolicy and DisableCAEnrollmentPolicy. * api-change:`eks`: Add support for on-demand refresh of EKS cluster insights * api-change:`elasticache`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`evidently`: Remove incorrect endpoint tests * api-change:`frauddetector`: Remove incorrect endpoint tests * api-change:`inspector`: Remove incorrect endpoint tests * api-change:`kinesisvideo`: Remove incorrect endpoint tests * api-change:`kinesis-video-media`: Remove incorrect endpoint tests * api-change:`lakeformation`: Remove incorrect endpoint tests * api-change:`lex-models`: Remove incorrect endpoint tests * api-change:`migrationhub-config`: Remove incorrect endpoint tests * api-change:`neptune-graph`: Add StartGraph and StopGraph operations to Neptune Analytics * api-change:`opsworks`: The opsworks client has been removed following the deprecation of the service. * api-change:`opsworkscm`: The opsworkscm client has been removed following the deprecation of the service. * api-change:`personalize`: Remove incorrect endpoint tests * api-change:`pi`: Remove incorrect endpoint tests * api-change:`qldb-session`: Remove incorrect endpoint tests * api-change:`redshift`: Remove incorrect endpoint tests * api-change:`robomaker`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds support for AutoScaling on SageMaker HyperPod. * api-change:`schemas`: Remove incorrect endpoint tests * api-change:`snow-device-management`: Remove incorrect endpoint tests * api-change:`timestream-write`: Remove incorrect endpoint tests * api-change:`voice-id`: Remove incorrect endpoint tests * api-change:`workdocs`: Remove incorrect endpoint tests * api-change:`workmail`: Remove incorrect endpoint tests * from version 1.40.18 * api-change:`apprunner`: Remove incorrect endpoint tests * api-change:`arc-zonal-shift`: This release adds new API options to enable allowed windows and multiple alarms for practice runs. * api-change:`codecommit`: Remove incorrect endpoint tests * api-change:`codestar-connections`: Remove incorrect endpoint tests * api-change:`comprehendmedical`: Remove incorrect endpoint tests * api-change:`connectparticipant`: Amazon Connect Participant Service: Remove unused fields from WebRTCConnection * api-change:`dlm`: Remove incorrect endpoint tests * api-change:`ec2`: Add new APIs for viewing how your shared AMIs are used by other accounts, and identify resources in your account that are dependent on particular AMIs * api-change:`elastictranscoder`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`finspace`: Remove incorrect endpoint tests * api-change:`geo-routes`: Added RouteFerryNotice PotentialViolatedVehicleRestrictionUsage value for CalculateRoutes. This value indicates when the Route is potentially forbidden for the given vehicle profile. * api-change:`glacier`: Remove incorrect endpoint tests * api-change:`globalaccelerator`: Remove incorrect endpoint tests * api-change:`greengrass`: Remove incorrect endpoint tests * api-change:`identitystore`: Remove incorrect endpoint tests * api-change:`imagebuilder`: Remove incorrect endpoint tests * api-change:`iotsecuretunneling`: Remove incorrect endpoint tests * api-change:`kafka`: Remove incorrect endpoint tests * api-change:`lookoutvision`: Remove incorrect endpoint tests * api-change:`mgh`: Remove incorrect endpoint tests * api-change:`migration-hub-refactor-spaces`: Remove incorrect endpoint tests * api-change:`mq`: Remove incorrect endpoint tests * api-change:`personalize-events`: Remove incorrect endpoint tests * api-change:`pinpoint`: Remove incorrect endpoint tests * api-change:`ram`: Remove incorrect endpoint tests * api-change:`rbin`: Remove incorrect endpoint tests * api-change:`route53-recovery-cluster`: Remove incorrect endpoint tests * api-change:`sagemaker-geospatial`: Remove incorrect endpoint tests * api-change:`servicecatalog-appregistry`: Remove incorrect endpoint tests * api-change:`signer`: Remove incorrect endpoint tests * api-change:`waf-regional`: Remove incorrect endpoint tests * from version 1.40.17 * api-change:`appflow`: Remove incorrect endpoint tests * api-change:`b2bi`: Updated APIs to support custom validation rules. * api-change:`chime-sdk-media-pipelines`: Remove incorrect endpoint tests * api-change:`chime-sdk-messaging`: Remove incorrect endpoint tests * api-change:`cloudsearch`: Remove incorrect endpoint tests * api-change:`cloudtrail-data`: Remove incorrect endpoint tests * api-change:`codeartifact`: Remove incorrect endpoint tests * api-change:`codeguru-security`: Documentation update to notify users of the discontinuation of Amazon CodeGuru Security. * api-change:`codestar-notifications`: Remove incorrect endpoint tests * api-change:`cur`: Remove incorrect endpoint tests * api-change:`datazone`: Releasing the following features - Asset classification that lets users use restricted terms for classifying assets if they have the right permissions. Also adding a new enum value "Moving" to project status. * api-change:`dax`: Remove incorrect endpoint tests * api-change:`devops-guru`: Remove incorrect endpoint tests * api-change:`ec2`: Added IPv6 support for AWS Client VPN. * api-change:`emr-containers`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`finspace-data`: Remove incorrect endpoint tests * api-change:`forecast`: Remove incorrect endpoint tests * api-change:`iotfleethub`: Remove incorrect endpoint tests * api-change:`kendra`: Remove incorrect endpoint tests * api-change:`kinesisanalytics`: Remove incorrect endpoint tests * api-change:`kinesis-video-archived-media`: Remove incorrect endpoint tests * api-change:`lex-runtime`: Remove incorrect endpoint tests * api-change:`lookoutequipment`: Remove incorrect endpoint tests * api-change:`mediaconvert`: This release adds support for input rendition selection for HLS input, adds new Share API to enable sharing jobs with AWS Support for support investigations, and adds INCLUDE_AS_TS to iFrameOnlyManifest setting for HLS outputs. * api-change:`mediapackage-vod`: Remove incorrect endpoint tests * api-change:`mediastore`: Remove incorrect endpoint tests * api-change:`personalize-runtime`: Remove incorrect endpoint tests * api-change:`qbusiness`: The Amazon Q Business GetDocumentContent operation now supports retrieval of the extracted text content in JSON format. * api-change:`resourcegroupstaggingapi`: Remove incorrect endpoint tests * api-change:`sagemaker-edge`: Remove incorrect endpoint tests * api-change:`sagemaker-featurestore-runtime`: Remove incorrect endpoint tests * api-change:`sagemaker-runtime`: Remove incorrect endpoint tests * api-change:`serverlessrepo`: Remove incorrect endpoint tests * api-change:`shield`: Remove incorrect endpoint tests * api-change:`snowball`: Remove incorrect endpoint tests * api-change:`sqs`: Documentation update for Amazon SQS Supports Large Payload Message feature * api-change:`support`: Remove incorrect endpoint tests * api-change:`support-app`: Remove incorrect endpoint tests * api-change:`timestream-influxdb`: Add MAINTENANCE status for DbInstance and DbCluster * api-change:`translate`: Remove incorrect endpoint tests * api-change:`wellarchitected`: Remove incorrect endpoint tests * from version 1.40.16 * api-change:`clouddirectory`: Remove incorrect endpoint tests * api-change:`cognito-sync`: Remove incorrect endpoint tests * api-change:`docdb`: Remove incorrect endpoint tests * api-change:`elb`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`healthlake`: Remove incorrect endpoint tests * api-change:`iotanalytics`: Remove incorrect endpoint tests * api-change:`macie2`: Remove incorrect endpoint tests * api-change:`marketplacecommerceanalytics`: Remove incorrect endpoint tests * api-change:`medialive`: AWS Elemental MediaLive now has a field called "SubtitleRows" for controlling subtitle row count for DVB-Sub and Burn-In captions outputs * api-change:`memorydb`: Remove incorrect endpoint tests * api-change:`proton`: Remove incorrect endpoint tests * api-change:`qconnect`: Releasing model ID support for UpdateAIPrompt * api-change:`qldb`: Remove incorrect endpoint tests * api-change:`rds`: Updates Amazon RDS documentation for Db2 read-only replicas. * api-change:`route53-recovery-readiness`: Remove incorrect endpoint tests * api-change:`sagemaker`: Launch SageMaker Notebook Instances support for AL2023 along with P6-B200 instance type and Rootless Docker support for SageMaker Studio. * api-change:`sagemaker-a2i-runtime`: Remove incorrect endpoint tests * api-change:`simspaceweaver`: Remove incorrect endpoint tests * api-change:`synthetics`: Added multi browser support for synthetics canaries, Increased ephemeral storage limit from 5GB to 10GB * api-change:`wafv2`: test and verified, safe to release * from version 1.40.15 * api-change:`apigatewaymanagementapi`: Remove incorrect endpoint tests * api-change:`appfabric`: Remove incorrect endpoint tests * api-change:`backup-gateway`: Remove incorrect endpoint tests * api-change:`cloudhsm`: Remove incorrect endpoint tests * api-change:`cognito-identity`: Remove incorrect endpoint tests * api-change:`comprehend`: Remove incorrect endpoint tests * api-change:`ebs`: Remove incorrect endpoint tests * api-change:`ecr-public`: Remove incorrect endpoint tests * api-change:`ecs`: This is a documentation only release that adds additional information for the update-service request parameters. * api-change:`elasticbeanstalk`: Remove incorrect endpoint tests * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`es`: Remove incorrect endpoint tests * api-change:`forecastquery`: Remove incorrect endpoint tests * api-change:`gameliftstreams`: The default application in a stream group can now be changed at any time using UpdateStreamGroup to update the DefaultApplicationIdentifier. * api-change:`glue`: Added support for preprocessing queries in Data Quality operations through new DataQualityGlueTable structure. * api-change:`greengrassv2`: Remove incorrect endpoint tests * api-change:`guardduty`: Remove Pattern trait from email field * api-change:`iotdeviceadvisor`: Remove incorrect endpoint tests * api-change:`iotevents`: Remove incorrect endpoint tests * api-change:`iotevents-data`: Remove incorrect endpoint tests * api-change:`iotthingsgraph`: Remove incorrect endpoint tests * api-change:`kinesis-video-signaling`: Remove incorrect endpoint tests * api-change:`lexv2-runtime`: Remove incorrect endpoint tests * api-change:`lookoutmetrics`: Remove incorrect endpoint tests * api-change:`managedblockchain`: Remove incorrect endpoint tests * api-change:`mediapackage`: Remove incorrect endpoint tests * api-change:`panorama`: Remove incorrect endpoint tests * api-change:`pinpoint-email`: Remove incorrect endpoint tests * api-change:`resource-groups`: Remove incorrect endpoint tests * api-change:`s3outposts`: Remove incorrect endpoint tests * api-change:`ssm-contacts`: Doc-only updates for Incident Manager Contacts August 2025 * from version 1.40.14 * api-change:`bedrock-runtime`: Launch CountTokens API to allow token counting * api-change:`billing`: Clarify IPv4 and IPv6 endpoints * api-change:`cognito-idp`: This release adds support for the new Terms APIs which allow displaying Terms of Use and Privacy Policy on the Managed Login user-registration page. * api-change:`datazone`: This release supports policy grant identifier for cloud formation integration * api-change:`detective`: Remove incorrect endpoint tests * api-change:`dynamodb`: Remove incorrect endpoint tests * api-change:`eks`: EKS Add-ons Custom Namespace Support * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`kinesisanalyticsv2`: Adds Key Management Service (KMS) support allowing customer-managed key (CMK) encryption for Flink application data. * api-change:`pinpoint-sms-voice-v2`: This change added InternationalSendingEnbaled as part of describe/Update/Request phone number API response, and as part of update/Request phone number API request * api-change:`route53-recovery-control-config`: Remove incorrect endpoint tests * api-change:`sagemaker`: This release adds 1/ Launch ml.p5.4xlarge instance in Processing jobs, Training jobs and Training Plan 2/ Makes S3Uri to be required for S3FileSystem and S3FileSystemConfig. * from version 1.40.13 * api-change:`cleanrooms`: Support error message configuration for analysis templates * api-change:`ec2`: Add support for "warning" volume status. * api-change:`polly`: Added support for new output format - Opus. * from version 1.40.12 * api-change:`batch`: Added default_x86_64 and default_arm64 as values to the instanceTypes field. * api-change:`bcm-dashboards`: Billing and Cost Management Dashboards enables users to create dashboards that combine multiple visualizations of cost and usage data. Users can create, manage, and share dashboards. Tags are also available for dashboards. * api-change:`connect`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`connectparticipant`: Amazon Connect Service Feature: Add support to enable multi-user in-app, web, and video calling. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`s3control`: Adds support for Compute checksum functionality in Amazon S3 Batch Operations. You can now calculate checksums for a list of objects using supported algorithms in Amazon S3, without requiring a restore or download * api-change:`sagemaker`: Customer managed keys now available for volume encryption of SageMaker HyperPod clusters. * enhancement:AWSCRT: Update awscrt version to 0.27.6 * from version 1.40.11 * api-change:`amp`: Add Resource-based Policy APIs for Amazon Prometheus * api-change:`bedrock-agent`: This release adds support for saving Bedrock Flows while node configuration is still in progress, even if the Flow is not yet able to be invoked * api-change:`glue`: AWS Glue Zero ETL now supports On-demand snapshot load * from version 1.40.10 * api-change:`arc-region-switch`: Endpoint rule test and documentation update. * api-change:`bcm-recommended-actions`: Initial SDK release for AWS Billing and Cost Management Recommended Actions. * api-change:`directconnect`: Added pagination support for DescribeHostedConnections, DescribeVirtualInterfaces, DescribeConnections, DescribeInterconnects, DescribeLags. Added asnLong support for BGP peer operations which supports a large range. * api-change:`dynamodb`: This release 1/ Adds support for throttled keys mode for CloudWatch Contributor Insights, 2/ Adds throttling reasons to exceptions across dataplane APIs. 3/ Explicitly models ThrottlingException as a class in statically typed languages. Refer to the launch day blog post for more details. * api-change:`ec2`: This release adds ModifyInstanceConnectEndpoint API to update configurations on existing EC2 Instance Connect Endpoints and improves IPv6 support through dualstack DNS names for EC2 Instance Connect Endpoints. * api-change:`endpoint-rules`: Update endpoint-rules client to latest version * api-change:`fsx`: Amazon FSx for NetApp ONTAP 2nd generation file systems now support decreasing SSD storage capacity. * api-change:`glue`: AWS Glue now supports Trusted Identity Propagation. * api-change:`guardduty`: Added support for entity lists. * api-change:`medialive`: CMAF Ingest output groups in MediaLive can now accept one additional destination url for single pipeline channels and up to two additional destination urls for standard channels. * api-change:`pcs`: Updated the regex pattern and description of iamInstanceProfileArn in the CreateComputeNodeGroup and UpdateComputeNodeGroup API actions. Name and path requirements apply to the ARN of the IAM role associated with the instance profile and not the ARN of the instance profile. * api-change:`qapps`: Documentation update for Amazon Q Apps API Reference * api-change:`servicediscovery`: Added support for cross account through Id parameter overloading with ARN and allow owner account for some APIs instead of ARN * api-change:`workspaces`: New APIs introduced to import WorkSpaces BYOL image using a new process that leveraged EC2 Image Builder. WorkSpaces tests and fixes your image's compatibility issues and supports customized VM images. * from version 1.40.9 * api-change:`braket`: Add support for Braket program sets. * api-change:`datazone`: Adds support for account pools and project profile account decoupling * api-change:`fsx`: Add Dual-Stack support for Amazon FSx for OpenZFS file systems * api-change:`partnercentral-selling`: Add Tagging Support for Opportunity resources * api-change:`sagemaker`: This release introduces compute quota for GPU, Trainium accelerators, vCPU, and vCPU memory utilization across teams in HyperPod clusters * api-change:`security-ir`: Added support for Organizational Unit-level Membership configuration and the ability to resume a cancelled membership. * from version 1.40.8 * api-change:`backupsearch`: Using recommended smithy trait to generate regional endpoints for Backup Search * api-change:`codebuild`: AWS CodeBuild now supports PullRequestBuildPolicy in webhook object. * api-change:`ec2`: Release to allow route table association with a PublicIpv4Pool. * api-change:`organizations`: This release introduces 2 new APIs in Organizations: 1. ListAccountsWithInvalidEffectivePolicy 2. ListEffectivePolicyValidationErrors * api-change:`sagemaker`: IAM Identity Center trusted identity propagation is now supported in SageMaker Studio. * api-change:`transcribe`: AWS HealthScribe now supports specifying preferred patient pronouns through the MedicalScribeContext parameter for use in the generated clinical notes. * from version 1.40.7 * api-change:`bedrock`: This release includes model updates and enhanced SDK documentation for union fields in automated reasoning policy components. Added docs cover policy definitions, mutations (add/update for rules/types/variables), build assets, workflow sources, test results, and tag exception handling. * api-change:`cognito-idp`: Remove SigV4 auth requirement for GetTokensFromRefreshToken * api-change:`connect`: Updating SearchUserHierarchyGroups API * api-change:`deadline`: Adds support for Wait and Save feature in service- managed fleets * api-change:`ec2`: This release adds AvailabilityZoneId support for CreateVolume, DescribeVolume, LaunchTemplates, RunInstances, DescribeInstances, CreateDefaultSubnet, SpotInstances, and CreateDefaultSubnet APIs. * api-change:`evs`: Update for general availability of Amazon Elastic VMware Service (EVS). * api-change:`lambda`: Doc-only update for Lambda that updates the maximum payload size for response streaming invocations to 200 MB. * api-change:`quicksight`: Add RowAxisDisplayOptions and ColumnAxisDisplayOptions to HeatMapConfiguration, add Actions to PluginVisual, increase limit for CalculatedFields list * api-change:`sso-admin`: Added support for managing user background session for applications * from version 1.40.6 * api-change:`connect`: This release adds a new API GetContactMetrics for Amazon Connect. * api-change:`inspector2`: Add CVSSV4 to Vulnerability Search API and update enable/disable account id list length to 5 * api-change:`iot-data`: Adding DeleteConnection API to IoT Data Plane * api-change:`sagemaker`: Adds support for GB200 UltraServers in Amazon SageMaker training jobs, training plans, and HyperPod clusters * api-change:`transcribe`: Update documentation to use key ARN only in OutputEncryptionKMSKeyId request parameter * bugfix:stub: Fixes a bug which causes the stubber to begin failing for DynamoDB when SSO or AssumeRole credentials fail to load * from version 1.40.5 * api-change:`batch`: This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support. * api-change:`cloudfront`: Added new viewer security policy, TLSv1.3_2025, for CloudFront. * api-change:`codebuild`: AWS CodeBuild now supports comment-based pull request control. * api-change:`gameliftstreams`: Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application * api-change:`glue`: AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate. * api-change:`guardduty`: Added support for VPC owner account ID associated with DNS request in the GuardDuty finding. * from version 1.40.4 * api-change:`appstream`: Added support for G6 instances * api-change:`budgets`: Adds support for billing views. Billing views let you control access to cost and usage data through an AWS resource, streamlining the process of sharing cost and usage data across account boundaries. With this release, you can now create and view budgets based on billing views. * api-change:`ec2`: Mark Elastic Inference Accelerators and Elastic Graphics Processor parameters as deprecated on the RunInstances and LaunchTemplate APIs. * api-change:`opensearchserverless`: Features: add Index APIs in OpenSearchServerless to support managed semantic enrichment * api-change:`qbusiness`: Amazon Q Business now supports the GetDocumentContent() API that enables customers to securely access the source documents through clickable citation links at query time * from version 1.40.3 * api-change:`bedrock`: This release introduces Automated Reasoning checks for Amazon Bedrock Guardrails. The feature adds new APIs for policy building, refinement, version management, and testing. Guardrail APIs now support Automated Reasoning policy configuration and validation output. * api-change:`bedrock-runtime`: This release adds support for Automated Reasoning checks output models for the Amazon Bedrock Guardrails ApplyGuardrail API. * api-change:`eks`: Add support for deletion protection on EKS clusters * api-change:`rds`: Adds a new Aurora Serverless v2 attribute to the DBCluster resource to expose the platform version. Also updates the attribute to be part of both the engine version and platform version descriptions. * api-change:`sagemaker`: Add support for SageMaker Hyperpod continuous scaling and custom AMI; Introduce new APIs: ListClusterEvents, DescribeClusterEvent, BatchAddClusterNodes * from version 1.40.2 * api-change:`bedrock-agentcore`: Remove superfluous field from API * api-change:`codeconnections`: New integration with Azure DevOps provider type. * api-change:`evs`: TagResource API now throws ServiceQuotaExceededException when the number of tags on the Amazon EVS resource exceeds the maximum allowed. TooManyTagsException is deprecated. * api-change:`iotsitewise`: Support Interface for IoT SiteWise Asset Modeling * api-change:`sagemaker`: This release adds the ability for customers to attach and detach their EBS volumes to EKS-orchestrated HyperPod cluster nodes. * from version 1.40.1 * api-change:`acm-pca`: Doc-only update to add more information to GetCertificate action. * api-change:`aiops`: This release includes fix for InvestigationGroup timestamp conversion issue. * api-change:`arc-region-switch`: This is the initial SDK release for Region switch * api-change:`auditmanager`: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. * api-change:`lightsail`: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. * api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. * api-change:`pcs`: Add support for IPv6 Networking for Clusters. * api-change:`securityhub`: Release new resource detail type CodeRepository * api-change:`sns`: Amazon SNS support for Amazon SQS fair queues * from version 1.40.0 * api-change:`customer-profiles`: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. * api-change:`ec2`: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. * api-change:`elbv2`: This release enables secondary IP addresses for Network Load Balancers. * api-change:`entityresolution`: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. * api-change:`glue`: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. * api-change:`inspector2`: Extend usage to include agentless hours and add CODE_REPOSITORY to aggregation resource type * api-change:`iot`: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection * api-change:`opensearch`: Granular access control support for NEO-SAML with IAMFederation for AOS data source * api-change:`quicksight`: Added Impala connector support * api-change:`s3control`: Add Tags field to CreateAccessPoint * api-change:`sesv2`: This release introduces support for Multi-tenant management * api-change:`workspaces-web`: Added ability to log session activity on a portal to an S3 bucket. * feature:`sts`: Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. * from version 1.39.17 * api-change:`cloudfront`: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) * api-change:`docdb`: Add support for setting Serverless Scaling Configuration on clusters. * api-change:`ds`: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. * api-change:`ec2`: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. * api-change:`iotwireless`: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. * from version 1.39.16 * api-change:`batch`: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. * api-change:`cleanrooms`: This feature provides the ability to update the table reference and allowed columns on an existing configured table. * api-change:`deadline`: Adds support for tag management on monitors. * api-change:`location`: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. * api-change:`opensearchserverless`: This is to support Granular access control support for SAML with IAMFedraton in AOSS * from version 1.39.15 * api-change:`directconnect`: Enable MACSec support and features on Interconnects. * api-change:`iotsitewise`: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs * api-change:`osis`: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body * enhancement:`sso`: Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. * from version 1.39.14 * api-change:`appintegrations`: Amazon AppIntegrations introduces new configuration capabilities to enable customers to manage iframe permissions, control application refresh behavior (per contact or per browser/cross- contact), and run background applications (service). * api-change:`budgets`: Adds IPv6 and PrivateLink support for AWS Budgets in IAD. * api-change:`config`: Documentation improvements have been made to the EvaluationModel and DescribeConfigurationRecorders APIs. * api-change:`ec2`: Transit Gateway native integration with AWS Network Firewall. Adding new enum value for the new Transit Gateway Attachment type. * api-change:`kms`: Doc only update: fixed grammatical errors. * api-change:`mediapackagev2`: This release adds support for specifying a preferred input for channels using CMAF ingest. * api-change:`socialmessaging`: This release introduces new WhatsApp template management APIs that enable customers to programmatically create and submit templates for approval, monitor approval status, and manage the complete template lifecycle * api-change:`sqs`: Documentation updates for Amazon SQS fair queues feature. * from version 1.39.13 * api-change:`datazone`: This release adds support for 1) highlighting relevant text in returned results for Search and SearchListings APIs and 2) returning aggregated counts of values for specified attributes for SearchListings API. * api-change:`omics`: Add Git integration and README support for HealthOmics workflows * from version 1.39.12 * api-change:`ec2`: Added support for skip-os-shutdown option for the EC2 instance stop and terminate operations. This feature enables customers to bypass the graceful OS shutdown, supporting faster state transitions when instance data preservation isn't critical. * api-change:`glue`: AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles. * api-change:`workspaces-thin-client`: Added the lastUserId parameter to the ListDevices and GetDevice API. * bugfix:`bedrock`: Fixes an issue where bearer authentication was incorrectly applied to all services with the `bedrock` signing name. Bearer auth is now only applied if the service model also includes the `smithy.api#httpBearerAuth` trait. * from version 1.39.11 * api-change:`ecr`: Add support for Image Tag Mutability Exception feature, allowing repositories to define wildcard-based patterns that override the default image tag mutability settings. * api-change:`emr`: This release adds new parameter 'ExtendedSupport' in AWS EMR RunJobFlow, ModifyCluster and DescribeCluster API. * api-change:`lambda`: This release migrated the model to Smithy keeping all features unchanged. * api-change:`neptunedata`: This release updates the supported regions for Neptune API to include current AWS regions. * from version 1.39.10 * api-change:`cloudfront`: Add dualstack endpoint support * api-change:`deadline`: Add support for VPC resource endpoints in Service Managed Fleets * api-change:`ec2`: This release adds support for C8gn, F2 and P6e-GB200 Instance types * api-change:`sagemaker`: This release adds 1/ Support for S3FileSystem in CustomFileSystems 2/ The ability for a customer to select their preferred IpAddressType for use with private Workforces 3/ Support for p4de instance type in SageMaker Training Plans * api-change:`timestream-influxdb`: Timestream for InfluxDB adds support for db.influx.24xlarge instance type. This enhancement enables higher compute capacity for demanding workloads through CreateDbInstance, CreateDbCluster, UpdateDbInstance, and UpdateDbCluster APIs. * from version 1.39.9 * api-change:`auditmanager`: Updated error handling for RegisterOrganizationAdminAccount API to properly translate TooManyExceptions to HTTP 429 status code. This enhancement improves error handling consistency and provides clearer feedback when request limits are exceeded. * api-change:`logs`: CloudWatchLogs launches GetLogObject API with streaming support for efficient log data retrieval. Logs added support for new AccountPolicy type METRIC_EXTRACTION_POLICY. For more information, see CloudWatch Logs API documentation * api-change:`mediaconvert`: This release adds support for TAMS server integration with MediaConvert inputs. * api-change:`outposts`: Add AWS Outposts API to surface customer billing information * api-change:`sesv2`: Added IP Visibility support for managed dedicated pools. Enhanced GetDedicatedIp and GetDedicatedIps APIs to return managed IP addresses. * api-change:`ssm`: July 2025 doc-only updates for Systems Manager. * enhancement:Python: Added provisional support for the upcoming Python 3.14 release * from version 1.39.8 * api-change:`cleanroomsml`: This release introduces Parquet result format support for ML Input Channel models in AWS Clean Rooms ML. * api-change:`cloudfront`: Doc only update for CloudFront that fixes some customer-reported issues * api-change:`ec2`: AWS Free Tier Version2 Support * api-change:`keyspacesstreams`: Doc only update for the Amazon Keyspaces Streams API. * api-change:`mailmanager`: Allow underscores in the local part of the input of the "Email recipients rewrite" action in rule sets. * api-change:`mediaconvert`: This release expands the range of supported audio outputs to include xHE, 192khz FLAC and the deprecation of dual mono for AC3. * api-change:`stepfunctions`: Align input with style guidelines. * api-change:`synthetics`: This feature allows AWS Synthetics customers to provide code dependencies using lambda layer while creating a canary * from version 1.39.7 * api-change:`bedrock`: This release adds support for on-demand custom model inference through CustomModelDeployment APIs for Amazon Bedrock. * api-change:`bedrock-agentcore`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-agentcore-control`: Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity. * api-change:`bedrock-runtime`: document update to support on demand custom model. * api-change:`datasync`: AWS DataSync now supports IPv6 address inputs and outputs in create, update, and describe operations for NFS, SMB, and Object Storage locations * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Add expectedBucketOwner parameter to ThreatIntel and IPSet APIs. * api-change:`iotwireless`: FuotaTaskId is not a valid IdentifierType for EventConfiguration and is being removed from possible IdentifierType values. * api-change:`logs`: CloudWatch Logs updates: Added X-Ray tracing for Amazon Bedrock Agent resources. Logs introduced Log Group level resource policies (managed through Put/Delete/Describe Resource Policy APIs). For more information, see CloudWatch Logs API documentation. * api-change:`mediapackagev2`: This release adds support for CDN Authentication using Static Headers in MediaPackage v2. * api-change:`networkflowmonitor`: Introducing 2 new scope status types - DEACTIVATING and DEACTIVATED. * api-change:`payment-cryptography-data`: Expand length of message data field for Mac generation and validation to 8192 characters. * api-change:`stepfunctions`: Doc-only update to introduction, and edits to clarify input parameter and the set of control characters. * from version 1.39.6 * api-change:`ecs`: This release removes hookDetails for the Amazon ECS native blue/green deployments. * from version 1.39.5 * api-change:`bedrock-agent`: Add support for S3 Vectors as a vector store. * api-change:`datazone`: Removing restriction of environment profile identifier as required field, S3 feature release * api-change:`dynamodbstreams`: Added support for optional shard filter parameter in DescribeStream api that allows customers to fetch child shards of a read_only parent shard. * api-change:`ec2`: This release adds support for volume initialization status, which enables you to monitor when the initialization process for an EBS volume is completed. This release also adds IPv6 support to EC2 Instance Connect Endpoints, allowing you to connect to your EC2 Instance via a private IPv6 address. * api-change:`ecs`: Amazon ECS supports native blue/green deployments, allowing you to validate new service revisions before directing production traffic to them. * api-change:`events`: Add customer-facing logging for the EventBridge Event Bus, enabling customers to better observe their events and extract insights about their EventBridge usage. * api-change:`opensearch`: AWS Opensearch adds support for enabling s3 vector engine options. After enabling this option, customers will be able to create indices with s3 vector engine. * api-change:`pricing`: This release adds support for new filter types in GetProducts API, including EQUALS, CONTAINS, ANY_OF, and NONE_OF. * api-change:`quicksight`: Introduced custom instructions for topics. * api-change:`repostspace`: This release introduces Channels functionality with CreateChannel, GetChannel, ListChannels, and UpdateChannel operations. Channels provide dedicated collaboration spaces where teams can organize discussions and knowledge by projects, business units, or areas of responsibility. * api-change:`s3`: Amazon S3 Metadata live inventory tables provide a queryable inventory of all the objects in your general purpose bucket so that you can determine the latest state of your data. To help minimize your storage costs, use journal table record expiration to set a retention period for your records. * api-change:`s3tables`: Adds table bucket type to ListTableBucket and GetTableBucket API operations * api-change:`s3vectors`: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. * api-change:`sagemaker`: This release adds support for a new Restricted instance group type to enable a specialized environment for running Nova customization jobs on SageMaker HyperPod clusters. This release also adds support for SageMaker pipeline versioning. * from version 1.39.4 * api-change:`ec2`: Adds support to Capacity Blocks for ML for purchasing EC2 P6e-GB200 UltraServers. Customers can now purchase u-p6e-gb200x72 and u-p6e-gb200x36 UltraServers. Adds new DescribeCapacityBlocks andDescribeCapacityBlockStatus APIs. Adds support for CapacityBlockId to DescribeInstanceTopology. * api-change:`freetier`: This release introduces four new APIs: GetAccountPlanState and UpgradeAccountPlan for AWS account plan management; ListAccountActivities and GetAccountActivity that provide activity tracking capabilities. * api-change:`opsworkscm`: Removing content that refers to an S3 bucket that is no longer in use. * from version 1.39.3 * api-change:`customer-profiles`: This release introduces capability of create Segments via importing a CSV file directly. This consumes the CSV file and creates/updates corresponding profiles for the particular domain. * api-change:`deadline`: Added fields for output manifest reporting and task chunking parameters * api-change:`ec2`: This release adds GroupOwnerId as a response member to the DescribeSecurityGroupVpcAssociations API and also adds waiters for SecurityGroupVpcAssociations (SecurityGroupVpcAssociationAssociated and SecurityGroupVpcAssociationDisassociated). * api-change:`mediapackagev2`: This release adds support for Microsoft Smooth Streaming (MSS) and allows users to exclude DRM segment Metadata in MediaPackage v2 Origin Endpoints * api-change:`route53`: Amazon Route 53 now supports the iso-e regions for private DNS Amazon VPCs and cloudwatch healthchecks. * api-change:`sagemaker`: Changes include new StartSession API for SageMaker Studio spaces and CreateHubContentPresignedUrls API for SageMaker JumpStart. * from version 1.39.2 * api-change:`connectcases`: This release adds DeleteCase and DeleteRelatedItem APIs, which enable deleting cases and comments, undoing contact association, and removing service level agreements (SLAs) from cases. Contact center admins can use these APIs to delete cases when requested by customers and correct agent errors. * api-change:`ec2`: AWS Site-to-Site VPN now supports IPv6 addresses on outer tunnel IPs, making it easier for customers to build or transition to IPv6-only networks. * api-change:`s3`: Added support for directory bucket creation with tags and bucket ARN retrieval in CreateBucket, ListDirectoryBuckets, and HeadBucket operations * api-change:`s3control`: Added TagResource, UntagResource, and ListTagsForResource support for directory bucket * Update to 1.39.1 * api-change:`cleanroomsml`: This release introduces support for incremental training and distributed training for custom models in AWS Clean Rooms ML. * api-change:`datazone`: Add support for the new optional domain-unit-id parameter in the UpdateProject API. * api-change:`ec2`: Add Context to GetInstanceTypesFromInstanceRequirements API * api-change:`odb`: This release adds API operations for Oracle Database at AWS. You can use the APIs to create Exadata infrastructure, ODB networks, and Exadata and Autonomous VM clusters inside AWS data centers. The infrastructure is managed by OCI. You can integrate these resources with AWS services. * api-change:`qbusiness`: New ChatResponseConfiguration to Customize Q Business chat responses for specific use cases and communication needs. Updated Boosting capability allowing admins to provide preference on date attributes for recency and/or provide a preferred data source. * api-change:`rds`: Amazon RDS Custom for Oracle now supports multi-AZ database instances. * api-change:`sagemaker`: Updated field validation requirements for InstanceGroups. * from version 1.39.0 * api-change:`arc-zonal-shift`: Added support for on-demand practice runs and balanced capacity checks in ARC autoshift practice. * api-change:`b2bi`: Updated APIs to support inbound EDI split capabilities and additional Partnership-level configurations of generated EDI files' contents and format. * api-change:`bedrock`: Add support for API Keys, Re-Ranker, implicit filter for RAG / KB evaluation for Bedrock APIs. * api-change:`bedrock-runtime`: Add API Key and document citations support for Bedrock Runtime APIs * api-change:`cloudformation`: Added support for UNKNOWN drift status. * api-change:`config`: Updated ResourceType enum with new resource types onboarded by AWS Config as of June 2025 * api-change:`connect`: This release introduces ChatMetrics to the model, providing comprehensive analytics insights for Amazon Connect chat conversations. Users can access these detailed metrics through the AWS Connect API by using the DescribeContact operation with their specific instance and contact IDs * api-change:`dataexchange`: This release updates resource Id with alphanumeric constraint, including Asset id, Revision id, Data Set id, Job id, and Event Action id. * api-change:`dynamodb`: This change adds support for witnesses in global tables. It also adds a new table status, REPLICATION_NOT_AUTHORIZED. This status will indicate scenarios where global replicas table can't be utilized for data plane operations. * api-change:`events`: Added support for EventBridge Dualstack endpoints in AWS GovCloud (US) regions (us-gov-east-1 and us-gov-west-1). The dualstack endpoints are identical for both FIPS and non-FIPS configurations, following the format: events.{region}.api.aws * api-change:`glue`: releasing source processing properties to support source properties for ODB integrations * api-change:`iam`: Updated IAM ServiceSpecificCredential support to include expiration, API Key output format instead of username and password for services that will support API keys, and the ability to list credentials for all users in the account for a given service configuration. * api-change:`logs`: Increase minimum length of queryId parameter to 1 character. * api-change:`medical-imaging`: Added new fields to support the concept of primary image sets within the storage hierarchy. * api-change:`networkflowmonitor`: Add ConflictExceptions to UpdateScope and DeleteScope operations for scopes being mutated. * api-change:`outposts`: Make ContactName and ContactPhoneNumber required fields when creating and updating Outpost Site Addresses. * api-change:`pcs`: Fixed the validation pattern for an instance profile Amazon Resource Name (ARN) in AWS PCS. * api-change:`quicksight`: Introduced custom permission capabilities for reporting content. Added menu option in exploration to preserve configuration data when textbox menu option is used. Added support for Athena trusted identity propagation. * api-change:`ssm`: Introduces AccessType, a new filter value for the DescribeSessions API. * api-change:`transfer`: Added support for dual-stack (IPv4 and IPv6) endpoints for SFTP public endpoints and VPC-internal endpoints (SFTP, FTPS, FTP, and AS2), enabling customers to configure new servers with IPv4 or dual-stack mode, convert existing servers to dual-stack, and use IPv6 with service APIs. * feature:`bedrock`: Add support for retrieving a Bearer token from environment variables to enable bearer authentication with Bedrock services. * from version 1.38.46 * api-change:`config`: Added important considerations to the PutConformancePack and PutOrganizationConformancPack APIs. * api-change:`connect`: This release adds the following value to an InitiateAs enum: COMPLETED * api-change:`glue`: AWS Glue now supports schema, partition and sort management of Apache Iceberg tables using Glue SDK * api-change:`guardduty`: Update JSON target for Kubernetes workload resource type. * api-change:`qconnect`: Adding UnauthorizedException to public SDK * api-change:`rds`: StartDBCluster and StopDBCluster can now throw InvalidDBShardGroupStateFault. * api-change:`sesv2`: Added support for new SES regions * from version 1.38.45 * api-change:`deadline`: Added fields to track cumulative task retry attempts for steps and jobs * api-change:`ec2`: This release adds support for OdbNetworkArn as a target in VPC Route Tables * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. * api-change:`keyspaces`: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. * api-change:`keyspacesstreams`: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. * api-change:`kms`: This release updates AWS CLI examples for KMS APIs. * api-change:`qbusiness`: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer * api-change:`workspaces`: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories * from version 1.38.44 * api-change:`ecs`: Updates for change to Amazon ECS default log driver mode from blocking to non-blocking * api-change:`fsx`: Add support for the ability to create Amazon S3 Access Points for Amazon FSx for OpenZFS file systems. * api-change:`s3`: Adds support for additional server-side encryption mode and storage class values for accessing Amazon FSx data from Amazon S3 using S3 Access Points * api-change:`s3control`: Add support for the ability to use Amazon S3 Access Points with Amazon FSx for OpenZFS file systems. * api-change:`storagegateway`: This release adds IPv6 support to the Storage Gateway APIs. APIs that previously only accept or return IPv4 address will now accept or return both IPv4 and IPv6 addresses. * api-change:`textract`: Add RotationAngle field to Geometry of WORD blocks for Textract AnalyzeDocument API * api-change:`workspaces-thin-client`: Remove Tags field from Get API responses * from version 1.38.43 * api-change:`aiops`: Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps). * api-change:`batch`: Add userdataType to LaunchTemplateSpecification and LaunchTemplateSpecificationOverride. * api-change:`bedrock`: We are making ListFoundationModelAgreementOffers, DeleteFoundationModelAgreement, CreateFoundationModelAgreement, GetFoundationModelAvailability, PutUseCaseForModelAccess and GetUseCaseForModelAccess APIs public, previously they were console. * api-change:`ec2`: This release allows you to create and register AMIs while maintaining their underlying EBS snapshots within Local Zones. * api-change:`elbv2`: Add Paginator for DescribeAccountLimits, and fix Paginators for DescribeTrustStoreAssociations, DescribeTrustStoreRevocations, and DescribeTrustStores * api-change:`gamelift`: Add support for UDP ping beacons to ListLocations API, including new PingBeacon and UDPEndpoint data types within its Locations return value. Use UDP ping beacon endpoints to help measure real- time network latency for multiplayer games. * api-change:`license-manager`: AWS License Manager now supports license type conversions for AWS Marketplace products. Customers can provide Marketplace codes in the source license context or destination license context in the CreateLicenseConversionTaskForResource requests. * api-change:`rds`: Adding support for RDS on Dedicated Local Zones, including local backup target, snapshot availability zone and snapshot target * api-change:`route53resolver`: Add support for iterative DNS queries through the new INBOUND_DELEGATION endpoint. Add delegation support through the Outbound Endpoints with DELEGATE rules. * api-change:`transcribe`: This Feature Adds Support for the "et-EE" Locale for Batch Operations * from version 1.38.42 * api-change:`glue`: AWS Glue now supports sort and z-order strategy for managed automated compaction for Iceberg tables in addition to binpack. * api-change:`s3tables`: S3 Tables now supports sort and z-order compaction strategies for Iceberg tables in addition to binpack. * api-change:`workspaces-instances`: Added support for Amazon WorkSpaces Instances API * from version 1.38.41 * api-change:`bedrock`: Add support for tiers in Content Filters and Denied Topics for Amazon Bedrock Guardrails. * api-change:`ecs`: Add ECS support for Windows Server 2025 * api-change:`geo-places`: Geocode, ReverseGeocode, and GetPlace APIs added Intersections and SecondaryAddresses. To use, add to the AdditionalFeatures list in your request. This provides info about nearby intersections and secondary addresses that are associated with a main address. Also added MainAddress and ParsedQuery. * api-change:`glue`: AWS Glue Data Quality now provides aggregated metrics in evaluation results when publishAggregatedMetrics with row-level results are enabled. These metrics include summary statistics showing total counts of processed, passed, and failed rows and rules in a single view. * api-change:`mediaconvert`: This release adds a new SPECIFIED_OPTIMAL option for handling DDS when using DVB-Sub with high resolution video. * from version 1.38.40 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`emr-serverless`: This release adds the capability to enable IAM IdentityCenter Trusted Identity Propagation for users running Interactive Sessions on EMR Serverless Applications. * api-change:`lambda`: Support Schema Registry feature for Kafka Event Source Mapping. Customers can now configure a Schema Registry to enable schema validation and filtering for Avro, Protobuf, and JSON-formatted events in Lambda for Kafka Event Source. * api-change:`payment-cryptography`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`payment-cryptography-data`: Additional support for managing HMAC keys that adheres to changes documented in X9.143-2021 and provides better interoperability for key import/export * api-change:`sagemaker`: This release introduces alternative support for utilizing CFN templates from S3 for SageMaker Projects. * from version 1.38.39 * api-change:`aiops`: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. * api-change:`autoscaling`: Add IncludeInstances parameter to DescribeAutoScalingGroups API * api-change:`imagebuilder`: Added paginators for `imagebuilder`. * api-change:`logs`: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. * api-change:`s3`: Added support for renaming objects within the same bucket using the new RenameObject API. * api-change:`sagemaker`: Add support for p6-b200 instance type for SageMaker Hyperpod * from version 1.38.38 * api-change:`accessanalyzer`: We are launching a new analyzer type, internal access analyzer. The new analyzer will generate internal access findings, which help customers understand who within their AWS organization or AWS Account has access to their critical AWS resources. * api-change:`acm`: Adds support for Exportable Public Certificates * api-change:`backup`: AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability. * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a trained model into Amazon Bedrock for inference. * api-change:`dms`: Add "Virtual" field to Data Provider as well as "S3Path" and "S3AccessRoleArn" fields to DataProvider settings * api-change:`guardduty`: Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring. * api-change:`inspector2`: Add Code Repository Scanning as part of AWS InspectorV2 * api-change:`mpa`: This release enables customers to create Multi-party approval teams and approval requests to protect supported operations. * api-change:`network-firewall`: Release of Active Threat Defense in Network Firewall * api-change:`organizations`: Add support for policy operations on the SECURITYHUB_POLICY policy type. * api-change:`securityhub`: Adds operations, structures, and exceptions required for public preview release of Security Hub V2. * api-change:`sts`: The AWS Security Token Service APIs AssumeRoleWithSAML and AssumeRoleWithWebIdentity can now be invoked without pre-configured AWS credentials in the SDK configuration. * api-change:`wafv2`: AWS WAF can now suggest protection packs for you based on the application information you provide when you create a webACL. * from version 1.38.37 * api-change:`bedrock`: This release of the SDK has the API and documentation for the createcustommodel API. This feature lets you copy a Amazon SageMaker trained Amazon Nova model into Amazon Bedrock for inference. * api-change:`ecr`: The `DescribeImageScanning` API now includes `lastInUseAt` and `InUseCount` fields that can be used to prioritize vulnerability remediation for images that are actively being used. * api-change:`network-firewall`: You can now create firewalls using a Transit Gateway instead of a VPC, resulting in a TGW attachment. * api-change:`sagemaker`: This release 1) adds a new S3DataType Converse for SageMaker training 2)adds C8g R7gd M8g C6in P6 P6e instance type for SageMaker endpoint 3) adds m7i, r7i, c7i instance type for SageMaker Training and Processing. * from version 1.38.36 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`connectcampaignsv2`: Added PutInstanceCommunicationLimits and GetInstanceCommunicationLimits APIs * api-change:`ecs`: This Amazon ECS release supports updating the capacityProviderStrategy parameter in update-service. * api-change:`emr-serverless`: This release adds support for retrieval of the optional executionIamPolicy field in the GetJobRun API response. * api-change:`iotfleetwise`: Add new status READY_FOR_CHECKIN used for vehicle synchronisation * api-change:`kms`: AWS KMS announces the support of ML-DSA key pairs that creates post-quantum safe digital signatures. * api-change:`pcs`: Fixed regex patterns for ARN fields. * from version 1.38.35 * api-change:`controlcatalog`: Introduced ListControlMappings API that retrieves control mappings. Added control aliases and governed resources fields in GetControl and ListControls APIs. New filtering capability in ListControls API, with implementation identifiers and implementation types. * api-change:`eks`: Release for EKS Pod Identity Cross Account feature and disableSessionTags flag. * api-change:`lexv2-models`: Add support for the Assisted NLU feature to improve bot performance * api-change:`networkmanager`: Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS for Db2 cross-Region replicas in standby mode. * api-change:`wafv2`: WAF now provides two DDoS protection options: resource- level monitoring for Application Load Balancers and the AWSManagedRulesAntiDDoSRuleSet managed rule group for CloudFront distributions. * bugfix:Serialization: Fixes a bug where instances of decimal.Decimal were unable to be passed into JSON serialization * from version 1.38.34 * api-change:`gameliftstreams`: Documentation updates for Amazon GameLift Streams to address formatting errors, correct resource ID examples, and update links to other guides * from version 1.38.33 * api-change:`appsync`: Deprecate `atRestEncryptionEnabled` and `transitEncryptionEnabled` attributes in `CreateApiCache` action. Encryption is always enabled for new caches. * api-change:`ce`: Support dual-stack endpoints for ce api * api-change:`customer-profiles`: This release introduces capability of Profile Explorer, using correct ingestion timestamp & using historical data for computing calculated attributes, and new standard objects for T&H as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Release to support Elastic VMware Service (Amazon EVS) Subnet and Amazon EVS Network Interface Types. * api-change:`efs`: Added support for Internet Protocol Version 6 (IPv6) on EFS Service APIs and mount targets. * api-change:`marketplace-catalog`: The ListEntities API now supports the EntityID, LastModifiedDate, ProductTitle, and Visibility filters for machine learning products. You can also sort using all of those filters. * api-change:`workspaces-thin-client`: Add ConflictException to UpdateEnvironment API * from version 1.38.32 * api-change:`bedrock-agent-runtime`: This release introduces the `PromptCreationConfigurations` input parameter, which includes fields to control prompt population for `InvokeAgent` or `InvokeInlineAgent` requests. * api-change:`kms`: Remove unpopulated KeyMaterialId from Encrypt Response * api-change:`rds`: Include Global Cluster Identifier in DBCluster if the DBCluster is a Global Cluster Member. * api-change:`rekognition`: Adds support for defining an ordered preference list of different Rekognition Face Liveness challenge types when calling CreateFaceLivenessSession. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Taipei) Region (ap-east-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region. * api-change:`s3tables`: S3 Tables now supports getting details about a table via its table ARN. * from version 1.38.31 * api-change:`bcm-pricing-calculator`: Updating the minimum for List APIs to be 1 (instead of 0) * api-change:`cloudformation`: Add new warning type 'EXCLUDED_PROPERTIES' * api-change:`kms`: AWS KMS announces the support for on-demand rotation of symmetric-encryption KMS keys with imported key material (EXTERNAL origin). * api-change:`wafv2`: AWS WAF adds support for ASN-based traffic filtering and support for ASN-based rate limiting. * from version 1.38.30 * api-change:`amplify`: Update documentation for cacheConfig in CreateApp API * api-change:`evs`: Amazon Elastic VMware Service (Amazon EVS) allows you to run VMware Cloud Foundation (VCF) directly within your Amazon VPC including simplified self-managed migration experience with guided workflow in AWS console or via AWS CLI, get full access to their VCF deployment and VCF license portability. * api-change:`invoicing`: Added new Invoicing ListInvoiceSummaries API Operation * api-change:`mediaconnect`: This release updates the DescribeFlow API to show peer IP addresses. You can now identify the peer IP addresses of devices connected to your sources and outputs. This helps you to verify and troubleshoot your flow's active connections. * api-change:`mediaconvert`: This release includes support for embedding and signing C2PA content credentials in MP4 outputs. * api-change:`network-firewall`: You can now monitor flow and alert log metrics from the Network Firewall console. * api-change:`sagemaker`: Added support for p6-b200 instance type in SageMaker Training Jobs and Training Plans. * api-change:`transcribe`: AWS Healthscribe now supports new templates for the clinical note summary: BIRP, SIRP, DAP, BEHAVIORAL_SOAP, and PHYSICAL_SOAP * from version 1.38.29 * api-change:`apigateway`: Adds support to set the routing mode for a custom domain name. * api-change:`apigatewayv2`: Adds support to create routing rules and set the routing mode for a custom domain name. * api-change:`emr-serverless`: AWS EMR Serverless: Adds a new option in the CancelJobRun API in EMR 7.9.0+, to cancel a job with grace period. This feature is enabled by default with a 120-second grace period for streaming jobs and is not enabled by default for batch jobs. * from version 1.38.28 * api-change:`athena`: Add support for the managed query result in the workgroup APIs. The managed query result configuration enables users to store query results to Athena owned storage. * api-change:`backup`: You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations. * api-change:`bedrock-agent`: This release adds the Agent Lifecycle Paused State feature to Amazon Bedrock agents. By using an agent's alias, you can temporarily suspend agent operations during maintenance, updates, or other situations. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze Amazon Aurora database clusters and generate Aurora I/O-Optimized recommendations. * api-change:`cost-optimization-hub`: Support recommendations for Aurora instance and Aurora cluster storage. * api-change:`ecs`: Updates Amazon ECS documentation to include note for upcoming default log driver mode change. * api-change:`eks`: Add support for filtering ListInsights API calls on MISCONFIGURATION insight category * api-change:`entityresolution`: Add support for generating match IDs in near real-time. * api-change:`pcs`: Introduces SUSPENDING and SUSPENDED states for clusters, compute node groups, and queues. * api-change:`synthetics`: Support for Java runtime handler pattern. * from version 1.38.27 * api-change:`emr-serverless`: This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy. * api-change:`sagemaker`: Release new parameter CapacityReservationConfig in ProductionVariant * from version 1.38.26 * api-change:`amplify`: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. * api-change:`autoscaling`: Add support for "apple" CpuManufacturer in ABIS * api-change:`bcm-pricing-calculator`: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. * api-change:`cloudtrail`: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store * api-change:`connect`: Amazon Connect Service Feature: Email Recipient Limit Increase * api-change:`dataexchange`: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. * api-change:`datasync`: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. * api-change:`fsx`: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre * api-change:`ivs-realtime`: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. * api-change:`mwaa`: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. * api-change:`s3`: Adding checksum support for S3 PutBucketOwnershipControls API. * api-change:`sagemaker`: Add maintenance status field to DescribeMlflowTrackingServer API response * from version 1.38.25 * api-change:`cost-optimization-hub`: This release allows customers to modify their preferred commitment term and payment options. * api-change:`ec2`: Enable the option to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs) * api-change:`events`: Allow for more than 2 characters for location codes in EventBridge ARNs * api-change:`network-firewall`: You can now use VPC endpoint associations to create multiple firewall endpoints for a single firewall. * api-change:`synthetics`: Add support to change ephemeral storage. Add a new field "TestResult" under CanaryRunStatus. * from version 1.38.24 * api-change:`ce`: This release introduces Cost Comparison feature (GetCostAndUsageComparisons, GetCostComparisonDrivers) allowing you find cost variations across multiple dimensions and identify key drivers of spending changes. * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support storage profiles. With storage profiles, you can map file paths between a workstation and the worker hosts running the job. * api-change:`ec2`: This release adds three features - option to store AWS Site-to-Site VPN pre-shared keys in AWS Secrets Manager, GetActiveVpnTunnelStatus API to check the in-use VPN algorithms, and SampleType option in GetVpnConnectionDeviceSampleConfiguration API to get recommended sample configs for VPN devices. * Update to 1.38.23 * api-change:`ec2`: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances * api-change:`security-ir`: Update PrincipalId pattern documentation to reflect what user should receive back from the API call * from version 1.38.22 * api-change:`amp`: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus * api-change:`auditmanager`: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. * api-change:`dsql`: Features: support for customer managed encryption keys * api-change:`glue`: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning * from version 1.38.21 * api-change:`application-autoscaling`: Doc only update that addresses a customer reported issue. * api-change:`bedrock-agent-runtime`: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. * api-change:`cloudwatch`: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. * api-change:`ec2`: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames * api-change:`partnercentral-selling`: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. * from version 1.38.20 * api-change:`datasync`: Remove Discovery APIs from the DataSync service * api-change:`ec2`: This release expands the ModifyInstanceMaintenanceOptions API to enable or disable instance migration during customer-initiated reboots for EC2 Scheduled Reboot Events. * api-change:`glue`: Enhanced AWS Glue ListConnectionTypes API Model with additional metadata fields. * api-change:`inspector2`: This release adds GetClustersForImage API and filter updates as part of the mapping of container images to running containers feature. * api-change:`oam`: Add IncludeTags field to GetLink, GetSink and UpdateLink API * api-change:`privatenetworks`: The privatenetworks client has been removed following the deprecation of the service. * api-change:`rds`: This release introduces the new DescribeDBMajorEngineVersions API for describing the properties of specific major versions of database engines. * from version 1.38.19 * api-change:`dsql`: CreateMultiRegionCluster and DeleteMultiRegionCluster APIs removed * api-change:`ec2`: This release includes new APIs for System Integrity Protection (SIP) configuration and automated root volume ownership delegation for EC2 Mac instances. * api-change:`mediapackagev2`: This release adds support for DVB-DASH, EBU- TT-D subtitle format, and non-compacted manifests for DASH in MediaPackage v2 Origin Endpoints. * from version 1.38.18 * api-change:`bedrock-data-automation`: Add support for VIDEO modality to BlueprintType enum. * api-change:`bedrock-data-automation-runtime`: Add AssetProcessingConfiguration for video segment to InputConfiguration * api-change:`codepipeline`: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. * api-change:`ecs`: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. * api-change:`emr`: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. * api-change:`glue`: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. * api-change:`neptune`: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. * api-change:`service-quotas`: This release introduces CreateSupportCase operation to SDK. * from version 1.38.17 * api-change:`bedrock-agent`: Amazon Bedrock Flows introduces DoWhile loops nodes, parallel node executions, and enhancements to knowledge base nodes. * api-change:`codebuild`: AWS CodeBuild now supports Docker Server capability * api-change:`controltower`: Updated the descriptions for the AWS Control Tower Baseline APIs to make them more intuitive. * api-change:`dms`: Introduces Data Resync feature to describe-table- statistics and IAM database authentication for MariaDB, MySQL, and PostgreSQL. * api-change:`pcs`: This release adds support for Slurm accounting. For more information, see the Slurm accounting topic in the AWS PCS User Guide. Slurm accounting is supported for Slurm 24.11 and later. This release also adds 24.11 as a valid value for the version parameter of the Scheduler data type. * api-change:`workspaces`: Added the new AlwaysOn running mode for WorkSpaces Pools. Customers can now choose between AlwaysOn (for instant access, with hourly usage billing regardless of connection status), or AutoStop (to optimize cost, with a brief startup delay) for their pools. * from version 1.38.16 * api-change:`cognito-idp`: Add exceptions to WebAuthn operations. * api-change:`firehose`: This release adds catalogARN support for s3 tables multi-catalog catalogARNs. * api-change:`logs`: This release adds a new API "ListLogGroups" and an improvement in API "DescribeLogGroups" * api-change:`mediaconvert`: This update enables cropping for video overlays and adds a new STL to Teletext upconversion toggle to preserve styling. * from version 1.38.15 * api-change:`bedrock`: Enable cross-Region inference for Amazon Bedrock Guardrails by using the crossRegionConfig parameter when calling the CreateGuardrail or UpdateGuardrail operation. * api-change:`bedrock-agent-runtime`: Changes for enhanced metadata in trace * api-change:`controltower`: AWS Control Tower now reports the inheritance drift status for EnabledBaselines through the GetEnabledBaseline and ListEnabledBaselines APIs. You can now filter EnabledBaselines by their enablement and drift status using the ListEnabledBaselines API to view accounts and OUs that require attention. * api-change:`dsql`: CreateMultiRegionClusters and DeleteMultiRegionClusters APIs marked as deprecated. Introduced new multi-Region clusters creation experience through multiRegionProperties parameter in CreateCluster API. * api-change:`ecs`: This release extends functionality for Amazon EBS volumes attached to Amazon ECS tasks by adding support for the new EBS volumeInitializationRate parameter in ECS RunTask/StartTask/CreateService/UpdateService APIs. * api-change:`license-manager`: Add Tagging feature to resources in the Managed Entitlements service. License and Grant resources can now be tagged. * from version 1.38.14 * api-change:`deadline`: AWS Deadline Cloud service-managed fleets now support configuration scripts. Configuration scripts make it easy to install additional software, like plugins and packages, onto a worker. * api-change:`ec2`: EC2 - Adding support for AvailabilityZoneId * api-change:`iam`: Updating the endpoint list for the Identity and access management (IAM) service * api-change:`medialive`: Add support to the AV1 rate control mode * api-change:`mediatailor`: Documenting that EnabledLoggingStrategies is always present in responses of PlaybackConfiguration read operations. * api-change:`s3control`: Updates to support S3 Express zonal endpoints for directory buckets in AWS CLI * api-change:`sagemaker`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`supplychain`: Launch new AWS Supply Chain public APIs for DataIntegrationEvent, DataIntegrationFlowExecution and DatasetNamespace. Also add more capabilities to existing public APIs to support direct dataset event publish, data deduplication in DataIntegrationFlow, partition specification of custom datasets. * from version 1.38.13 * api-change:`athena`: Minor API documentation updates * api-change:`logs`: We are pleased to announce limit increases to our grok processor logs transformation feature. Now you can define 20 Grok patterns in their configurations, with an expanded total pattern matching limit of 512 characters. * api-change:`synthetics`: Add support to retry a canary automatically after schedule run failures. Users can enable this feature by configuring the RetryConfig field when calling the CreateCanary or UpdateCanary API. Also includes changes in GetCanary and GetCanaryRuns to support retrieving retry configurations. * api-change:`workspaces`: Remove parameter EnableWorkDocs from WorkSpacesServiceModel due to end of support of Amazon WorkDocs service. * from version 1.38.12 * api-change:`cloudfront`: Doc-only update for CloudFront. These changes include customer-reported issues. * api-change:`codepipeline`: Add support for Secrets Manager and Plaintext environment variable types in Commands action * api-change:`ec2`: Launching the feature to support ENA queues offering flexibility to support multiple queues per Enhanced Network Interface (ENI) * api-change:`glue`: This new release supports customizable RefreshInterval for all Saas ZETL integrations from 15 minutes to 6 days. * api-change:`guardduty`: Updated description of a data structure. * api-change:`sso-admin`: Update PutPermissionBoundaryToPermissionSet API's managedPolicyArn pattern to allow valid ARN only. Update ApplicationName to allow white spaces. * from version 1.38.11 * api-change:`ec2`: This release adds API support for Path Component Exclusion (Filter Out ARN) for Reachability Analyzer * api-change:`imagebuilder`: Updated the CreateImageRecipeRequest ParentImage description to include all valid values as updated with the SSM Parameters project. * api-change:`medialive`: Enables Updating Anywhere Settings on a MediaLive Anywhere Channel. * api-change:`sagemaker`: SageMaker AI Studio users can now migrate to SageMaker Unified Studio, which offers a unified web-based development experience that integrates AWS data, analytics, artificial intelligence (AI), and machine learning (ML) services, as well as additional tools and resource * api-change:`synthetics`: Add support to test a canary update by invoking a dry run of a canary. This behavior can be used via the new StartCanaryDryRun API along with new fields in UpdateCanary to apply dry run changes. Also includes changes in GetCanary and GetCanaryRuns to support retrieving dry run configurations. * from version 1.38.10 * api-change:`ec2`: This release adds support for Amazon EBS Provisioned Rate for Volume Initialization, which lets you specify a volume initialization rate to ensure that your EBS volumes are initialized in a predictable amount of time. * api-change:`servicecatalog`: ServiceCatalog's APIs (DeleteServiceAction, DisassociateServiceActionFromProvisioningArtifact, AssociateServiceActionWithProvisioningArtifact) now throw InvalidParametersException when IdempotencyToken is invalid. * api-change:`timestream-query`: Add dualstack endpoints support and correct us-gov-west-1 FIPS endpoint. * api-change:`timestream-write`: Add dualstack endpoints support. * from version 1.38.9 * api-change:`datazone`: This release adds a new authorization policy to control the usage of custom AssetType when creating an Asset. Customer can now add new grant(s) of policyType USE_ASSET_TYPE for custom AssetTypes to apply authorization policy to projects members and domain unit owners. * api-change:`devicefarm`: Add an optional parameter to the GetDevicePoolCompatibility API to pass in project information to check device pool compatibility. * api-change:`ec2`: This update introduces API operations to manage and create local gateway VIF and VIF groups. It also includes API operations to describe Outpost LAGs and service link VIFs. * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`mediaconvert`: This release adds an optional sidecar per-frame video quality metrics report and an ALL_PCM option for audio selectors. It also changes the data type for Probe API response fields related to video and audio bitrate from integer to double. * from version 1.38.8 * api-change:`bedrock-data-automation`: Added support for Custom output and blueprints for AUDIO data types. * api-change:`ds`: Doc only update - fixed typos. * api-change:`kinesis`: Marking ResourceARN as required for Amazon Kinesis Data Streams APIs TagResource, UntagResource, and ListTagsForResource. * from version 1.38.7 * api-change:`appconfig`: Adding waiter support for deployments and environments; documentation updates * api-change:`connect`: This release adds the following fields to DescribeContact: DisconnectReason, AgentInitiatedHoldDuration, AfterContactWorkStartTimestamp, AfterContactWorkEndTimestamp, AfterContactWorkDuration, StateTransitions, Recordings, ContactDetails, ContactEvaluations, Attributes * api-change:`sagemaker`: Feature - Adding support for Scheduled and Rolling Update Software in Sagemaker Hyperpod. * api-change:`verifiedpermissions`: Amazon Verified Permissions / Features : Adds support for tagging policy stores. * from version 1.38.6 * api-change:`bedrock`: You can now specify a cross region inference profile as a teacher model for the CreateModelCustomizationJob API. Additionally, the GetModelCustomizationJob API has been enhanced to return the sub-task statuses of a customization job within the StatusDetails response field. * api-change:`bedrock-agent`: Features: Add inline code node to prompt flow * api-change:`bedrock-agent-runtime`: Support for Custom Orchestration within InlineAgents * api-change:`cleanrooms`: This release adds support for ProtectedQuery results to be delivered to more than one collaboration member via the new distribute output configuration in StartProtectedQuery. * api-change:`deadline`: Adds support for tag management on workers and tag inheritance from fleets to their associated workers. * api-change:`ec2`: Launch of cost distribution feature for IPAM owners to distribute costs to internal teams. * api-change:`ecr`: Adds dualstack support for Amazon Elastic Container Registry (Amazon ECR). * api-change:`ecr-public`: Adds dualstack support for Amazon Elastic Container Registry Public (Amazon ECR Public). * api-change:`logs`: CloudWatch Logs supports "DELIVERY" log class. This log class is used only for delivering AWS Lambda logs to Amazon S3 or Amazon Data Firehose. * api-change:`mailmanager`: Introducing new RuleSet rule PublishToSns action, which allows customers to publish email notifications to an Amazon SNS topic. New PublishToSns action enables customers to easily integrate their email workflows via Amazon SNS, allowing them to notify other systems about important email events. * from version 1.38.5 * api-change:`connectcases`: Introduces CustomEntity as part of the UserUnion data type. This field is used to indicate the entity who is performing the API action. * api-change:`kinesis`: Amazon KDS now supports tagging and attribute-based access control (ABAC) for enhanced fan-out consumers. * api-change:`pinpoint-sms-voice-v2`: AWS End User Messaging has added MONITOR and FILTER functionality to SMS Protect. * api-change:`qbusiness`: Add support for anonymous user access for Q Business applications * api-change:`sagemaker`: Introduced support for P5en instance types on SageMaker Studio for JupyterLab and CodeEditor applications. * api-change:`sagemaker-metrics`: SageMaker Metrics Service now supports FIPS endpoint in all US and Canada Commercial regions. * api-change:`ssm`: This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent. * api-change:`ssm-guiconnect`: This release adds API support for the connection recording GUI Connect feature of AWS Systems Manager * from version 1.38.4 * api-change:`acm`: Add support for file-based HTTP domain control validation, available through Amazon CloudFront. * api-change:`bedrock-runtime`: This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively. * api-change:`cloudfront`: Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK. * api-change:`dynamodb`: Doc only update for GSI descriptions. * api-change:`imagebuilder`: Add integration with SSM Parameter Store to Image Builder. * from version 1.38.3 * api-change:`bedrock-runtime`: You can now reference images and documents stored in Amazon S3 when using InvokeModel and Converse APIs with Amazon Nova Lite and Nova Pro. This enables direct integration of S3-stored multimedia assets in your model requests without manual downloading or base64 encoding. * api-change:`ecs`: Documentation only release for Amazon ECS. * api-change:`marketplace-deployment`: Doc only update for the AWS Marketplace Deployment Service that fixes several customer-reported issues. * from version 1.38.2 * api-change:`apprunner`: AWS App Runner adds Node.js 22 runtime. * api-change:`appsync`: Add data source support to Event APIs * api-change:`bedrock-data-automation`: Added support for modality routing and modality enablement on CreateDataAutomationProject and UpdateDataAutomationProject APIs * api-change:`codebuild`: Remove redundant validation check. * api-change:`dynamodb`: Add support for ARN-sourced account endpoint generation for TransactWriteItems. This will generate account endpoints for DynamoDB TransactWriteItems requests using ARN-sourced account ID when available. * api-change:`ecs`: Documentation only release for Amazon ECS * api-change:`pcs`: Documentation-only update: added valid values for the version property of the Scheduler and SchedulerRequest data types. * api-change:`rds`: This Amazon RDS release adds support for managed master user passwords for Oracle CDBs. * Update to 1.38.1 * api-change:`codebuild`: Add support for custom instance type for reserved capacity fleets * api-change:`ecs`: Add support to roll back an In_Progress ECS Service Deployment * api-change:`imagebuilder`: Add all `imagebuilder` modeled paginators that are currently supported by botocore. * api-change:`resource-explorer-2`: Documentation-only update for CreateView option correction * from version 1.38.0 * api-change:`account`: AWS Account Management now supports account name update via IAM principals. * api-change:`cognito-idp`: This release adds refresh token rotation. * api-change:`ec2`: Added support for ClientRouteEnforcementOptions flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`entityresolution`: To expand support for matching records using digital identifiers with TransUnion * api-change:`mq`: You can now delete Amazon MQ broker configurations using the DeleteConfiguration API. For more information, see Configurations in the Amazon MQ API Reference. * api-change:`redshift-serverless`: Provides new and updated API members to support the Redshift Serverless reservations feature. * api-change:`s3control`: Fix endpoint resolution test cases * feature:Python: End of support for Python 3.8 * from version 1.37.38 * api-change:`arc-zonal-shift`: Updates to documentation and exception types for Zonal Autoshift * api-change:`budgets`: Releasing the new Budget FilterExpression and Metrics fields to support more granular filtering options. These new fields are intended to replace CostFilters and CostTypes, which are deprecated as of 2025/18/04. * api-change:`firehose`: Documentation update regarding the number of streams you can create using the CreateDeliveryStream API. * api-change:`mediatailor`: Added support for Recurring Prefetch and Traffic Shaping on both Single and Recurring Prefetch. ListPrefetchSchedules now return single prefetchs by default and can be provided scheduleType of SINGLE, RECURRING, AND ALL. * api-change:`qbusiness`: The CheckDocumentAccess API for Amazon Q Business is a self-service debugging API that allows administrators to verify document access permissions and review Access Control List (ACL) configurations. * from version 1.37.37 * api-change:`qconnect`: This release adds support for the following capabilities: Chunking generative answer replies from Amazon Q in Connect. Integration support for the use of additional LLM models with Amazon Q in Connect. * api-change:`sagemaker`: This release adds a new Neuron driver option in InferenceAmiVersion parameter for ProductionVariant. Additionally, it adds support for fetching model lifecycle status in the ListModelPackages API. Users can now use this API to view the lifecycle stage of models that have been shared with them. * api-change:`service-quotas`: Add new optional SupportCaseAllowed query parameter to the RequestServiceQuotaIncrease API * from version 1.37.36 * api-change:`accessanalyzer`: Added new resource types to evaluate for public access in resource policies and added support for S3 directory bucket access points. * api-change:`amp`: Add Workspace Configuration APIs for Amazon Prometheus * api-change:`autoscaling`: Doc only update for EC2 Auto Scaling. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support custom metrics for evaluation. * api-change:`connect`: This release adds following capabilities to Contact Lens Rules APIs 1/ 'ASSIGN_SLA' action and '$.Case.TemplateId' comparison value for 'OnCaseCreate' and 'OnCaseUpdate' event sources 2/ 'OnSlaBreach' Cases event source which supports '$.RelatedItem.SlaConfiguration.Name' comparison value * api-change:`ecs`: Adds a new AccountSetting - defaultLogDriverMode for ECS. * api-change:`iotfleetwise`: We've added stricter parameter validations to AWS IoT FleetWise signal catalog, model manifest, and decoder manifest APIs. * api-change:`memorydb`: Added support for IPv6 and dual stack for Valkey and Redis clusters. Customers can now launch new Valkey and Redis clusters with IPv6 and dual stack networking support. * api-change:`omics`: Add versioning for HealthOmics workflows * from version 1.37.35 * api-change:`connectcases`: This feature provides capabilities to help track and meet service level agreements (SLAs) on cases programmatically. It allows configuring a new related item of type `Sla` on a case using CreateRelatedItem API and provides the ability to search for this new related item using SearchRelatedItems API. * api-change:`dsql`: Added GetClusterEndpointService API. The new API allows retrieving endpoint service name specific to a cluster. * api-change:`eks`: Added support for new AL2023 ARM64 NVIDIA AMIs to the supported AMITypes. * api-change:`events`: Adding support for KmsKeyIdentifer in CreateConnection, UpdateConnection and DescribeConnection APIs * api-change:`resource-groups`: Resource Groups: TagSyncTasks can be created with ResourceQuery * api-change:`s3tables`: S3 Tables now supports setting encryption configurations on table buckets and tables. Encryption configurations can use server side encryption using AES256 or KMS customer-managed keys. * api-change:`servicecatalog`: Updated default value for the access-level- filter in SearchProvisionedProducts API to Account. For access to userLevel or roleLevel, the user must provide access-level-filter parameter. * from version 1.37.34 * api-change:`entityresolution`: This is to add new metrics to our GetIdMappingJob API and also update uniqueId naming for batchDeleteUniqueIds API to be more accurate * api-change:`taxsettings`: Indonesia SOR Tax Registration Launch * from version 1.37.33 * api-change:`connect-contact-lens`: Making sentiment optional for ListRealtimeContactAnalysisSegments Response depending on conversational analytics configuration * api-change:`datazone`: Raise hard limit of authorized principals per SubscriptionTarget from 10 to 20. * api-change:`detective`: Add support for Detective DualStack endpoints * api-change:`dynamodb`: Doc only update for API descriptions. * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints for CN and GOV regions * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints for CN regions * api-change:`pcs`: Changed the minimum length of clusterIdentifier, computeNodeGroupIdentifier, and queueIdentifier to 3. * api-change:`verifiedpermissions`: Adds deletion protection support to policy stores. Deletion protection is disabled by default, can be enabled via the CreatePolicyStore or UpdatePolicyStore APIs, and is visible in GetPolicyStore. * from version 1.37.32 * api-change:`application-autoscaling`: Application Auto Scaling now supports horizontal scaling for Elasticache Memcached self-designed clusters using target tracking scaling policies and scheduled scaling. * api-change:`elasticache`: AWS ElastiCache SDK now supports using MemcachedUpgradeConfig parameter with ModifyCacheCluster API to enable updating Memcached cache node types. Please refer to updated AWS ElastiCache public documentation for detailed information on API usage and implementation. * api-change:`m2`: Introduce three new APIs: CreateDataSetExportTask, GetDataSetExportTask and ListDataSetExportHistory. Add support for batch restart for Blu Age applications. * api-change:`medialive`: AWS Elemental MediaLive / Features : Add support for CMAF Ingest CaptionLanguageMappings, TimedMetadataId3 settings, and Link InputResolution. * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Hallucination Reduction feature. If enabled, Q Business will detect and attempt to remove Hallucinations from certain Chat requests. * api-change:`quicksight`: Add support to analysis and sheet level highlighting in QuickSight. * from version 1.37.31 * api-change:`controlcatalog`: The GetControl API now surfaces a control's Severity, CreateTime, and Identifier for a control's Implementation. The ListControls API now surfaces a control's Behavior, Severity, CreateTime, and Identifier for a control's Implementation. * api-change:`dynamodb`: Documentation update for secondary indexes and Create_Table. * api-change:`glue`: The TableOptimizer APIs in AWS Glue now return the DpuHours field in each TableOptimizerRun, providing clients visibility to the DPU-hours used for billing in managed Apache Iceberg table compaction optimization. * api-change:`groundstation`: Support tagging Agents and adjust input field validations * api-change:`transfer`: This launch includes 2 enhancements to SFTP connectors user-experience: 1) Customers can self-serve concurrent connections setting for their connectors, and 2) Customers can discover the public host key of remote servers using their SFTP connectors. * from version 1.37.30 * api-change:`bedrock-runtime`: This release introduces our latest bedrock runtime API, InvokeModelWithBidirectionalStream. The API supports both input and output streams and is supported by only HTTP2.0. * api-change:`ce`: This release supports Pagination traits on Cost Anomaly Detection APIs. * api-change:`cost-optimization-hub`: This release adds resource type "MemoryDbReservedInstances" and resource type "DynamoDbReservedCapacity" to the GetRecommendation, ListRecommendations, and ListRecommendationSummaries APIs to support new MemoryDB and DynamoDB RI recommendations. * api-change:`iotfleetwise`: This release adds the option to update the strategy of state templates already associated to a vehicle, without the need to remove and re-add them. * api-change:`securityhub`: Documentation updates for AWS Security Hub. * api-change:`storagegateway`: Added new ActiveDirectoryStatus value, ListCacheReports paginator, and support for longer pagination tokens. * api-change:`taxsettings`: Uzbekistan Launch on TaxSettings Page * Update to 1.37.29 * api-change:`bedrock`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`bedrock-runtime`: New options for how to handle harmful content detected by Amazon Bedrock Guardrails. * api-change:`codebuild`: AWS CodeBuild now offers an enhanced debugging experience. * api-change:`glue`: Add input validations for multiple Glue APIs * api-change:`medialive`: AWS Elemental MediaLive now supports SDI inputs to MediaLive Anywhere Channels in workflows that use AWS SDKs. * api-change:`personalize`: Add support for eventsConfig for CreateSolution, UpdateSolution, DescribeSolution, DescribeSolutionVersion. Add support for GetSolutionMetrics to return weighted NDCG metrics when eventsConfig is enabled for the solution. * api-change:`transfer`: This launch enables customers to manage contents of their remote directories, by deleting old files or moving files to archive folders in remote servers once they have been retrieved. Customers will be able to automate the process using event-driven architecture. * from version 1.37.28 * api-change:`ds-data`: Doc only update - fixed broken links. * api-change:`ec2`: Doc-only updates for Amazon EC2 * api-change:`events`: Amazon EventBridge adds support for customer-managed keys on Archives and validations for two fields: eventSourceArn and kmsKeyIdentifier. * api-change:`s3control`: Updated max size of Prefixes parameter of Scope data type. * from version 1.37.27 * api-change:`bedrock-agent`: Added optional "customMetadataField" for Amazon Aurora knowledge bases, allowing single-column metadata. Also added optional "textIndexName" for MongoDB Atlas knowledge bases, enabling hybrid search support. * api-change:`chime-sdk-voice`: Added FOC date as an attribute of PhoneNumberOrder, added AccessDeniedException as a possible return type of ValidateE911Address * api-change:`mailmanager`: Add support for Dual_Stack and PrivateLink types of IngressPoint. For configuration requests, SES Mail Manager will now accept both IPv4/IPv6 dual-stack endpoints and AWS PrivateLink VPC endpoints for email receiving. * api-change:`opensearch`: Improve descriptions for various API commands and data types. * api-change:`route53`: Added us-gov-east-1 and us-gov-west-1 as valid Latency Based Routing regions for change-resource-record-sets. * api-change:`sagemaker`: Adds support for i3en, m7i, r7i instance types for SageMaker Hyperpod * api-change:`sesv2`: This release enables customers to provide attachments in the SESv2 SendEmail and SendBulkEmail APIs. * api-change:`transcribe`: This Feature Adds Support for the "zh-HK" Locale for Batch Operations * enhancement:Eventstream: The event streams maximum payload size is now required to be 24Mb or less. * from version 1.37.26 * api-change:`application-signals`: Application Signals now supports creating Service Level Objectives on service dependencies. Users can now create or update SLOs on discovered service dependencies to monitor their standard application metrics. * api-change:`codebuild`: This release adds support for environment type WINDOWS_SERVER_2022_CONTAINER in ProjectEnvironment * api-change:`ecr`: Fix for customer issues related to AWS account ID and size limitation for token. * api-change:`ecs`: This is an Amazon ECS documentation only update to address various tickets. * api-change:`lexv2-models`: Release feature of errorlogging for lex bot, customer can config this feature in bot version to generate log for error exception which helps debug * api-change:`medialive`: Added support for SMPTE 2110 inputs when running a channel in a MediaLive Anywhere cluster. This feature enables ingestion of SMPTE 2110-compliant video, audio, and ancillary streams by reading SDP files that AWS Elemental MediaLive can retrieve from a network source. * from version 1.37.25 * api-change:`cleanrooms`: This release adds support for updating the analytics engine of a collaboration. * api-change:`sagemaker`: Added tagging support for SageMaker notebook instance lifecycle configurations * from version 1.37.24 * api-change:`bedrock-runtime`: Add Prompt Caching support to Converse and ConverseStream APIs * api-change:`deadline`: With this release you can use a new field to specify the search term match type. Search term match types currently support fuzzy and contains matching. * api-change:`ec2`: Release VPC Route Server, a new feature allowing dynamic routing in VPCs. * api-change:`eks`: Add support for updating RemoteNetworkConfig for hybrid nodes on EKS UpdateClusterConfig API * api-change:`marketplace-entitlement`: Add support for Marketplace Entitlement Service dual-stack endpoints. * api-change:`outposts`: Enabling Asset Level Capacity Management feature, which allows customers to create a Capacity Task for a single Asset on their active Outpost. * api-change:`s3`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 adds support for S3 Access Points for directory buckets in AWS Dedicated Local Zones * api-change:`sesv2`: Add dual-stack support to global endpoints. * api-change:`transfer`: Add WebAppEndpointPolicy support for WebApps * from version 1.37.23 * api-change:`apigateway`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`apigatewayv2`: Adds support for setting the IP address type to allow dual-stack or IPv4 address types to invoke your APIs or domain names. * api-change:`bedrock-runtime`: Launching Multi-modality Content Filter for Amazon Bedrock Guardrails. * api-change:`codebuild`: This release adds support for cacheNamespace in ProjectCache * api-change:`ecs`: This is an Amazon ECS documentation only release that addresses tickets. * api-change:`meteringmarketplace`: Add support for Marketplace Metering Service dual-stack endpoints. * api-change:`networkmanager`: Add support for NetworkManager Dualstack endpoints. * api-change:`payment-cryptography`: The service adds support for transferring AES-256 and other keys between the service and other service providers and HSMs. This feature uses ECDH to derive a one-time key transport key to enable these secure key exchanges. * api-change:`quicksight`: RLS permission dataset with userAs: RLS_RULES flag, Q in QuickSight/Threshold Alerts/Schedules/Snapshots in QS embedding, toggle dataset refresh email alerts via API, transposed table with options: column width, type and index, toggle Q&A on dashboards, Oracle Service Name when creating data source. * api-change:`sagemaker`: TransformAmiVersion for Batch Transform and SageMaker Search Service Aggregate Search API Extension * from version 1.37.22 * api-change:`batch`: This release will enable two features: Firelens log driver, and Execute Command on Batch jobs on ECS. Both features will be passed through to ECS. * api-change:`bcm-pricing-calculator`: Added standaloneAccountRateTypeSelections for GetPreferences and UpdatePreferences APIs. Added STALE enum value to status attribute in GetBillScenario and UpdateBillScenario APIs. * api-change:`bedrock-agent-runtime`: bedrock flow now support node action trace. * api-change:`cloudformation`: Adding support for the new parameter "ScanFilters" in the CloudFormation StartResourceScan API. When this parameter is included, the StartResourceScan API will initiate a scan limited to the resource types specified by the parameter. * api-change:`datazone`: This release adds new action type of Create Listing Changeset for the Metadata Enforcement Rule feature. * api-change:`eks`: Added support for BOTTLEROCKET FIPS AMIs to AMI types in US regions. * api-change:`gamelift`: Amazon GameLift Servers add support for additional instance types. * api-change:`iam`: Update IAM dual-stack endpoints for BJS, IAD and PDT partitions * api-change:`sagemaker`: add: recovery mode for SageMaker Studio apps * api-change:`sso-oidc`: This release adds AwsAdditionalDetails in the CreateTokenWithIAM API response. * from version 1.37.21 * api-change:`arc-zonal-shift`: Add new shiftType field for ARC zonal shifts. * api-change:`directconnect`: With this release, AWS Direct Connect allows you to tag your Direct Connect gateways. Tags are metadata that you can create and use to manage your Direct Connect gateways. For more information about tagging, see AWS Tagging Strategies. * api-change:`mediaconvert`: This release adds a configurable Quality Level setting for the top rendition of Auto ABR jobs * api-change:`mediatailor`: Add support for log filtering which allow customers to filter out selected event types from logs. * api-change:`polly`: Added support for the new voice - Jihye (ko-KR). Jihye is available as a Neural voice only. * api-change:`rds`: Add note about the Availability Zone where RDS restores the DB cluster for the RestoreDBClusterToPointInTime operation. * api-change:`wafv2`: This release adds the ability to associate an AWS WAF v2 web ACL with an AWS Amplify App. * from version 1.37.20 * api-change:`bedrock-agent`: Adding support for Amazon OpenSearch Managed clusters as a vector database in Knowledge Bases for Amazon Bedrock * api-change:`eks`: Added support to override upgrade-blocking readiness checks via force flag when updating a cluster. * api-change:`gameliftstreams`: Minor updates to improve developer experience. * api-change:`keyspaces`: Removing replication region limitation for Amazon Keyspaces Multi-Region Replication APIs. * api-change:`marketplace-entitlement`: This release enhances the GetEntitlements API to support new filter CUSTOMER_AWS_ACCOUNT_ID in request and CustomerAWSAccountId field in response. * api-change:`meteringmarketplace`: This release enhances the BatchMeterUsage API to support new field CustomerAWSAccountId in request and response and making CustomerIdentifier optional. CustomerAWSAccountId or CustomerIdentifier must be provided in request but not both. * api-change:`sagemaker`: This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps * api-change:`workspaces-thin-client`: Deprecate tags field in Get API responses * from version 1.37.19 * api-change:`iotwireless`: Mark EutranCid under LteNmr optional. * api-change:`pcs`: ClusterName/ClusterIdentifier, ComputeNodeGroupName/ComputeNodeGroupIdentifier, and QueueName/QueueIdentifier can now have 10 characters, and a minimum of 3 characters. The TagResource API action can now return ServiceQuotaExceededException. * api-change:`qconnect`: Provides the correct value for supported model ID. * api-change:`ssm`: This release adds the AvailableSecurityUpdatesComplianceStatus field to patch baseline operations, as well as the AvailableSecurityUpdateCount and InstancesWithAvailableSecurityUpdates to patch state operations. Applies to Windows Server managed nodes only. * from version 1.37.18 * api-change:`bedrock`: A CustomModelUnit(CMU) is an abstract view of the hardware utilization that Bedrock needs to host a a single copy of your custom imported model. Bedrock determines the number of CMUs that a model copy needs when you import the custom model. You can use CMUs to estimate the cost of Inference's. * api-change:`datazone`: Add support for overriding selection of default AWS IAM Identity Center instance as part of Amazon DataZone domain APIs. * api-change:`route53-recovery-control-config`: Adds dual-stack (IPv4 and IPv6) endpoint support for route53-recovery-control-config operations, opt- in dual-stack addresses for cluster endpoints, and UpdateCluster API to update the network-type of clusters between IPv4 and dual-stack. * api-change:`sagemaker`: This release does the following: 1.) Adds DurationHours as a required field to the SearchTrainingPlanOfferings action in the SageMaker AI API; 2.) Adds support for G6e instance types for SageMaker AI inference optimization jobs. * from version 1.37.17 * api-change:`amplify`: Added appId field to Webhook responses * api-change:`bedrock`: With this release, Bedrock Evaluation will now support bring your own inference responses. * api-change:`controlcatalog`: Add ExemptAssumeRoot parameter to adapt for new AWS AssumeRoot capability. * api-change:`mailmanager`: Amazon SES Mail Manager. Extended rule string and boolean expressions to support analysis in condition evaluation. Extended ingress point string expression to support analysis in condition evaluation * api-change:`network-firewall`: You can now use flow operations to either flush or capture traffic monitored in your firewall's flow table. * from version 1.37.16 * api-change:`bedrock`: Support custom prompt routers for evaluation jobs * api-change:`ec2`: Doc-only updates for EC2 for March 2025. * api-change:`lambda`: Add Ruby 3.4 (ruby3.4) support to AWS Lambda. * api-change:`mediaconnect`: This release adds support for NDI flow outputs in AWS Elemental MediaConnect. You can now send content from your MediaConnect transport streams directly to your NDI environment using the new NDI output type. * api-change:`neptune-graph`: Update IAM Role ARN Validation to Support Role Paths * api-change:`sagemaker`: Added support for g6, g6e, m6i, c6i instance types in SageMaker Processing Jobs. * from version 1.37.15 * api-change:`appsync`: Providing Tagging support for DomainName in AppSync * api-change:`cleanrooms`: This release adds support for PySpark jobs. Customers can now analyze data by running jobs using approved PySpark analysis templates. * api-change:`mediaconvert`: This release adds support for AVC passthrough, the ability to specify PTS offset without padding, and an A/V segment matching feature. * api-change:`route53`: Amazon Route 53 now supports the iso-f regions for private DNS Amazon VPCs and cloudwatch healthchecks. * from version 1.37.14 * api-change:`application-signals`: This release adds support for adding, removing, and listing SLO time exclusion windows with the BatchUpdateExclusionWindows and ListServiceLevelObjectiveExclusionWindows APIs. * api-change:`geo-maps`: Provide support for vector map styles in the GetStaticMap operation. * api-change:`rum`: CloudWatch RUM now supports unminification of JS error stack traces. * api-change:`taxsettings`: Adjust Vietnam PaymentVoucherNumber regex and minor API change. * api-change:`wafv2`: AWS WAF now lets you inspect fragments of request URIs. You can specify the scope of the URI to inspect and narrow the set of URI fragments. * from version 1.37.13 * api-change:`cognito-identity`: Updated API model build artifacts for identity pools * api-change:`cognito-idp`: Minor description updates to API parameters * api-change:`glue`: This release added AllowFullTableExternalDataAccess to glue catalog resource. * api-change:`lakeformation`: This release added "condition" to LakeFormation OptIn APIs, also added WithPrivilegedAccess flag to RegisterResource and DescribeResource. * from version 1.37.12 * api-change:`acm-pca`: Private Certificate Authority service now supports P521 and RSA3072 key algorithms. * api-change:`amplify`: Introduced support for Skew Protection. Added enableSkewProtection field to createBranch and updateBranch API. * api-change:`codebuild`: AWS CodeBuild now supports webhook filtering by organization name * api-change:`datazone`: This release adds support to update projects and environments * api-change:`dynamodb`: Generate account endpoints for DynamoDB requests using ARN-sourced account ID when available * api-change:`ec2`: This release changes the CreateLaunchTemplate, CreateLaunchTemplateVersion, ModifyLaunchTemplate CLI and SDKs such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to adjust the participant & composition recording segment duration * api-change:`logs`: Updated CreateLogAnomalyDetector to accept only kms key arn * api-change:`mediapackagev2`: This release adds the ResetChannelState and ResetOriginEndpointState operation to reset MediaPackage V2 channel and origin endpoint. This release also adds a new field, UrlEncodeChildManifest, for HLS/LL-HLS to allow URL-encoding child manifest query string based on the requirements of AWS SigV4. * api-change:`s3control`: Updating GetDataAccess response for S3 Access Grants to include the matched Grantee for the requested prefix * Update to 1.37.11 * api-change:`ec2`: This release adds the GroupLongName field to the response of the DescribeAvailabilityZones API. * api-change:`ecr`: This release adds Amazon ECR to Amazon ECR pull through cache rules support. * api-change:`ecs`: This is a documentation only update for Amazon ECS to address various tickets. * api-change:`inspector2`: Adding componentArn to network reachability details * api-change:`medialive`: Add an enum option DISABLED for Output Locking Mode under Global Configuration. * from version 1.37.10 * api-change:`bedrock-agent`: Add support for computer use tools * api-change:`bedrock-agent-runtime`: Add support for computer use tools * api-change:`ce`: Releasing minor partition endpoint updates. * api-change:`connect`: Add support for contact transfers in external voice systems. * api-change:`medialive`: Adds defaultFontSize and defaultLineHeight as options in the EbuTtDDestinationSettings within the caption descriptions for an output stream. * api-change:`pca-connector-ad`: PrivateCA Connector for Active Directory now supports dual stack endpoints. This release adds the IpAddressType option to the VpcInformation on a Connector which determines whether the endpoint supports IPv4 only or IPv4 and IPv6 traffic. * api-change:`securityhub`: This release adds new StandardsControlsUpdatable field to the StandardsSubscription resource * api-change:`timestream-influxdb`: This release updates the default value of pprof-disabled from false to true. * from version 1.37.9 * api-change:`bedrock-agent`: Introduces support for Neptune Analytics as a vector data store and adds Context Enrichment Configurations, enabling use cases such as GraphRAG. * api-change:`bedrock-agent-runtime`: Support Multi Agent Collaboration within Inline Agents * api-change:`cloudfront`: Documentation updates for Amazon CloudFront. * api-change:`ec2`: Add serviceManaged field to DescribeAddresses API response. * api-change:`elbv2`: This release adds support for assigning IP addresses to Application Load Balancers from VPC IP Address Manager pools. * api-change:`neptune-graph`: Several small updates to resolve customer requests. * from version 1.37.8 * api-change:`bedrock`: This releases adds support for Custom Prompt Router * api-change:`cloudtrail`: Doc-only update for CloudTrail. * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to merge fragmented recordings in the event of a participant disconnect. * api-change:`networkflowmonitor`: This release contains 2 changes. 1: DeleteScope/GetScope/UpdateScope operations now return 404 instead of 500 when the resource does not exist. 2: Expected string format for clientToken fields of CreateMonitorInput/CreateScopeInput/UpdateMonitorInput have been updated to be an UUID based string. * api-change:`redshift-data`: This release adds support for ListStatements API to filter statements by ClusterIdentifier, WorkgroupName, and Database. * api-change:`wafv2`: You can now perform an exact match or rate limit aggregation against the web request's JA4 fingerprint. * api-change:`workspaces`: Added a new ModifyEndpointEncryptionMode API for managing endpoint encryption settings. * from version 1.37.7 * api-change:`bedrock-runtime`: This releases adds support for Custom Prompt Router ARN * api-change:`datasync`: AWS DataSync now supports modifying ServerHostname while updating locations SMB, NFS, and ObjectStorage. * api-change:`gameliftstreams`: New Service: Amazon GameLift Streams delivers low-latency game streaming from AWS global infrastructure to virtually any device with a browser at up to 1080p resolution and 60 fps. * api-change:`iotfleetwise`: This release adds floating point support for CAN/OBD signals and adds support for signed OBD signals. * api-change:`workspaces`: Added DeviceTypeWorkSpacesThinClient type to allow users to access their WorkSpaces through a WorkSpaces Thin Client. * from version 1.37.6 * api-change:`elasticache`: Doc only update, listing 'valkey7' and 'valkey8' as engine options for parameter groups. * api-change:`iot-managed-integrations`: Adding managed integrations APIs for IoT Device Management to setup and control devices across different manufacturers and connectivity protocols. APIs include managedthing operations, credential and provisioning profile management, notification configuration, and OTA update. * api-change:`iotsitewise`: AWS IoT SiteWise now supports MQTT-enabled, V3 gateways. Configure data destinations for real-time ingestion into AWS IoT SiteWise or buffered ingestion using Amazon S3 storage. You can also use path filters for precise data collection from specific MQTT topics. * api-change:`rds`: Note support for Database Insights for Amazon RDS. * from version 1.37.5 * api-change:`cognito-idp`: Added the capacity to return available challenges in admin authentication and to set version 3 of the pre token generation event for M2M ATC. * api-change:`ec2`: Update the DescribeVpcs response * api-change:`qbusiness`: Adds support for the ingestion of audio and video files by Q Business, which can be configured with the mediaExtractionConfiguration parameter. * api-change:`rum`: Add support for PutResourcePolicy, GetResourcePolicy and DeleteResourcePolicy to support resource based policies for AWS CloudWatch RUM * api-change:`sagemaker`: Add DomainId to CreateDomainResponse * api-change:`transcribe`: Updating documentation for post call analytics job queueing. * enhancement:configuration: Add support for disabling host prefix injection via the `AWS_DISABLE_HOST_PREFIX_INJECTION` environment variable or the `disable_host_prefix_injection` parameter in the shared aws configuration file. * from version 1.37.4 * api-change:`bedrock-agent`: This release lets Amazon Bedrock Flows support newer models by increasing the maximum length of output in a prompt configuration. This release also increases the maximum number of prompt variables to 20 and the maximum number of node inputs to 20. * api-change:`bedrock-data-automation`: Renamed and added new StandardConfiguration enums. Added support to update EncryptionConfiguration in UpdateBlueprint and UpdateDataAutomation APIs. Changed HttpStatus code for DeleteBlueprint and DeleteDataAutomationProject APIs to 200 from 204. Added APIs to support tagging. * api-change:`bedrock-data-automation-runtime`: Added a mandatory parameter DataAutomationProfileArn to support for cross region inference for InvokeDataAutomationAsync API. Renamed DataAutomationArn to DataAutomationProjectArn. Added APIs to support tagging. * api-change:`dms`: Add skipped status to the Result Statistics of an Assessment Run * api-change:`eks`: Adding licenses to EKS Anywhere Subscription operations response. * api-change:`mediaconvert`: The AWS MediaConvert Probe API allows you to analyze media files and retrieve detailed metadata about their content, format, and structure. * api-change:`pricing`: Update GetProducts and DescribeServices API request input validations. * api-change:`ssm`: Systems Manager doc-only updates for Feb. 2025. * enhancement:useragent: Update user agent string to include client feature use. * from version 1.37.3 * api-change:`bedrock-agent-runtime`: Introduces Sessions (preview) to enable stateful conversations in GenAI applications. * api-change:`emr`: Definition update for EbsConfiguration. * api-change:`qbusiness`: This release supports deleting attachments from conversations. * api-change:`redshift-serverless`: Add track support for Redshift Serverless workgroup. * api-change:`sagemaker`: SageMaker HubService is introducing support for creating Training Jobs in Curated Hub (Private Hub). Additionally, it is introducing two new APIs: UpdateHubContent and UpdateHubContentReference. * api-change:`storagegateway`: This release adds support to invoke a process that cleans the specified file share's cache of file entries that are failing upload to Amazon S3. * from version 1.37.2 * api-change:`application-signals`: This release adds API support for reading Service Level Objectives and Services from monitoring accounts, from SLO and Service-scoped operations, including ListServices and ListServiceLevelObjectives. * api-change:`batch`: AWS Batch: Resource Aware Scheduling feature support * api-change:`chime`: Removes the Amazon Chime SDK APIs from the "chime" namespace. Amazon Chime SDK APIs continue to be available in the AWS SDK via the dedicated Amazon Chime SDK namespaces: chime-sdk-identity, chime-sdk- mediapipelines, chime-sdk-meetings, chime-sdk-messaging, and chime-sdk- voice. * api-change:`cloudfront`: Documentation update for VPC origin config. * api-change:`ec2`: Amazon EC2 Fleet customers can now override the Block Device Mapping specified in the Launch Template when creating a new Fleet request, saving the effort of creating and associating new Launch Templates to customize the Block Device Mapping. * api-change:`iotfleetwise`: This release adds an optional listResponseScope request parameter in certain list API requests to limit the response to metadata only. * api-change:`oam`: This release adds support for sharing AWS::ApplicationSignals::Service and AWS::ApplicationSignals::ServiceLevelObjective resources. * api-change:`sagemaker`: AWS SageMaker InferenceComponents now support rolling update deployments for Inference Components. * enhancement:`Protocol`: Adds support for the smithy-rpc-v2-cbor protocol. If a service supports smithy-rpc-v2-cbor, this protocol will automatically be used. For more information, see https://smithy.io/2.0/additional- specs/protocols/smithy-rpc-v2.html * from version 1.37.1 * api-change:`codebuild`: Adding "reportArns" field in output of BatchGetBuildBatches API. "reportArns" is an array that contains the ARNs of reports created by merging reports from builds associated with the batch build. * api-change:`devicefarm`: Add an optional configuration to the ScheduleRun and CreateRemoteAccessSession API to set a device level http/s proxy. * api-change:`ec2`: Adds support for time-based EBS-backed AMI copy operations. Time-based copy ensures that EBS-backed AMIs are copied within and across Regions in a specified timeframe. * api-change:`iot`: AWS IoT - AWS IoT Device Defender adds support for a new Device Defender Audit Check that monitors device certificate age and custom threshold configurations for both the new device certificate age check and existing device certificate expiry check. * api-change:`taxsettings`: PutTaxRegistration API changes for Egypt, Greece, Vietnam countries * from version 1.37.0 * api-change:`bedrock-agent`: This release improves support for newer models in Amazon Bedrock Flows. * api-change:`bedrock-agent-runtime`: Adding support for ReasoningContent fields in Pre-Processing, Post-Processing and Orchestration Trace outputs. * api-change:`bedrock-runtime`: This release adds Reasoning Content support to Converse and ConverseStream APIs * api-change:`elasticache`: Documentation update, adding clarity and rephrasing. * api-change:`elastic-inference`: The elastic-inference client has been removed following the deprecation of the service. * feature:Endpoints: Generate and use AWS-account-based endpoints for compatible services when the account ID is available. At launch, DynamoDB is the first and only compatible service. The new endpoint URL pattern will be `https://<account-id>.ddb.<region>.amazonaws.com`. Additional services may be added in the future. See the documentation for details: https://docs.aws.amazon.com/sdkref/latest/guide/feature-account- endpoints.html * from version 1.36.26 * api-change:`appstream`: Added support for Certificate-Based Authentication on AppStream 2.0 multi-session fleets. * api-change:`bedrock-agent`: Introduce a new parameter which represents the user-agent header value used by the Bedrock Knowledge Base Web Connector. * from version 1.36.25 * api-change:`codebuild`: Add webhook status and status message to AWS CodeBuild webhooks * api-change:`guardduty`: Reduce the minimum number of required attack sequence signals from 2 to 1 * api-change:`license-manager-user-subscriptions`: Updates entity to include Microsoft RDS SAL as a valid type of user subscription. * api-change:`rds`: CloudWatch Database Insights now supports Amazon RDS. * api-change:`sagemaker`: Added new capability in the UpdateCluster operation to remove instance groups from your SageMaker HyperPod cluster. * api-change:`workspaces-web`: Add support for toolbar configuration under user settings. * from version 1.36.24 * api-change:`codepipeline`: Add environment variables to codepipeline action declaration. * api-change:`ecs`: This is a documentation only release for Amazon ECS that supports the CPU task limit increase. * api-change:`lightsail`: Documentation updates for Amazon Lightsail. * api-change:`location`: Adds support for larger property maps for tracking and geofence positions changes. It increases the maximum number of items from 3 to 4, and the maximum value length from 40 to 150. * api-change:`mailmanager`: This release adds additional metadata fields in Mail Manager archive searches to show email source and details about emails that were archived when being sent with SES. * api-change:`network-firewall`: This release introduces Network Firewall's Automated Domain List feature. New APIs include UpdateFirewallAnalysisSettings, StartAnalysisReport, GetAnalysisReportResults, and ListAnalysisReports. These allow customers to enable analysis on firewalls to identify and report frequently accessed domain. * api-change:`sagemaker`: Adds r8g instance type support to SageMaker Realtime Endpoints * api-change:`sesv2`: This release adds the ability for outbound email sent with SES to preserve emails to a Mail Manager archive. * from version 1.36.23 * api-change:`batch`: This documentation-only update corrects some typos. * api-change:`emr-containers`: EMR on EKS StartJobRun Api will be supporting the configuration of log storage in AWS by using "managedLogs" under "MonitoringConfiguration". * api-change:`medialive`: Adds support for creating CloudWatchAlarmTemplates for AWS Elemental MediaTailor Playback Configuration resources. * from version 1.36.22 * api-change:`amplify`: Add ComputeRoleArn to CreateApp, UpdateApp, CreateBranch, and UpdateBranch, allowing caller to specify a role to be assumed by Amplify Hosting for server-side rendered applications. * api-change:`dms`: Support replicationConfigArn in DMS DescribeApplicableIndividualAssessments API. * api-change:`timestream-influxdb`: This release introduces APIs to manage DbClusters and adds support for read replicas * enhancement:Parsers: Minor Parser updates to support the new smithy- generated protocol tests. See `boto/botocore#3247 <https://github.com/boto/botocore/pull/3247>`__ for more details. * from version 1.36.21 * api-change:`codebuild`: Added test suite names to test case metadata * api-change:`connect`: Release Notes: 1) Analytics API enhancements: Added new ListAnalyticsDataLakeDataSets API. 2) Onboarding API Idempotency: Adds ClientToken to instance creation and management APIs to support idempotency. * api-change:`dms`: Introduces premigration assessment feature to DMS Serverless API for start-replication and describe-replications * api-change:`rds-data`: Add support for Stop DB feature. * api-change:`s3`: Added support for Content-Range header in HeadObject response. * api-change:`wafv2`: The WAFv2 API now supports configuring data protection in webACLs. * api-change:`workspaces-thin-client`: Update Environment and Device name field definitions * from version 1.36.20 * api-change:`accessanalyzer`: This release introduces the getFindingsStatistics API, enabling users to retrieve aggregated finding statistics for IAM Access Analyzer's external access and unused access analysis features. Updated service API and documentation. * api-change:`acm-pca`: Private Certificate Authority (PCA) documentation updates * api-change:`ecs`: This is a documentation only release to support migrating Amazon ECS service ARNs to the long ARN format. * api-change:`fis`: Adds auto-pagination for the following operations: ListActions, ListExperimentTemplates, ListTargetAccountConfigurations, ListExperiments, ListExperimentResolvedTargets, ListTargetResourceTypes. Reduces length constraints of prefixes for logConfiguration and experimentReportConfiguration. * api-change:`sagemaker`: Adds additional values to the InferenceAmiVersion parameter in the ProductionVariant data type. * api-change:`storagegateway`: This release adds support for generating cache reports on S3 File Gateways for files that fail to upload. * from version 1.36.19 * api-change:`b2bi`: Allow spaces in the following fields in the Partnership resource: ISA 06 - Sender ID, ISA 08 - Receiver ID, GS 02 - Application Sender Code, GS 03 - Application Receiver Code * api-change:`bedrock-agent`: This releases adds the additionalModelRequestFields field to the CreateAgent and UpdateAgent operations. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`bedrock-agent-runtime`: This releases adds the additionalModelRequestFields field to the InvokeInlineAgent operation. Use additionalModelRequestFields to specify additional inference parameters for a model beyond the base inference parameters. * api-change:`codebuild`: Add note for the RUNNER_BUILDKITE_BUILD buildType. * api-change:`fsx`: Support for in-place Lustre version upgrades * api-change:`medialive`: Adds a RequestId parameter to all MediaLive Workflow Monitor create operations. The RequestId parameter allows idempotent operations. * api-change:`opensearchserverless`: Custom OpenSearchServerless Entity ID for SAML Config. * api-change:`polly`: Added support for the new voice - Jasmine (en-SG). Jasmine is available as a Neural voice only. * enhancement:Protocols: Added support for multiple protocols within a service based on performance priority. * from version 1.36.18 * api-change:`acm-pca`: Private Certificate Authority service now supports Partitioned CRL as a revocation configuration option. * api-change:`appsync`: Add support for operation level caching * api-change:`ec2`: Adding support for the new fullSnapshotSizeInBytes field in the response of the EC2 EBS DescribeSnapshots API. This field represents the size of all the blocks that were written to the source volume at the time the snapshot was created. * api-change:`pi`: Documentation only update for RDS Performance Insights dimensions for execution plans and locking analysis. * from version 1.36.17 * api-change:`apigatewayv2`: Documentation updates for Amazon API Gateway * api-change:`cloudfront`: Doc-only update that adds defaults for CloudFront VpcOriginEndpointConfig values. * api-change:`connect`: Updated the CreateContact API documentation to indicate that it only applies to EMAIL contacts. * api-change:`dms`: New vendors for DMS Data Providers: DB2 LUW and DB2 for z/OS * from version 1.36.16 * api-change:`ecr`: Adds support to handle the new basic scanning daily quota. * api-change:`eks`: Introduce versionStatus field to take place of status field in EKS DescribeClusterVersions API * api-change:`mediaconvert`: This release adds support for Animated GIF output, forced chroma sample positioning metadata, and Extensible Wave Container format * api-change:`pi`: Adds documentation for dimension groups and dimensions to analyze locks for Database Insights. * api-change:`transcribe`: This release adds support for the Clinical Note Template Customization feature for the AWS HealthScribe APIs within Amazon Transcribe. * from version 1.36.15 * api-change:`cloudformation`: We added 5 new stack refactoring APIs: CreateStackRefactor, ExecuteStackRefactor, ListStackRefactors, DescribeStackRefactor, ListStackRefactorActions. * api-change:`connectcases`: This release adds the ability to conditionally require fields on a template. Check public documentation for more information. * api-change:`cost-optimization-hub`: This release enables AWS Cost Optimization Hub to show cost optimization recommendations for Amazon Auto Scaling Groups, including those with single and mixed instance types. * api-change:`s3`: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. * enhancement:Eventsteam: The SDK no longer validates payload size for eventstreams. This is to facilitate varying payload requirements across AWS services. * from version 1.36.14 * api-change:`rds`: Documentation updates to clarify the description for the parameter AllocatedStorage for the DB cluster data type, the description for the parameter DeleteAutomatedBackups for the DeleteDBCluster API operation, and removing an outdated note for the CreateDBParameterGroup API operation. * from version 1.36.13 * api-change:`datasync`: Doc-only update to provide more information on using Kerberos authentication with SMB locations. * api-change:`dms`: Introduces TargetDataSettings with the TablePreparationMode option available for data migrations. * api-change:`iam`: This release adds support for accepting encrypted SAML assertions. Customers can now configure their identity provider to encrypt the SAML assertions it sends to IAM. * api-change:`neptune-graph`: Added argument to `list-export` to filter by graph ID * api-change:`qbusiness`: Adds functionality to enable/disable a new Q Business Chat orchestration feature. If enabled, Q Business can orchestrate over datasources and plugins without the need for customers to select specific chat modes. * api-change:`sagemaker`: IPv6 support for Hyperpod clusters * from version 1.36.12 * api-change:`mediatailor`: Add support for CloudWatch Vended Logs which allows for delivery of customer logs to CloudWatch Logs, S3, or Firehose. * Update to 1.36.11 * api-change:`amp`: Add support for sending metrics to cross account and CMCK AMP workspaces through RoleConfiguration on Create/Update Scraper. * api-change:`bedrock-agent-runtime`: This change is to deprecate the existing citation field under RetrieveAndGenerateStream API response in lieu of GeneratedResponsePart and RetrievedReferences * api-change:`codebuild`: Added support for CodeBuild self-hosted Buildkite runner builds * api-change:`geo-routes`: The OptimizeWaypoints API now supports 50 waypoints per request (20 with constraints like AccessHours or AppointmentTime). It adds waypoint clustering via Clustering and ClusteringIndex for better optimization. Also, total distance validation is removed for greater flexibility. * api-change:`rds`: Updates to Aurora MySQL and Aurora PostgreSQL API pages with instance log type in the create and modify DB Cluster. * api-change:`sagemaker`: This release introduces a new valid value in InstanceType parameter: p5en.48xlarge, in ProductionVariant. * from version 1.36.10 * api-change:`appstream`: Add support for managing admin consent requirement on selected domains for OneDrive Storage Connectors in AppStream2.0. * api-change:`bedrock-agent-runtime`: Add a 'reason' field to InternalServerException * api-change:`ecr`: Temporarily updating dualstack endpoint support * api-change:`ecr-public`: Temporarily updating dualstack endpoint support * api-change:`mediatailor`: Adds options for configuring how MediaTailor conditions ads before inserting them into the content stream. Based on the new settings, MediaTailor will either transcode ads to match the content stream as it has in the past, or it will insert ads without first transcoding them. * api-change:`qbusiness`: Added APIs to manage QBusiness user subscriptions * api-change:`s3tables`: You can now use the CreateTable API operation to create tables with schemas by adding an optional metadata argument. * api-change:`verifiedpermissions`: Adds Cedar JSON format support for entities and context data in authorization requests * enhancement:AWSCRT: Update awscrt version to 0.23.8 * from version 1.36.9 * api-change:`bcm-pricing-calculator`: Added ConflictException error type in DeleteBillScenario, BatchDeleteBillScenarioCommitmentModification, BatchDeleteBillScenarioUsageModification, BatchUpdateBillScenarioUsageModification, and BatchUpdateBillScenarioCommitmentModification API operations. * api-change:`ecr`: Add support for Dualstack and Dualstack-with-FIPS Endpoints * api-change:`ecr-public`: Add support for Dualstack Endpoints * api-change:`mailmanager`: This release includes a new feature for Amazon SES Mail Manager which allows customers to specify known addresses and domains and make use of those in traffic policies and rules actions to distinguish between known and unknown entries. * api-change:`s3`: Change the type of MpuObjectSize in CompleteMultipartUploadRequest from int to long. * from version 1.36.8 * api-change:`appsync`: Add stash and outErrors to EvaluateCode/EvaluateMappingTemplate response * api-change:`datasync`: AWS DataSync now supports the Kerberos authentication protocol for SMB locations. * api-change:`deadline`: feature: Deadline: Add support for limiting the concurrent usage of external resources, like floating licenses, using limits and the ability to constrain the maximum number of workers that work on a job * api-change:`ec2`: This release changes the CreateFleet CLI and SDK's such that if you do not specify a client token, a randomly generated token is used for the request to ensure idempotency. * api-change:`firehose`: For AppendOnly streams, Firehose will automatically scale to match your throughput. * api-change:`timestream-influxdb`: Adds 'allocatedStorage' parameter to UpdateDbInstance API that allows increasing the database instance storage size and 'dbStorageType' parameter to UpdateDbInstance API that allows changing the storage type of the database instance * from version 1.36.7 * api-change:`bedrock-agent`: Add support for the prompt caching feature for Bedrock Prompt Management * api-change:`iot`: Raised the documentParameters size limit to 30 KB for AWS IoT Device Management - Jobs. * api-change:`mediaconvert`: This release adds support for dynamic audio configuration and the ability to disable the deblocking filter for h265 encodes. * api-change:`s3control`: Minor fix to ARN validation for Lambda functions passed to S3 Batch Operations * bugfix:Signing: No longer sign transfer-encoding header for SigV4 * from version 1.36.6 * api-change:`cloudtrail`: This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries. * api-change:`eks`: Adds support for UpdateStrategies in EKS Managed Node Groups. * api-change:`healthlake`: Added new authorization strategy value 'SMART_ON_FHIR' for CreateFHIRDatastore API to support Smart App 2.0 * api-change:`ssm`: Systems Manager doc-only update for January, 2025. * api-change:`sso-oidc`: Fixed typos in the descriptions. * api-change:`transfer`: Added CustomDirectories as a new directory option for storing inbound AS2 messages, MDN files and Status files. * from version 1.36.5 * api-change:`ec2`: Added "future" allocation type for future dated capacity reservation * from version 1.36.4 * api-change:`bedrock-agent-runtime`: Adds multi-turn input support for an Agent node in an Amazon Bedrock Flow * api-change:`glue`: Docs Update for timeout changes * api-change:`medialive`: AWS Elemental MediaLive adds a new feature, ID3 segment tagging, in CMAF Ingest output groups. It allows customers to insert ID3 tags into every output segment, controlled by a newly added channel schedule action Id3SegmentTagging. * api-change:`workspaces-thin-client`: Rename WorkSpaces Web to WorkSpaces Secure Browser * from version 1.36.3 * api-change:`batch`: Documentation-only update: clarified the description of the shareDecaySeconds parameter of the FairsharePolicy data type, clarified the description of the priority parameter of the JobQueueDetail data type. * api-change:`cognito-idp`: corrects the dual-stack endpoint configuration for cognitoidp * api-change:`connect`: Added DeleteContactFlowVersion API and the CAMPAIGN flow type * api-change:`emr-serverless`: Increasing entryPoint in SparkSubmit to accept longer script paths. New limit is 4kb. * api-change:`iotsitewise`: AWS IoT SiteWise now supports ingestion and querying of Null (all data types) and NaN (double type) values of bad or uncertain data quality. New partial error handling prevents data loss during ingestion. Enabled by default for new customers; existing customers can opt- in. * api-change:`logs`: Documentation-only update to address doc errors * api-change:`quicksight`: Added `DigitGroupingStyle` in ThousandsSeparator to allow grouping by `LAKH`( Indian Grouping system ) currency. Support LAKH and `CRORE` currency types in Column Formatting. * api-change:`sns`: This release adds support for the topic attribute FifoThroughputScope for SNS FIFO topics. For details, see the documentation history in the Amazon Simple Notification Service Developer Guide. * Update to 1.36.0 * api-change:`bedrock-runtime`: Allow hyphens in tool name for Converse and ConverseStream APIs * api-change:`detective`: Doc only update for Detective documentation. * api-change:`ec2`: Release u7i-6tb.112xlarge, u7i-8tb.112xlarge, u7inh-32tb.480xlarge, p5e.48xlarge, p5en.48xlarge, f2.12xlarge, f2.48xlarge, trn2.48xlarge instance types. * api-change:`notifications`: Added support for Managed Notifications, integration with AWS Organization and added aggregation summaries for Aggregate Notifications * api-change:`sagemaker`: Correction of docs for "Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering" * from version 1.36.1 * api-change:`ecs`: The release addresses Amazon ECS documentation tickets. * api-change:`sagemaker`: Added support for ml.trn1.32xlarge instance type in Reserved Capacity Offering * from version 1.36.0 * api-change:`apigateway`: Documentation updates for Amazon API Gateway * api-change:`bedrock-agent-runtime`: Now supports streaming for inline agents. * api-change:`cognito-identity`: corrects the dual-stack endpoint configuration * api-change:`partnercentral-selling`: Add Tagging support for ResourceSnapshotJob resources * api-change:`s3`: This change enhances integrity protections for new SDK requests to S3. S3 SDKs now support the CRC64NVME checksum algorithm, full object checksums for multipart S3 objects, and new default integrity protections for S3 requests. * api-change:`security-ir`: Increase minimum length of Threat Actor IP 'userAgent' to 1. * api-change:`sesv2`: This release introduces a new recommendation in Virtual Deliverability Manager Advisor, which detects elevated complaint rates for customer sending identities. * api-change:`workspaces`: Added GeneralPurpose.4xlarge & GeneralPurpose.8xlarge ComputeTypes. * api-change:`workspaces-thin-client`: Mark type in MaintenanceWindow as required. * enhancement:AWSCRT: Update awscrt version to 0.23.4 * feature:`s3`: The S3 client attempts to validate response checksums for all S3 API operations that support checksums. However, if the SDK has not implemented the specified checksum algorithm then this validation is skipped. Checksum validation behavior can be configured using the `when_supported` and `when_required` options - in code using the `response_checksum_validation` parameter for `botocore.config.Config`, in the shared AWS config file using `response_checksum_validation`, or as an env variable using `AWS_RESPONSE_CHECKSUM_VALIDATION`. * feature:`s3`: Added support for the CRC64NVME checksum algorithm in the S3 client through the optional AWS CRT (`awscrt`) dependency. * feature:`s3`: S3 client behavior is updated to always calculate a CRC32 checksum by default for operations that support it (such as PutObject or UploadPart), or require it (such as DeleteObjects). Checksum behavior can be configured using `when_supported` and `when_required` options - in code using the `request_checksum_calculation` parameter for `botocore.config.Config`, in the shared AWS config file using `request_checksum_calculation`, or as an env variable using `AWS_REQUEST_CHECKSUM_CALCULATION`. Note: Botocore will no longer automatically compute and populate the Content-MD5 header. * from version 1.35.99 * api-change:`gamelift`: Amazon GameLift releases a new game session placement feature: PriorityConfigurationOverride. You can now override how a game session queue prioritizes placement locations for a single StartGameSessionPlacement request. * api-change:`route53`: Amazon Route 53 now supports the Mexico (Central) Region (mx-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * from version 1.35.98 * api-change:`artifact`: Support resolving regional API calls to partition's leader region endpoint. * api-change:`bedrock`: With this release, Bedrock Evaluation will now support latency-optimized inference for foundation models. * api-change:`ec2`: Add support for DisconnectOnSessionTimeout flag in CreateClientVpnEndpoint and ModifyClientVpnEndpoint requests and DescribeClientVpnEndpoints responses * api-change:`kafkaconnect`: Support updating connector configuration via UpdateConnector API. Release Operations API to monitor the status of the connector operation. * api-change:`transcribe`: This update provides tagging support for Transcribe's Call Analytics Jobs and Call Analytics Categories. * from version 1.35.97 * api-change:`redshift`: Additions to the PubliclyAccessible and Encrypted parameters clarifying what the defaults are. * api-change:`securitylake`: Doc only update for ServiceName that fixes several customer-reported issues * api-change:`sts`: Fixed typos in the descriptions. * from version 1.35.96 * api-change:`codebuild`: AWS CodeBuild Now Supports BuildBatch in Reserved Capacity and Lambda * api-change:`compute-optimizer`: This release expands AWS Compute Optimizer rightsizing recommendation support for Amazon EC2 Auto Scaling groups to include those with scaling policies and multiple instance types. * api-change:`fms`: AWS Firewall Manager now lets you combine multiple resource tags using the logical AND operator or the logical OR operator. * from version 1.35.95 * api-change:`rds`: Updates Amazon RDS documentation to clarify the RestoreDBClusterToPointInTime description. * api-change:`route53`: Amazon Route 53 now supports the Asia Pacific (Thailand) Region (ap-southeast-7) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region * api-change:`sagemaker`: Adds support for IPv6 for SageMaker HyperPod cluster nodes. * from version 1.35.94 * api-change:`cloudhsmv2`: Adds support to ModifyCluster for modifying a Cluster's Hsm Type. * api-change:`dynamodb`: This release makes Amazon DynamoDB point-in-time- recovery (PITR) to be configurable. You can set PITR recovery period for each table individually to between 1 and 35 days. * api-change:`imagebuilder`: This release adds support for importing images from ISO disk files. Added new ImportDiskImage API operation. * from version 1.35.93 * api-change:`iotsecuretunneling`: Adds dualstack endpoint support for IoT Secure Tunneling * api-change:`supplychain`: Allow vanity DNS domain when creating a new ASC instance * from version 1.35.92 * api-change:`ecs`: Adding SDK reference examples for Amazon ECS operations. * api-change:`route53domains`: Doc only update for Route 53 Domains that fixes several customer-reported issues * api-change:`s3`: This change is only for updating the model regexp of CopySource which is not for validation but only for documentation and user guide change. * from version 1.35.91 * api-change:`appsync`: Modify UpdateGraphQLAPI operation and flag authenticationType as required. * api-change:`gamelift`: Amazon GameLift releases a new game session shutdown feature. Use the Amazon GameLift console or AWS CLI to terminate an in- progress game session that's entered a bad state or is no longer needed. * api-change:`mediaconnect`: AWS Elemental MediaConnect now supports Content Quality Analysis for enhanced source stream monitoring. This enables you to track specific audio and video metrics in transport stream source flows, ensuring your content meets quality standards. * api-change:`mediaconvert`: This release adds support for the AVC3 codec and fixes an alignment issue with Japanese vertical captions. * api-change:`organizations`: Added ALL_FEATURES_MIGRATION_ORGANIZATION_SIZE_LIMIT_EXCEEDED to ConstraintViolationException for the EnableAllFeatures operation. * api-change:`sagemaker`: Adding ETag information with Model Artifacts for Model Registry * api-change:`sqs`: In-flight message typo fix from 20k to 120k. * from version 1.35.90 * api-change:`ecr`: Restoring custom endpoint functionality for ECR * api-change:`ecr-public`: Restoring custom endpoint functionality for ECR Public * from version 1.35.89 * api-change:`rds`: Updates Amazon RDS documentation to correct various descriptions. * from version 1.35.88 * api-change:`bcm-pricing-calculator`: Added ConflictException to DeleteBillEstimate. * api-change:`ecr`: Add support for Dualstack Endpoints * api-change:`network-firewall`: Dual-stack endpoints are now supported. * api-change:`securityhub`: Documentation updates for AWS Security Hub * from version 1.35.87 * api-change:`ecr`: Documentation update for ECR GetAccountSetting and PutAccountSetting APIs. * api-change:`ecr-public`: Add support for Dualstack endpoints * api-change:`eks`: This release adds support for DescribeClusterVersions API that provides important information about Kubernetes versions along with end of support dates * api-change:`glue`: Add IncludeRoot parameters to GetCatalogs API to return root catalog. * from version 1.35.86 * api-change:`bedrock-agent`: Support for custom user agent and max web pages crawled for web connector. Support app only credentials for SharePoint connector. Increase agents memory duration limit to 365 days. Support to specify max number of session summaries to include in agent invocation context. * api-change:`bedrock-agent-runtime`: bedrock agents now supports long term memory and performance configs. Invokeflow supports performance configs. RetrieveAndGenerate performance configs * api-change:`bedrock-data-automation`: Documentation update for Amazon Bedrock Data Automation * api-change:`bedrock-data-automation-runtime`: Documentation update for Amazon Bedrock Data Automation Runtime * api-change:`billing`: Added new API's for defining and fetching Billing Views. * api-change:`ce`: Support for retrieving cost, usage, and forecast for billing view. * api-change:`connect`: This release supports adding NotAttributeCondition and Range to the RoutingCriteria object. * api-change:`docdb`: Support AWS Secret Manager managed password for AWS DocumentDB instance-based cluster. * api-change:`eks`: This release expands the catalog of upgrade insight checks * api-change:`macie2`: This release adds support for identifying S3 general purpose buckets that exceed the Amazon Macie quota for preventative control monitoring. * api-change:`outposts`: Add CS8365C as a supported power connector for Outpost sites. * api-change:`sagemaker`: This release adds support for c6i, m6i and r6i instance on SageMaker Hyperpod and trn1 instances in batch * from version 1.35.85 * api-change:`appstream`: Added support for Rocky Linux 8 on Amazon AppStream 2.0 * api-change:`mediaconvert`: This release adds support for inserting timecode tracks into MP4 container outputs. * api-change:`medialive`: MediaLive is releasing ListVersions api * api-change:`qconnect`: Amazon Q in Connect enables agents to ask Q for assistance in multiple languages and Q will provide answers and recommended step-by-step guides in those languages. Qs default language is English (United States) and you can switch this by setting the locale configuration on the AI Agent. * api-change:`ssm-sap`: AWS Systems Manager for SAP added support for registration and discovery of distributed ABAP applications * api-change:`workspaces`: Added AWS Global Accelerator (AGA) support for WorkSpaces Personal. * from version 1.35.84 * api-change:`amplify`: Added WAF Configuration to Amplify Apps * api-change:`budgets`: Releasing minor partition endpoint updates * api-change:`connect`: This release adds support for the UpdateParticipantAuthentication API used for customer authentication within Amazon Connect chats. * api-change:`connectparticipant`: This release adds support for the GetAuthenticationUrl and CancelParticipantAuthentication APIs used for customer authentication within Amazon Connect chats. There are also minor updates to the GetAttachment API. * api-change:`datasync`: AWS DataSync introduces the ability to update attributes for in-cloud locations. * api-change:`iot`: Release connectivity status query API which is a dedicated high throughput(TPS) API to query a specific device's most recent connectivity state and metadata. * api-change:`mwaa`: Added support for Apache Airflow version 2.10.3 to MWAA. * api-change:`quicksight`: Add support for PerformanceConfiguration attribute to Dataset entity. Allow PerformanceConfiguration specification in CreateDataset and UpdateDataset APIs. * api-change:`resiliencehub`: AWS Resilience Hub now automatically detects already configured CloudWatch alarms and FIS experiments as part of the assessment process and returns the discovered resources in the corresponding list API responses. It also allows you to include or exclude test recommendations for an AppComponent. * api-change:`transfer`: Added AS2 agreement configurations to control filename preservation and message signing enforcement. Added AS2 connector configuration to preserve content type from S3 objects. * from version 1.35.83 * api-change:`account`: Update endpoint configuration. * api-change:`backup`: Add Support for Backup Indexing * api-change:`backupsearch`: Add support for searching backups * api-change:`batch`: This feature allows AWS Batch on Amazon EKS to support configuration of Pod Annotations, overriding Namespace on which the Batch job's Pod runs on, and allows Subpath and Persistent Volume claim to be set for AWS Batch on Amazon EKS jobs. * api-change:`cleanroomsml`: Add support for SQL compute configuration for StartAudienceGenerationJob API. * api-change:`cloudfront`: Adds support for OriginReadTimeout and OriginKeepaliveTimeout to create CloudFront Distributions with VPC Origins. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support Managed Compute Rule. * api-change:`ecs`: Added support for enableFaultInjection task definition parameter which can be used to enable Fault Injection feature on ECS tasks. * api-change:`m2`: This release adds support for AWS Mainframe Modernization(M2) Service to allow specifying network type(ipv4, dual) for the environment instances. For dual network type, m2 environment applications will serve both IPv4 and IPv6 requests, whereas for ipv4 it will serve only IPv4 requests. * api-change:`synthetics`: Add support to toggle outbound IPv6 traffic on canaries connected to dualstack subnets. This behavior can be controlled via the new Ipv6AllowedForDualStack parameter of the VpcConfig input object in CreateCanary and UpdateCanary APIs. * from version 1.35.82 * api-change:`cloud9`: Added information about Ubuntu 18.04 will be removed from the available imageIds for Cloud9 because Ubuntu 18.04 has ended standard support on May 31, 2023. * api-change:`dlm`: This release adds support for Local Zones in Amazon Data Lifecycle Manager EBS snapshot lifecycle policies. * api-change:`ec2`: This release adds support for EBS local snapshots in AWS Dedicated Local Zones, which allows you to store snapshots of EBS volumes locally in Dedicated Local Zones. * api-change:`greengrassv2`: Add support for runtime in GetCoreDevice and ListCoreDevices APIs. * api-change:`medialive`: AWS Elemental MediaLive adds three new features: MediaPackage v2 endpoint support for live stream delivery, KLV metadata passthrough in CMAF Ingest output groups, and Metadata Name Modifier in CMAF Ingest output groups for customizing metadata track names in output streams. * api-change:`rds`: This release adds support for the "MYSQL_CACHING_SHA2_PASSWORD" enum value for RDS Proxy ClientPasswordAuthType. * from version 1.35.81 * api-change:`cloudhsmv2`: Add support for Dual-Stack hsm2m.medium clusters. The customers will now be able to create hsm2m.medium clusters having both IPv4 and IPv6 connection capabilities by specifying a new param called NetworkType=DUALSTACK during cluster creation. * api-change:`ec2`: This release adds GroupId to the response for DeleteSecurityGroup. * api-change:`eks`: Add NodeRepairConfig in CreateNodegroupRequest and UpdateNodegroupConfigRequest * api-change:`logs`: Limit PutIntegration IntegrationName and ListIntegrations IntegrationNamePrefix parameters to 50 characters * api-change:`mediaconnect`: AWS Elemental MediaConnect Gateway now supports Source Specific Multicast (SSM) for ingress bridges. This enables you to specify a source IP address in addition to a multicast IP when creating or updating an ingress bridge source. * api-change:`networkmanager`: There was a sentence fragment in UpdateDirectConnectGatewayAttachment that was causing customer confusion as to whether it's an incomplete sentence or if it was a typo. Removed the fragment. * api-change:`servicediscovery`: AWS Cloud Map now supports service-level attributes, allowing you to associate custom metadata directly with services. These attributes can be retrieved, updated, and deleted using the new GetServiceAttributes, UpdateServiceAttributes, and DeleteServiceAttributes API calls. * from version 1.35.80 * api-change:`connect`: Configure holidays and other overrides to hours of operation in advance. During contact handling, Amazon Connect automatically checks for overrides and provides customers with an appropriate flow path. After an override period passes call center automatically reverts to standard hours of operation. * api-change:`dms`: Add parameters to support for kerberos authentication. Add parameter for disabling the Unicode source filter with PostgreSQL settings. Add parameter to use large integer value with Kinesis/Kafka settings. * api-change:`glue`: To support customer-managed encryption in Data Quality to allow customers encrypt data with their own KMS key, we will add a DataQualityEncryption field to the SecurityConfiguration API where customers can provide their KMS keys. * api-change:`guardduty`: Improved descriptions for certain APIs. * api-change:`route53domains`: This release includes the following API updates: added the enumeration type RESTORE_DOMAIN to the OperationType; constrained the Price attribute to non-negative values; updated the LangCode to allow 2 or 3 alphabetical characters. * from version 1.35.79 * api-change:`artifact`: Add support for listing active customer agreements for the calling AWS Account. * api-change:`cloudtrail`: Doc-only updates for CloudTrail. * api-change:`cognito-idp`: Updated descriptions for some API operations and parameters, corrected some errors in Cognito user pools * api-change:`controlcatalog`: Minor documentation updates to the content of ImplementationDetails object part of the Control Catalog GetControl API * api-change:`emr-serverless`: This release adds support for accessing system profile logs in Lake Formation-enabled jobs. * api-change:`mgh`: API and documentation updates for AWS MigrationHub related to adding support for listing migration task updates and associating, disassociating and listing source resources * api-change:`sesv2`: Introduces support for multi-region endpoint. * api-change:`timestream-influxdb`: Adds networkType parameter to CreateDbInstance API which allows IPv6 support to the InfluxDB endpoint * from version 1.35.78 * api-change:`application-autoscaling`: Doc only update for AAS Predictive Scaling policy configuration API. * api-change:`bcm-pricing-calculator`: Updated condition key inference from Workload Estimate, Bill Scenario, and Bill Estimate resources. Updated documentation links. * api-change:`connect`: Add support for Push Notifications for Amazon Connect chat. With Push Notifications enabled an alert could be sent to customers about new messages even when they aren't actively using the mobile application. * api-change:`finspace`: Update KxCommandLineArgument value parameter regex to allow for spaces and semicolons * api-change:`ivs-realtime`: IVS Real-Time now offers customers the ability to customize thumbnails recording mode and interval for both Individual Participant Recording (IPR) and Server-Side Compositions (SSC). * api-change:`sesv2`: Introduces support for creating DEED (Deterministic Easy-DKIM) identities. * Update to 1.35.77 * api-change:`appsync`: Provides description of new Amazon Bedrock runtime datasource. * api-change:`cognito-idp`: Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. * api-change:`ec2`: This release includes a new API for modifying instance network-performance-options after launch. * api-change:`ecs`: This is a documentation only update to address various tickets for Amazon ECS. * api-change:`keyspaces`: Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. * api-change:`medialive`: H265 outputs now support disabling the deblocking filter. * api-change:`workspaces`: Added text to clarify case-sensitivity * from version 1.35.76 * api-change:`partnercentral-selling`: Introducing the preview of new partner central selling APIs designed to transform how AWS partners collaborate and co-sell with multiple partners. This enables multiple partners to seamlessly engage and jointly pursue customer opportunities, fostering a new era of collaborative selling. * api-change:`qbusiness`: This release removes the deprecated UserId and UserGroups fields from SearchRelevantContent api's request parameters. * from version 1.35.75 * api-change:`bedrock`: Introduced two APIs ListPromptRouters and GetPromptRouter for Intelligent Prompt Router feature. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`bedrock-agent`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-agent-runtime`: This release introduces the ability to generate SQL using natural language, through a new GenerateQuery API (with native integration into Knowledge Bases); ability to ingest and retrieve images through Bedrock Data Automation; and ability to create a Knowledge Base backed by Kendra GenAI Index. * api-change:`bedrock-data-automation`: Release Bedrock Data Automation SDK * api-change:`bedrock-data-automation-runtime`: Release Bedrock Data Automation Runtime SDK * api-change:`bedrock-runtime`: Added support for Intelligent Prompt Router in Invoke, InvokeStream, Converse and ConverseStream. Add support for Bedrock Guardrails image content filter. New Bedrock Marketplace feature enabling a wider range of bedrock compatible models with self-hosted capability. * api-change:`kendra`: This release adds GenAI Index in Amazon Kendra for Retrieval Augmented Generation (RAG) and intelligent search. With the Kendra GenAI Index, customers get high retrieval accuracy powered by the latest information retrieval technologies and semantic models. * api-change:`sagemaker`: Amazon SageMaker HyperPod launched task governance to help customers maximize accelerator utilization for model development and flexible training plans to meet training timelines and budget while reducing weeks of training time. AI apps from AWS partner is now available in SageMaker. * from version 1.35.74 * api-change:`athena`: Add FEDERATED type to CreateDataCatalog. This creates Athena Data Catalog, AWS Lambda connector, and AWS Glue connection. Create/DeleteDataCatalog returns DataCatalog. Add Status, ConnectionType, and Error to DataCatalog and DataCatalogSummary. Add DeleteCatalogOnly to delete Athena Catalog only. * api-change:`bedrock`: Tagging support for Async Invoke resources. Added support for Distillation in CreateModelCustomizationJob API. Support for videoDataDeliveryEnabled flag in invocation logging. * api-change:`bedrock-agent`: Releasing SDK for Multi-Agent Collaboration. * api-change:`bedrock-agent-runtime`: Releasing SDK for multi agent collaboration * api-change:`bedrock-runtime`: Added support for Async Invoke Operations Start, List and Get. Support for invocation logs with `requestMetadata` field in Converse, ConverseStream, Invoke and InvokeStream. Video content blocks in Converse/ConverseStream accept raw bytes or S3 URI. * api-change:`cloudwatch`: Support for configuring AiOps investigation as alarm action * api-change:`datazone`: Adds support for Connections, ProjectProfiles, and JobRuns APIs. Supports the new Lineage feature at GA. Adjusts optionality of a parameter for DataSource and SubscriptionTarget APIs which may adjust types in some clients. * api-change:`dsql`: Add new API operations for Amazon Aurora DSQL. Amazon Aurora DSQL is a serverless, distributed SQL database with virtually unlimited scale, highest availability, and zero infrastructure management. * api-change:`dynamodb`: This change adds support for global tables with multi-Region strong consistency (in preview). The UpdateTable API now supports a new attribute MultiRegionConsistency to set consistency when creating global tables. The DescribeTable output now optionally includes the MultiRegionConsistency attribute. * api-change:`glue`: This release includes(1)Zero-ETL integration to ingest data from 3P SaaS and DynamoDB to Redshift/Redlake (2)new properties on Connections to enable reuse; new connection APIs for retrieve/preview metadata (3)support of CRUD operations for Multi-catalog (4)support of automatic statistics collections * api-change:`lakeformation`: This release added two new LakeFormation Permissions (CREATE_CATALOG, SUPER_USER) and added Id field for CatalogResource. It also added new conditon and expression field. * api-change:`qapps`: Add support for 11 new plugins as action cards to help automate repetitive tasks and improve productivity. * api-change:`qbusiness`: Amazon Q Business now supports customization options for your web experience, 11 new Plugins, and QuickSight support. Amazon Q index allows software providers to enrich their native generative AI experiences with their customer's enterprise knowledge and user context spanning multiple applications. * api-change:`quicksight`: This release includes API needed to support for Unstructured Data in Q in QuickSight Q&A (IDC). * api-change:`redshift`: Adds support for Amazon Redshift RegisterNamespace and DeregisterNamespace APIs to share data to AWS Glue Data Catalog. * api-change:`redshift-serverless`: Adds support for the ListManagedWorkgroups API to get an overview of existing managed workgroups. * api-change:`s3`: Amazon S3 Metadata stores object metadata in read-only, fully managed Apache Iceberg metadata tables that you can query. You can create metadata table configurations for S3 general purpose buckets. * api-change:`s3tables`: Amazon S3 Tables deliver the first cloud object store with built-in open table format support, and the easiest way to store tabular data at scale. * from version 1.35.73 * api-change:`bedrock-runtime`: Add an API parameter that allows customers to set performance configuration for invoking a model. * api-change:`s3control`: It allows customers to pass CRC64NVME as a header in S3 Batch Operations copy requests * api-change:`socialmessaging`: Added support for passing role arn corresponding to the supported event destination * from version 1.35.72 * api-change:`bedrock`: Add support for Knowledge Base Evaluations & LLM as a judge * api-change:`bedrock-agent`: This release introduces APIs to upload documents directly into a Knowledge Base * api-change:`bedrock-agent-runtime`: This release introduces a new Rerank API to leverage reranking models (with integration into Knowledge Bases); APIs to upload documents directly into Knowledge Base; RetrieveAndGenerateStream API for streaming response; Guardrails on Retrieve API; and ability to automatically generate filters * api-change:`chime-sdk-voice`: This release adds supports for enterprises to integrate Amazon Connect with other voice systems. It supports directly transferring voice calls and metadata without using the public telephone network. It also supports real-time and post-call analytics. * api-change:`cleanrooms`: This release allows customers and their partners to easily collaborate with data stored in Snowflake and Amazon Athena, without having to move or share their underlying data among collaborators. * api-change:`connect`: Adds support for WhatsApp Business messaging, IVR call recording, enabling Contact Lens for existing on-premise contact centers and telephony platforms, and enabling telephony and IVR migration to Amazon Connect independent of their contact center agents. * api-change:`connectcampaignsv2`: Amazon Connect Outbound Campaigns V2 / Features : Adds support for Event-Triggered Campaigns. * api-change:`customer-profiles`: This release introduces Event Trigger APIs as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adds support for declarative policies that allow you to enforce desired configuration across an AWS organization through configuring account attributes. Adds support for Allowed AMIs that allows you to limit the use of AMIs in AWS accounts. Adds support for connectivity over non-HTTP protocols. * api-change:`ecs`: This release adds support for Container Insights with Enhanced Observability for Amazon ECS. * api-change:`eks`: Added support for Auto Mode Clusters, Hybrid Nodes, and specifying computeTypes in the DescribeAddonVersions API. * api-change:`events`: Call private APIs by configuring Connections with VPC connectivity through PrivateLink and VPC Lattice * api-change:`fsx`: FSx API changes to support the public launch of the Amazon FSx Intelligent Tiering for OpenZFS storage class. * api-change:`guardduty`: Add new Multi Domain Correlation findings. * api-change:`imagebuilder`: Added support for EC2 Image Builder's integration with AWS Marketplace for Marketplace components. * api-change:`invoicing`: AWS Invoice Configuration allows you to receive separate AWS invoices based on your organizational needs. You can use the AWS SDKs to manage Invoice Units and programmatically fetch the information of the invoice receiver. * api-change:`logs`: Adds PutIntegration, GetIntegration, ListIntegrations and DeleteIntegration APIs. Adds QueryLanguage support to StartQuery, GetQueryResults, DescribeQueries, DescribeQueryDefinitions, and PutQueryDefinition APIs. * api-change:`memorydb`: Amazon MemoryDB SDK now supports all APIs for Multi- Region. Please refer to the updated Amazon MemoryDB public documentation for detailed information on API usage. * api-change:`networkflowmonitor`: This release adds documentation for a new feature in Amazon CloudWatch called Network Flow Monitor. You can use Network Flow Monitor to get near real-time metrics, including retransmissions and data transferred, for your actual workloads. * api-change:`opensearch`: This feature introduces support for CRUDL APIs, enabling the creation and management of Connected data sources. * api-change:`organizations`: Add support for policy operations on the DECLARATIVE_POLICY_EC2 policy type. * api-change:`qbusiness`: Amazon Q Business now supports capabilities to extract insights and answer questions from visual elements embedded within documents, a browser extension for Google Chrome, Mozilla Firefox, and Microsoft Edge, and attachments across conversations. * api-change:`qconnect`: This release adds following capabilities: Configuring safeguards via AIGuardrails for Q in Connect inferencing, and APIs to support Q&A self-service use cases * api-change:`rds`: Amazon RDS supports CloudWatch Database Insights. You can use the SDK to create, modify, and describe the DatabaseInsightsMode for your DB instances and clusters. * api-change:`s3`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`s3control`: Amazon S3 introduces support for AWS Dedicated Local Zones * api-change:`securityhub`: Add new Multi Domain Correlation findings. * api-change:`security-ir`: AWS Security Incident Response is a purpose-built security incident solution designed to help customers prepare for, respond to, and recover from security incidents. * api-change:`transfer`: AWS Transfer Family now offers Web apps that enables simple and secure access to data stored in Amazon S3. * api-change:`vpc-lattice`: Lattice APIs that allow sharing and access of VPC resources across accounts. * from version 1.35.71 * api-change:`bedrock-agent`: Add support for specifying embeddingDataType, either FLOAT32 or BINARY * api-change:`config`: AWS Config adds support for service-linked recorders, a new type of Config recorder managed by AWS services to record specific subsets of resource configuration data and functioning independently from customer managed AWS Config recorders. * api-change:`fsx`: This release adds EFA support to increase FSx for Lustre file systems' throughput performance to a single client instance. This can be done by specifying EfaEnabled=true at the time of creation of Persistent_2 file systems. * api-change:`observabilityadmin`: Amazon CloudWatch Observability Admin adds the ability to audit telemetry configuration for AWS resources in customers AWS Accounts and Organizations. The release introduces new APIs to turn on/off the new experience, which supports discovering supported AWS resources and their state of telemetry. * from version 1.35.70 * api-change:`bedrock-agent`: Custom Orchestration API release for AWSBedrockAgents. * api-change:`bedrock-agent-runtime`: Custom Orchestration and Streaming configurations API release for AWSBedrockAgents. * api-change:`connect`: Enables access to ValueMap and ValueInteger types for SegmentAttributes and fixes deserialization bug for DescribeContactFlow in AmazonConnect Public API * api-change:`ec2`: Adds support for Time-based Copy for EBS Snapshots and Cross Region PrivateLink. Time-based Copy ensures that EBS Snapshots are copied within and across AWS Regions in a specified timeframe. Cross Region PrivateLink enables customers to connect to VPC endpoint services hosted in other AWS Regions. * api-change:`qapps`: Private sharing, file upload and data collection feature support for Q Apps * from version 1.35.69 * api-change:`directconnect`: Update DescribeDirectConnectGatewayAssociations API to return associated core network information if a Direct Connect gateway is attached to a Cloud WAN core network. * api-change:`networkmanager`: This release adds native Direct Connect integration on Cloud WAN enabling customers to directly attach their Direct Connect gateways to Cloud WAN without the need for an intermediate Transit Gateway. * api-change:`s3`: Amazon Simple Storage Service / Features: Add support for ETag based conditional writes in PutObject and CompleteMultiPartUpload APIs to prevent unintended object modifications. * from version 1.35.68 * api-change:`autoscaling`: Now, Amazon EC2 Auto Scaling customers can enable target tracking policies to take quicker scaling decisions, enhancing their application performance and EC2 utilization. To get started, specify target tracking to monitor a metric that is available on Amazon CloudWatch at seconds-level interval. * api-change:`bcm-pricing-calculator`: Initial release of the AWS Billing and Cost Management Pricing Calculator API. * api-change:`bedrock-agent-runtime`: InvokeInlineAgent API release to help invoke runtime agents without any dependency on preconfigured agents. * api-change:`ce`: This release adds the Impact field(contains Contribution field) to the GetAnomalies API response under RootCause * api-change:`chatbot`: Adds support for programmatic management of custom actions and aliases which can be associated with channel configurations. * api-change:`codepipeline`: AWS CodePipeline V2 type pipelines now support ECRBuildAndPublish and InspectorScan actions. * api-change:`cognito-idp`: Add support for users to sign up and sign in without passwords, using email and SMS OTPs and Passkeys. Add support for Passkeys based on WebAuthn. Add support for enhanced branding customization for hosted authentication pages with Amazon Cognito Managed Login. Add feature tiers with new pricing. * api-change:`connect`: Amazon Connect Service Feature: Add APIs for Amazon Connect Email Channel * api-change:`elbv2`: This release adds support for advertising trusted CA certificate names in associated trust stores. * api-change:`emr`: Advanced Scaling in Amazon EMR Managed Scaling * api-change:`inspector2`: Extend inspector2 service model to include ServiceQuotaExceededException. * api-change:`lambda`: Add ProvisionedPollerConfig to Lambda event-source- mapping API. * api-change:`mailmanager`: Added new "DeliverToQBusiness" rule action to MailManager RulesSet for ingesting email data into Amazon Q Business customer applications * api-change:`neptune-graph`: Add 4 new APIs to support new Export features, allowing Parquet and CSV formats. Add new arguments in Import APIs to support Parquet import. Add a new query "neptune.read" to run algorithms without loading data into database * api-change:`omics`: This release adds support for resource policy based cross account S3 access to sequence store read sets. * api-change:`quicksight`: This release includes: Update APIs to support Image, Layer Map, font customization, and Plugin Visual. Add Identity center related information in ListNamsespace API. Update API for restrictedFolder support in topics and add API for SearchTopics, Describe/Update DashboardsQA Configration. * api-change:`sagemaker`: This release adds APIs for new features for SageMaker endpoint to scale down to zero instances, native support for multi-adapter inference, and endpoint scaling improvements. * api-change:`ses`: This release adds support for starting email contacts in your Amazon Connect instance as an email receiving action. * api-change:`sns`: ArchivePolicy attribute added to Archive and Replay feature * api-change:`stepfunctions`: Add support for variables and JSONata in TestState, GetExecutionHistory, DescribeStateMachine, and DescribeStateMachineForExecution * api-change:`workspaces`: While integrating WSP-DCV rebrand, a few mentions were erroneously renamed from WSP to DCV. This release reverts those mentions back to WSP. * from version 1.35.67 * api-change:`apigateway`: Added support for custom domain names for private APIs. * api-change:`application-autoscaling`: Application Auto Scaling now supports Predictive Scaling to proactively increase the desired capacity ahead of predicted demand, ensuring improved availability and responsiveness for customers' applications. This feature is currently only made available for Amazon ECS Service scalable targets. * api-change:`appsync`: Add support for the Amazon Bedrock Runtime. * api-change:`ce`: This release introduces three new APIs that enable you to estimate the cost, coverage, and utilization impact of Savings Plans you plan to purchase. The three APIs are StartCommitmentPurchaseAnalysis, GetCommitmentPurchaseAnalysis, and ListCommitmentPurchaseAnalyses. * api-change:`cloudfront`: Adds support for Origin Selection between EMPv2 origins based on media quality score. * api-change:`cloudtrail`: This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource. * api-change:`ec2`: Adds support for requesting future-dated Capacity Reservations with a minimum commitment duration, enabling IPAM for organizational units within AWS Organizations, reserving EC2 Capacity Blocks that start in 30 minutes, and extending the end date of existing Capacity Blocks. * api-change:`elasticache`: Added support to modify the engine type for existing ElastiCache Users and User Groups. Customers can now modify the engine type from redis to valkey. * api-change:`elbv2`: This feature adds support for enabling zonal shift on cross-zone enabled Application Load Balancer, as well as modifying HTTP request and response headers. * api-change:`health`: Adds metadata property to an AffectedEntity. * api-change:`iot`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`iotfleetwise`: AWS IoT FleetWise now includes campaign parameters to store and forward data, configure MQTT topic as a data destination, and collect diagnostic trouble code data. It includes APIs for network agnostic data collection using custom decoding interfaces, and monitoring the last known state of vehicles. * api-change:`iot-jobs-data`: General Availability (GA) release of AWS IoT Device Management - Commands, to trigger light-weight remote actions on targeted devices * api-change:`lambda`: Adds support for metrics for event source mappings for AWS Lambda * api-change:`logs`: Adds "Create field indexes to improve query performance and reduce scan volume" and "Transform logs during ingestion". Updates documentation for "PutLogEvents with Entity". * api-change:`notifications`: This release adds support for AWS User Notifications. You can now configure and view notifications from AWS services in a central location using the AWS SDK. * api-change:`notificationscontacts`: This release adds support for AWS User Notifications Contacts. You can now configure and view email contacts for AWS User Notifications using the AWS SDK. * api-change:`resiliencehub`: AWS Resilience Hub's new summary view visually represents applications' resilience through charts, enabling efficient resilience management. It provides a consolidated view of the app portfolio's resilience state and allows data export for custom stakeholder reporting. * api-change:`s3`: Add support for conditional deletes for the S3 DeleteObject and DeleteObjects APIs. Add support for write offset bytes option used to append to objects with the S3 PutObject API. * api-change:`ssm`: Added support for providing high-level overviews of managed nodes and previewing the potential impact of a runbook execution. * api-change:`ssm-quicksetup`: Add methods that retrieve details about deployed configurations: ListConfigurations, GetConfiguration * api-change:`xray`: AWS X-Ray introduces Transaction Search APIs, enabling span ingestion into CloudWatch Logs for high-scale trace data indexing. These APIs support span-level queries, trace graph generation, and metric correlation for deeper application insights. * from version 1.35.66 * api-change:`autoscaling`: With this release, customers can prioritize launching instances into ODCRs using targets from ASGs or Launch Templates. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family that meets their needs. * api-change:`bedrock-agent-runtime`: Releasing new Prompt Optimization to enhance your prompts for improved performance * api-change:`cloudfront`: Add support for gRPC, VPC origins, and Anycast IP Lists. Allow LoggingConfig IncludeCookies to be set regardless of whether the LoggingConfig is enabled. * api-change:`compute-optimizer`: This release enables AWS Compute Optimizer to analyze and generate optimization recommendations for Amazon Aurora database instances. It also enables Compute Optimizer to identify idle Amazon EC2 instances, Amazon EBS volumes, Amazon ECS services running on Fargate, and Amazon RDS databases. * api-change:`controltower`: Adds support for child enabled baselines which allow you to see the enabled baseline status for individual accounts. * api-change:`cost-optimization-hub`: This release adds action type "Delete" to the GetRecommendation, ListRecommendations and ListRecommendationSummaries APIs to support new EBS and ECS recommendations with action type "Delete". * api-change:`datazone`: This release supports Metadata Enforcement Rule feature for Create Subscription Request action. * api-change:`discovery`: Add support to import data from commercially available discovery tools without file manipulation. * api-change:`ec2`: With this release, customers can express their desire to launch instances only in an ODCR or ODCR group rather than OnDemand capacity. Customers can express their baseline instances' CPU-performance in attribute-based Instance Requirements configuration by referencing an instance family. * api-change:`ecs`: This release adds support for the Availability Zone rebalancing feature on Amazon ECS. * api-change:`elbv2`: This release adds support for configuring Load balancer Capacity Unit reservations * api-change:`lambda`: Add Node 22.x (node22.x) support to AWS Lambda * api-change:`mediaconvert`: This release adds the ability to reconfigure concurrent job settings for existing queues and create queues with custom concurrent job settings. * api-change:`mediapackagev2`: MediaPackage v2 now supports the Media Quality Confidence Score (MQCS) published from MediaLive. Customers can control input switching based on the MQCS and publishing HTTP Headers for the MQCS via the API. * api-change:`omics`: Enabling call caching feature that allows customers to reuse previously computed results from a set of completed tasks in a new workflow run. * api-change:`rbin`: This release adds support for exclusion tags for Recycle Bin, which allows you to identify resources that are to be excluded, or ignored, by a Region-level retention rule. * api-change:`rds`: This release adds support for scale storage on the DB instance using a Blue/Green Deployment. * api-change:`timestream-query`: This release adds support for Provisioning Timestream Compute Units (TCUs), a new feature that allows provisioning dedicated compute resources for your queries, providing predictable and cost-effective query performance. * api-change:`workspaces`: Added support for Rocky Linux 8 on Amazon WorkSpaces Personal. * api-change:`workspaces-web`: Added data protection settings with support for inline data redaction. * from version 1.35.65 * api-change:`b2bi`: Add new X12 transactions sets and versions * api-change:`ec2`: This release adds VPC Block Public Access (VPC BPA), a new declarative control which blocks resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. * api-change:`ecs`: This release introduces support for configuring the version consistency feature for individual containers defined within a task definition. The configuration allows to specify whether ECS should resolve the container image tag specified in the container definition to an image digest. * api-change:`efs`: Add support for the new parameters in EFS replication APIs * api-change:`glue`: AWS Glue Data Catalog now enhances managed table optimizations of Apache Iceberg tables that can be accessed only from a specific Amazon Virtual Private Cloud (VPC) environment. * api-change:`keyspaces`: Amazon Keyspaces Multi-Region Replication: Adds support to add new regions to multi and single-region keyspaces. * api-change:`mwaa`: Amazon MWAA now supports a new environment class, mw1.micro, ideal for workloads requiring fewer resources than mw1.small. This class supports a single instance of each Airflow component: Scheduler, Worker, and Webserver. * api-change:`taxsettings`: Release Tax Inheritance APIs, Tax Exemption APIs, and functionality update for some existing Tax Registration APIs * api-change:`workspaces`: Releasing new ErrorCodes for Image Validation failure during CreateWorkspaceImage process * from version 1.35.64 * api-change:`appconfig`: AWS AppConfig has added a new extension action point, AT_DEPLOYMENT_TICK, to support third-party monitors to trigger an automatic rollback during a deployment. * api-change:`autoscaling`: Amazon EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). * api-change:`cloudformation`: This release adds a new API, ListHookResults, that allows retrieving CloudFormation Hooks invocation results for hooks invoked during a create change set operation or Cloud Control API operation * api-change:`connect`: Adds CreateContactFlowVersion and ListContactFlowVersions APIs to create and view the versions of a contact flow. * api-change:`customer-profiles`: This release introduces Segmentation APIs and new Calculated Attribute Event Filters as part of Amazon Connect Customer Profiles service. * api-change:`ec2`: Adding request and response elements for managed resources. * api-change:`ecs`: This release adds support for adding VPC Lattice configurations in ECS CreateService/UpdateService APIs. The configuration allows for associating VPC Lattice target groups with ECS Services. * api-change:`iotsitewise`: The release introduces a generative AI Assistant in AWS IoT SiteWise. It includes: 1) InvokeAssistant API - Invoke the Assistant to get alarm summaries and ask questions. 2) Dataset APIs - Manage knowledge base configuration for the Assistant. 3) Portal APIs enhancement - Manage AI-aware dashboards. * api-change:`qconnect`: This release introduces MessageTemplate as a resource in Amazon Q in Connect, along with APIs to create, read, search, update, and delete MessageTemplate resources. * api-change:`rds`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * api-change:`rds-data`: Add support for the automatic pause/resume feature of Aurora Serverless v2. * from version 1.35.63 * api-change:`cloudwatch`: Adds support for adding related Entity information to metrics ingested through PutMetricData. * api-change:`connectcampaignsv2`: Added Amazon Connect Outbound Campaigns V2 SDK. * api-change:`datasync`: Doc-only updates and enhancements related to creating DataSync tasks and describing task executions. * api-change:`ec2`: Remove non-functional enum variants for FleetCapacityReservationUsageStrategy * api-change:`iot`: This release allows AWS IoT Core users to enrich MQTT messages with propagating attributes, to associate a thing to a connection, and to enable Online Certificate Status Protocol (OCSP) stapling for TLS X.509 server certificates through private endpoints. * api-change:`outposts`: You can now purchase AWS Outposts rack or server capacity for a 5-year term with one of the following payment options: All Upfront, Partial Upfront, and No Upfront. * api-change:`pinpoint-sms-voice-v2`: Use rule overrides to always allow or always block messages to specific phone numbers. Use message feedback to monitor if a customer interacts with your message. * api-change:`route53resolver`: Route 53 Resolver DNS Firewall Advanced Rules allows you to monitor and block suspicious DNS traffic based on anomalies detected in the queries, such as DNS tunneling and Domain Generation Algorithms (DGAs). * from version 1.35.62 * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * from version 1.35.61 * api-change:`accessanalyzer`: Expand analyzer configuration capabilities for unused access analyzers. Unused access analyzer configurations now support the ability to exclude accounts and resource tags from analysis providing more granular control over the scope of analysis. * api-change:`cloudcontrol`: Added support for CloudFormation Hooks with Cloud Control API. The GetResourceRequestStatus API response now includes an optional HooksProgressEvent and HooksRequestToken parameter for Hooks Invocation Progress as part of resource operation with Cloud Control. * api-change:`deadline`: Adds support for select GPU accelerated instance types when creating new service-managed fleets. * api-change:`iam`: This release includes support for five new APIs and changes to existing APIs that give AWS Organizations customers the ability to use temporary root credentials, targeted to member accounts in the organization. * api-change:`iotwireless`: New FuotaTask resource type to enable logging for your FUOTA tasks. A ParticipatingGatewaysforMulticast parameter to choose the list of gateways to receive the multicast downlink message and the transmission interval between them. Descriptor field which will be sent to devices during FUOTA transfer. * api-change:`ivs`: IVS now offers customers the ability to stream multitrack video to Channels. * api-change:`license-manager-user-subscriptions`: New and updated API operations to support License Included User-based Subscription of Microsoft Remote Desktop Services (RDS). * api-change:`partnercentral-selling`: Announcing AWS Partner Central API for Selling: This service launch Introduces new APIs for co-selling opportunity management and related functions. Key features include notifications, a dynamic sandbox for testing, and streamlined validations. * api-change:`quicksight`: This release adds APIs for Custom Permissions management in QuickSight, and APIs to support QuickSight Branding. * api-change:`redshift`: Adds support for Amazon Redshift S3AccessGrants * api-change:`s3`: This release updates the ListBuckets API Reference documentation in support of the new 10,000 general purpose bucket default quota on all AWS accounts. To increase your bucket quota from 10,000 to up to 1 million buckets, simply request a quota increase via Service Quotas. * api-change:`sagemaker`: Add support for Neuron instance types [ trn1/trn1n/inf2 ] on SageMaker Notebook Instances Platform. * api-change:`sts`: This release introduces the new API 'AssumeRoot', which returns short-term credentials that you can use to perform privileged tasks. * Update to 1.35.60 * api-change:`accessanalyzer`: This release adds support for policy validation and external access findings for resource control policies (RCP). IAM Access Analyzer helps you author functional and secure RCPs and awareness that a RCP may restrict external access. Updated service API, documentation, and paginators. * api-change:`application-signals`: Amazon CloudWatch Application Signals now supports creating Service Level Objectives with burn rates. Users can now create or update SLOs with burn rate configurations to meet their specific business requirements. * api-change:`b2bi`: This release adds a GenerateMapping API to allow generation of JSONata or XSLT transformer code based on input and output samples. * api-change:`billing`: Today, AWS announces the general availability of ListBillingViews API in the AWS SDKs, to enable AWS Billing Conductor (ABC) users to create proforma Cost and Usage Reports (CUR) programmatically. * api-change:`cloudtrail`: This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt. * api-change:`dynamodb`: This release includes supports the new WarmThroughput feature for DynamoDB. You can now provide an optional WarmThroughput attribute for CreateTable or UpdateTable APIs to pre-warm your table or global secondary index. You can also use DescribeTable to see the latest WarmThroughput value. * api-change:`ec2`: This release adds the source AMI details in DescribeImages API * api-change:`internetmonitor`: Add new query type Routing_Suggestions regarding querying interface * api-change:`mediaconvert`: This release adds support for ARN inputs in the Kantar credentials secrets name field and the MSPR field to the manifests for PlayReady DRM protected outputs. * api-change:`organizations`: Add support for policy operations on the Resource Control Polices. * from version 1.35.59 * api-change:`codebuild`: AWS CodeBuild now supports non-containerized Linux and Windows builds on Reserved Capacity. * api-change:`controltower`: Added ResetEnabledControl API. * api-change:`fis`: This release adds support for generating experiment reports with the experiment report configuration * api-change:`gamelift`: Amazon GameLift releases container fleets support for general availability. Deploy Linux-based containerized game server software for hosting on Amazon GameLift. * api-change:`payment-cryptography`: Updated ListAliases API with KeyArn filter. * api-change:`rds`: Updates Amazon RDS documentation for Amazon RDS Extended Support for Amazon Aurora MySQL. * from version 1.35.58 * api-change:`cloudfront`: No API changes from previous release. This release migrated the model to Smithy keeping all features unchanged. * api-change:`inspector2`: Adds support for filePath filter. * api-change:`lambda`: Add Python 3.13 (python3.13) support to AWS Lambda * api-change:`opensearch`: Adds Support for new AssociatePackages and DissociatePackages API in Amazon OpenSearch Service that allows association and dissociation operations to be carried out on multiple packages at the same time. * api-change:`outposts`: This release updates StartCapacityTask to allow an active Outpost to be modified. It also adds a new API to list all running EC2 instances on the Outpost. * from version 1.35.57 * api-change:`batch`: This feature allows override LaunchTemplates to be specified in an AWS Batch Compute Environment. * api-change:`bedrock-agent-runtime`: This release adds trace functionality to Bedrock Prompt Flows * api-change:`chime-sdk-media-pipelines`: Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context. * api-change:`controlcatalog`: AWS Control Catalog GetControl public API returns additional data in output, including Implementation and Parameters * api-change:`eks`: Adds new error code `Ec2InstanceTypeDoesNotExist` for Amazon EKS managed node groups * api-change:`firehose`: Amazon Data Firehose / Features : Adds support for a new DeliveryStreamType, DatabaseAsSource. DatabaseAsSource hoses allow customers to stream CDC events from their RDS and Amazon EC2 hosted databases, running MySQL and PostgreSQL database engines, to Iceberg Table destinations. * api-change:`lambda`: This release adds support for using AWS KMS customer managed keys to encrypt AWS Lambda .zip deployment packages. * api-change:`pinpoint-sms-voice-v2`: Added the RequiresAuthenticationTimestamp field to the RegistrationVersionStatusHistory data type. * api-change:`qbusiness`: Adds S3 path option to pass group member list for PutGroup API. * from version 1.35.56 * api-change:`autoscaling`: Auto Scaling groups now support the ability to strictly balance instances across Availability Zones by configuring the AvailabilityZoneDistribution parameter. If balanced-only is configured for a group, launches will always be attempted in the under scaled Availability Zone even if it is unhealthy. * api-change:`bedrock-agent`: Add prompt support for chat template configuration and agent generative AI resource. Add support for configuring an optional guardrail in Prompt and Knowledge Base nodes in Prompt Flows. Add API to validate flow definition * api-change:`bedrock-runtime`: Add Prompt management support to Bedrock runtime APIs: Converse, ConverseStream, InvokeModel, InvokeModelWithStreamingResponse * api-change:`cleanrooms`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`cleanroomsml`: This release introduces support for Custom Models in AWS Clean Rooms ML. * api-change:`quicksight`: Add Client Credentials based OAuth support for Snowflake and Starburst * api-change:`resource-explorer-2`: Add GetManagedView, ListManagedViews APIs. * api-change:`synthetics`: Add support to toggle if a canary will automatically delete provisioned canary resources such as Lambda functions and layers when a canary is deleted. This behavior can be controlled via the new ProvisionedResourceCleanup property exposed in the CreateCanary and UpdateCanary APIs. * from version 1.35.55 * api-change:`codebuild`: AWS CodeBuild now adds additional compute types for reserved capacity fleet. * api-change:`guardduty`: GuardDuty RDS Protection expands support for Amazon Aurora PostgreSQL Limitless Databases. * api-change:`lakeformation`: API changes for new named tag expressions feature. * api-change:`qapps`: Introduces category apis in AmazonQApps. Web experience users use Categories to tag and filter library items. * api-change:`s3control`: Fix ListStorageLensConfigurations and ListStorageLensGroups deserialization for Smithy SDKs. * api-change:`verifiedpermissions`: Adding BatchGetPolicy API which supports the retrieval of multiple policies across multiple policy stores within a single request. * enhancement:protocol: Added support for header enabling service migration off the AWS Query protocol. * from version 1.35.54 * api-change:`bedrock-agent`: Amazon Bedrock Knowledge Bases now supports using application inference profiles to increase throughput and improve resilience. * api-change:`docdb-elastic`: Amazon DocumentDB Elastic Clusters adds support for pending maintenance actions feature with APIs GetPendingMaintenanceAction, ListPendingMaintenanceActions and ApplyPendingMaintenanceAction * api-change:`logs`: This release introduces an improvement in PutLogEvents * api-change:`taxsettings`: Add support for supplemental tax registrations via these new APIs: PutSupplementalTaxRegistration, ListSupplementalTaxRegistrations, and DeleteSupplementalTaxRegistration. * from version 1.35.53 * api-change:`amp`: Added support for UpdateScraper API, to enable updating collector configuration in-place * api-change:`autoscaling`: Adds bake time for Auto Scaling group Instance Refresh * api-change:`batch`: Add `podNamespace` to `EksAttemptDetail` and `containerID` to `EksAttemptContainerDetail`. * api-change:`elbv2`: Add UDP support for AWS PrivateLink and dual-stack Network Load Balancers * api-change:`glue`: Add schedule support for AWS Glue column statistics * api-change:`sagemaker`: SageMaker HyperPod adds scale-down at instance level via BatchDeleteClusterNodes API and group level via UpdateCluster API. SageMaker Training exposes secondary job status in TrainingJobSummary from ListTrainingJobs API. SageMaker now supports G6, G6e, P5e instances for HyperPod and Training. * api-change:`sesv2`: This release enables customers to provide the email template content in the SESv2 SendEmail and SendBulkEmail APIs instead of the name or the ARN of a stored email template. * from version 1.35.52 * api-change:`appsync`: This release adds support for AppSync Event APIs. * api-change:`connect`: Updated the public documentation for the UserIdentityInfo object to accurately reflect the character limits for the FirstName and LastName fields, which were previously listed as 1-100 characters. * api-change:`datasync`: AWS DataSync now supports Enhanced mode tasks. This task mode supports transfer of virtually unlimited numbers of objects with enhanced metrics, more detailed logs, and higher performance than Basic mode. This mode currently supports transfers between Amazon S3 locations. * api-change:`ec2`: This release adds two new capabilities to VPC Security Groups: Security Group VPC Associations and Shared Security Groups. * api-change:`ecs`: This release supports service deployments and service revisions which provide a comprehensive view of your Amazon ECS service history. * api-change:`geo-maps`: Release of Amazon Location Maps API. Maps enables you to build digital maps that showcase your locations, visualize your data, and unlock insights to drive your business * api-change:`geo-places`: Release of Amazon Location Places API. Places enables you to quickly search, display, and filter places, businesses, and locations based on proximity, category, and name * api-change:`geo-routes`: Release of Amazon Location Routes API. Routes enables you to plan efficient routes and streamline deliveries by leveraging real-time traffic, vehicle restrictions, and turn-by-turn directions. * api-change:`keyspaces`: Adds support for interacting with user-defined types (UDTs) through the following new operations: Create-Type, Delete-Type, List- Types, Get-Type. * api-change:`network-firewall`: AWS Network Firewall now supports configuring TCP idle timeout * api-change:`opensearch`: This release introduces the new OpenSearch user interface (Dashboards), a new web-based application that can be associated with multiple data sources across OpenSearch managed clusters, serverless collections, and Amazon S3, so that users can gain a comprehensive insights in an unified interface. * api-change:`opensearchserverless`: Neo Integration via IAM Identity Center (IdC) * api-change:`redshift`: This release launches S3 event integrations to create and manage integrations from an Amazon S3 source into an Amazon Redshift database. * api-change:`redshift-serverless`: Adds and updates API members for the Redshift Serverless AI-driven scaling and optimization feature using the price-performance target setting. * api-change:`route53`: This release adds support for TLSA, SSHFP, SVCB, and HTTPS record types. * api-change:`sagemaker`: Added support for Model Registry Staging construct. Users can define series of stages that models can progress through for model workflows and lifecycle. This simplifies tracking and managing models as they transition through development, testing, and production stages. * api-change:`workmail`: This release adds support for Multi-Factor Authentication (MFA) and Personal Access Tokens through integration with AWS IAM Identity Center. * from version 1.35.51 * api-change:`bedrock`: Update Application Inference Profile * api-change:`bedrock-runtime`: Update Application Inference Profile * api-change:`cleanrooms`: This release adds the option for customers to configure analytics engine when creating a collaboration, and introduces the new SPARK analytics engine type in addition to maintaining the legacy CLEAN_ROOMS_SQL engine type. * api-change:`iotfleetwise`: Updated BatchCreateVehicle and BatchUpdateVehicle APIs: LimitExceededException has been added and the maximum number of vehicles in a batch has been set to 10 explicitly * api-change:`logs`: Added support for new optional baseline parameter in the UpdateAnomaly API. For UpdateAnomaly requests with baseline set to True, The anomaly behavior is then treated as baseline behavior. However, more severe occurrences of this behavior will still be reported as anomalies. * api-change:`redshift-data`: Adding a new API GetStatementResultV2 that supports CSV formatted results from ExecuteStatement and BatchExecuteStatement calls. * api-change:`sagemaker`: Adding `notebook-al2-v3` as allowed value to SageMaker NotebookInstance PlatformIdentifier attribute * from version 1.35.50 * api-change:`mediapackagev2`: MediaPackage V2 Live to VOD Harvester is a MediaPackage V2 feature, which is used to export content from an origin endpoint to a S3 bucket. * api-change:`opensearch`: Adds support for provisioning dedicated coordinator nodes. Coordinator nodes can be specified using the new NodeOptions parameter in ClusterConfig. * api-change:`rds`: This release adds support for Enhanced Monitoring and Performance Insights when restoring Aurora Limitless Database DB clusters. It also adds support for the os-upgrade pending maintenance action. * api-change:`storagegateway`: Documentation update: Amazon FSx File Gateway will no longer be available to new customers. * from version 1.35.49 * api-change:`bedrock-agent`: Add support of new model types for Bedrock Agents, Adding inference profile support for Flows and Prompt Management, Adding new field to configure additional inference configurations for Flows and Prompt Management * api-change:`codebuild`: AWS CodeBuild now supports automatically retrying failed builds * api-change:`lambda`: Add TagsError field in Lambda GetFunctionResponse. The TagsError field contains details related to errors retrieving tags. * api-change:`logs`: Adding inferred token name for dynamic tokens in Anomalies. * api-change:`supplychain`: API doc updates, and also support showing error message on a failed instance * from version 1.35.48 * api-change:`appconfig`: This release improves deployment safety by granting customers the ability to REVERT completed deployments, to the last known good state.In the StopDeployment API revert case the status of a COMPLETE deployment will be REVERTED. AppConfig only allows a revert within 72 hours of deployment completion. * api-change:`ec2`: This release includes a new API to describe some details of the Amazon Machine Images (AMIs) that were used to launch EC2 instances, even if those AMIs are no longer available for use. * api-change:`ecs`: This release adds support for EBS volumes attached to Amazon ECS Windows tasks running on EC2 instances. * api-change:`nimble`: The nimble client has been removed following the deprecation of the service. * api-change:`pcs`: Documentation update: added the default value of the Slurm configuration parameter scaleDownIdleTimeInSeconds to its description. * api-change:`qbusiness`: Add a new field in chat response. This field can be used to support nested schemas in array fields ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1921 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (noarch) * python313-botocore-1.43.36-160000.1.1 * python313-boto3-1.43.36-160000.1.1 * python313-s3transfer-0.19.0-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1204537 * https://bugzilla.suse.com/show_bug.cgi?id=1209255 * https://bugzilla.suse.com/show_bug.cgi?id=1267424 * https://jira.suse.com/browse/PED-2333 * https://jira.suse.com/browse/PED-3780 * https://jira.suse.com/browse/SLE-15 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:06 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:34:06 -0000 Subject: SUSE-SU-2026:4867-1: important: Security update for go1.26-openssl Message-ID: <179270124633.838.14007427935893140047@8741a845db10> # Security update for go1.26-openssl Announcement ID: SUSE-SU-2026:4867-1 Release Date: 2026-10-22T15:06:58Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 * bsc#1286261 * bsc#1286317 * jsc#SLE-18320 Cross-References: * CVE-2026-111943 * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). Changes: * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF * go#81152 cmd/compile/internal/test: TestMergeLocalsIntegration failures * go#81113 debug/elf: applyRelocationsPPC was broken by CL 705075 * go#80889 os: TestRootMultiMkdirAllShallow failures on openbsd * go#80851 cmd/go: pseudo #cgo directive FFLAGS value mixed up with CXXFLAGS in Go 1.26 * go#80827 runtime: async preemption corrupts AVX (YMM) state on netbsd/amd64 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4867 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4867 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4867 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4867 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4867 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4867 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4867 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4867 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 * https://jira.suse.com/browse/SLE-18320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:34:55 -0000 Subject: SUSE-SU-2026:4863-1: important: Security update for go1.27 Message-ID: <179270129554.838.14844306792941701649@8741a845db10> # Security update for go1.27 Announcement ID: SUSE-SU-2026:4863-1 Release Date: 2026-10-22T13:35:56Z Rating: important References: * bsc#1272545 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4863 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4863 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4863 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4863 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4863 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4863 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4863 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4863 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4863 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4863 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4863 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:23 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:33:23 -0000 Subject: SUSE-SU-2026:4870-1: critical: Security update for php74 Message-ID: <179270120343.838.15261366351763584813@8741a845db10> # Security update for php74 Announcement ID: SUSE-SU-2026:4870-1 Release Date: 2026-10-22T16:03:33Z Rating: critical References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * Web and Scripting Module 12 An update that solves two vulnerabilities can now be installed. ## Description: This update for php74 fixes the following issues: Fixed two security issues: * CVE-2026-109618: memory corruption leading to RCE * CVE-2026-109619: memory corruption leading to RCE ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 12 zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2026-4870 ## Package List: * Web and Scripting Module 12 (aarch64 ppc64le s390x x86_64) * php74-sqlite-7.4.33-1.74.1 * php74-fastcgi-7.4.33-1.74.1 * php74-enchant-7.4.33-1.74.1 * php74-gmp-7.4.33-1.74.1 * php74-odbc-7.4.33-1.74.1 * php74-exif-7.4.33-1.74.1 * php74-fpm-7.4.33-1.74.1 * php74-dba-7.4.33-1.74.1 * php74-ftp-debuginfo-7.4.33-1.74.1 * php74-soap-debuginfo-7.4.33-1.74.1 * php74-soap-7.4.33-1.74.1 * php74-mysql-debuginfo-7.4.33-1.74.1 * php74-sqlite-debuginfo-7.4.33-1.74.1 * php74-pcntl-debuginfo-7.4.33-1.74.1 * php74-curl-7.4.33-1.74.1 * php74-sysvmsg-debuginfo-7.4.33-1.74.1 * php74-phar-7.4.33-1.74.1 * php74-fileinfo-debuginfo-7.4.33-1.74.1 * php74-snmp-debuginfo-7.4.33-1.74.1 * php74-odbc-debuginfo-7.4.33-1.74.1 * php74-gettext-7.4.33-1.74.1 * php74-pdo-debuginfo-7.4.33-1.74.1 * php74-pdo-7.4.33-1.74.1 * php74-xmlwriter-7.4.33-1.74.1 * php74-sysvsem-7.4.33-1.74.1 * php74-tokenizer-debuginfo-7.4.33-1.74.1 * php74-7.4.33-1.74.1 * php74-mbstring-7.4.33-1.74.1 * php74-bz2-debuginfo-7.4.33-1.74.1 * php74-curl-debuginfo-7.4.33-1.74.1 * php74-iconv-7.4.33-1.74.1 * php74-xmlreader-7.4.33-1.74.1 * php74-shmop-7.4.33-1.74.1 * php74-zip-7.4.33-1.74.1 * php74-xsl-7.4.33-1.74.1 * php74-zlib-debuginfo-7.4.33-1.74.1 * php74-fpm-debuginfo-7.4.33-1.74.1 * php74-ldap-7.4.33-1.74.1 * php74-zlib-7.4.33-1.74.1 * php74-sysvmsg-7.4.33-1.74.1 * php74-tidy-debuginfo-7.4.33-1.74.1 * php74-sodium-debuginfo-7.4.33-1.74.1 * php74-fastcgi-debuginfo-7.4.33-1.74.1 * php74-json-debuginfo-7.4.33-1.74.1 * php74-openssl-debuginfo-7.4.33-1.74.1 * php74-xmlreader-debuginfo-7.4.33-1.74.1 * php74-sysvsem-debuginfo-7.4.33-1.74.1 * php74-ctype-debuginfo-7.4.33-1.74.1 * php74-readline-debuginfo-7.4.33-1.74.1 * php74-pcntl-7.4.33-1.74.1 * php74-openssl-7.4.33-1.74.1 * php74-gd-debuginfo-7.4.33-1.74.1 * php74-ldap-debuginfo-7.4.33-1.74.1 * php74-debugsource-7.4.33-1.74.1 * php74-json-7.4.33-1.74.1 * php74-phar-debuginfo-7.4.33-1.74.1 * php74-fileinfo-7.4.33-1.74.1 * apache2-mod_php74-debuginfo-7.4.33-1.74.1 * php74-ftp-7.4.33-1.74.1 * php74-exif-debuginfo-7.4.33-1.74.1 * php74-tokenizer-7.4.33-1.74.1 * php74-xmlrpc-debuginfo-7.4.33-1.74.1 * php74-intl-7.4.33-1.74.1 * php74-debuginfo-7.4.33-1.74.1 * php74-dom-7.4.33-1.74.1 * php74-readline-7.4.33-1.74.1 * php74-gd-7.4.33-1.74.1 * php74-xsl-debuginfo-7.4.33-1.74.1 * php74-posix-7.4.33-1.74.1 * php74-bcmath-debuginfo-7.4.33-1.74.1 * php74-opcache-7.4.33-1.74.1 * php74-pgsql-debuginfo-7.4.33-1.74.1 * php74-opcache-debuginfo-7.4.33-1.74.1 * php74-intl-debuginfo-7.4.33-1.74.1 * php74-tidy-7.4.33-1.74.1 * php74-sysvshm-debuginfo-7.4.33-1.74.1 * php74-dom-debuginfo-7.4.33-1.74.1 * php74-dba-debuginfo-7.4.33-1.74.1 * php74-sodium-7.4.33-1.74.1 * php74-calendar-debuginfo-7.4.33-1.74.1 * php74-iconv-debuginfo-7.4.33-1.74.1 * php74-zip-debuginfo-7.4.33-1.74.1 * php74-sockets-7.4.33-1.74.1 * php74-gettext-debuginfo-7.4.33-1.74.1 * php74-enchant-debuginfo-7.4.33-1.74.1 * php74-sockets-debuginfo-7.4.33-1.74.1 * php74-xmlrpc-7.4.33-1.74.1 * php74-gmp-debuginfo-7.4.33-1.74.1 * php74-posix-debuginfo-7.4.33-1.74.1 * php74-mysql-7.4.33-1.74.1 * php74-pgsql-7.4.33-1.74.1 * php74-snmp-7.4.33-1.74.1 * php74-xmlwriter-debuginfo-7.4.33-1.74.1 * php74-bz2-7.4.33-1.74.1 * php74-ctype-7.4.33-1.74.1 * php74-bcmath-7.4.33-1.74.1 * apache2-mod_php74-7.4.33-1.74.1 * php74-calendar-7.4.33-1.74.1 * php74-shmop-debuginfo-7.4.33-1.74.1 * php74-sysvshm-7.4.33-1.74.1 * php74-mbstring-debuginfo-7.4.33-1.74.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:35:00 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:35:00 -0000 Subject: SUSE-SU-2026:4861-1: important: Security update for distribution Message-ID: <179270130019.838.10824634972798839575@8741a845db10> # Security update for distribution Announcement ID: SUSE-SU-2026:4861-1 Release Date: 2026-10-22T12:55:05Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for distribution rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4861 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4861 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4861 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4861 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4861 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4861 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4861 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4861 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4861 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4861 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4861 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4861 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:27 -0000 Subject: SUSE-RU-2026:24257-1: moderate: Recommended update for container-suseconnect Message-ID: <179270114717.838.14877776028108141338@8741a845db10> # Recommended update for container-suseconnect Announcement ID: SUSE-RU-2026:24257-1 Release Date: 2026-10-16T12:19:58Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for container-suseconnect fixes the following issues: Changes in container-suseconnect: * Update to version 2.6.0: * Update testify to version 1.12.1 * Update github.com/stretchr/testify to version 1.12.0 * Update actions/setup-go to version 7 * Update actions/checkout to version 7 * Fix typos * Update actions/checkout to version 6 * Update actions/setup-go to version 6 * Update github.com/stretchr/testify to version 1.11.1 * Update github.com/stretchr/testify to version 1.11.0 * Update actions/checkout to version 5 * Switch to go version 1.25 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1922 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1922 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * container-suseconnect-2.6.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:17 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:33:17 -0000 Subject: SUSE-SU-2026:4862-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Message-ID: <179270119725.838.9915443441831705666@8741a845db10> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4862-1 Release Date: 2026-10-22T15:41:07Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4862 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4865 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4869 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4865 SUSE-2026-4869 SUSE-2026-4862 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-7-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-7-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:48 -0000 Subject: SUSE-SU-2026:24255-1: moderate: Security update for p11-kit Message-ID: <179270116825.838.3495433409198012732@8741a845db10> # Security update for p11-kit Announcement ID: SUSE-SU-2026:24255-1 Release Date: 2026-10-15T12:14:52Z Rating: moderate References: * bsc#1269664 * bsc#1280702 Cross-References: * CVE-2026-13757 * CVE-2026-18938 CVSS scores: * CVE-2026-13757 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-13757 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for p11-kit fixes the following issues: * CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). * CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1919 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1919 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * p11-kit-devel-0.25.5-160000.3.1 * p11-kit-server-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-nss-trust-0.25.5-160000.3.1 * p11-kit-server-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * libp11-kit0-0.25.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * p11-kit-devel-0.25.5-160000.3.1 * p11-kit-server-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-nss-trust-0.25.5-160000.3.1 * p11-kit-server-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * libp11-kit0-0.25.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13757.html * https://www.suse.com/security/cve/CVE-2026-18938.html * https://bugzilla.suse.com/show_bug.cgi?id=1269664 * https://bugzilla.suse.com/show_bug.cgi?id=1280702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:39 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 22 Oct 2026 20:32:39 -0000 Subject: SUSE-SU-2026:24256-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179270115990.838.17144481138227940626@8741a845db10> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24256-1 Release Date: 2026-10-15T16:52:35Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1920 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1920 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-default-devel-595.104.02-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * nvidia-open-driver-G07-signed-64kb-devel-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-64kb-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-595.104.02_k6.12.0_160000.39-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-default-devel-595.104.02-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 08:30:24 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 08:30:24 -0000 Subject: SUSE-SU-2026:4871-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) Message-ID: <179274422416.6226.6354398150950021853@c9d35c2308c0> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4871-1 Release Date: 2026-10-22T20:05:32Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4871 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4872 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4873 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4874 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4875 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_5-debugsource-16-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_9-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-debuginfo-16-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_4-debugsource-19-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_7-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_8-debugsource-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-16-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-debuginfo-19-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-19-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:11 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 12:30:11 -0000 Subject: SUSE-SU-2026:4889-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275861197.3565.15157258721190563937@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4889-1 Release Date: 2026-10-23T08:04:31Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4889 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_20-debugsource-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:24 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 12:30:24 -0000 Subject: SUSE-SU-2026:4888-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Message-ID: <179275862447.3565.2915492917686684096@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4888-1 Release Date: 2026-10-23T07:04:40Z Rating: important References: * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4888 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4888 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-4-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-4-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:43 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 12:30:43 -0000 Subject: SUSE-SU-2026:4883-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275864364.3565.14340376909395354944@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4883-1 Release Date: 2026-10-23T05:04:30Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4883 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4885 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_66-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_19-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_18-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-debuginfo-5-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:58 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 12:30:58 -0000 Subject: SUSE-SU-2026:4887-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275865849.3565.10338441790065125695@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4887-1 Release Date: 2026-10-23T06:34:07Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4887 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4876 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4877 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4878 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4879 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4880 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4881 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4882 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4884 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_45-default-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_11-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-debuginfo-8-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_17-debugsource-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_16-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_12-debugsource-10-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_13-debugsource-9-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_6-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_15-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_10-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-debuginfo-9-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_14-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-8-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:31:04 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 12:31:04 -0000 Subject: SUSE-RU-2026:4886-1: moderate: Recommended update for sysstat Message-ID: <179275866438.3565.3860680045896705014@8cb11e3fd1c0> # Recommended update for sysstat Announcement ID: SUSE-RU-2026:4886-1 Release Date: 2026-10-23T06:02:03Z Rating: moderate References: * bsc#1280339 Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for sysstat fixes the following issues: * sar/sadf: compute used memory as total memory - available memory, consistent with free(1) (bsc#1280339). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4886 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4886 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4886 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4886 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4886 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4886 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4886 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4886 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4886 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4886 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4886 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4886 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4886 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4886 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4886 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4886 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4886 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * sysstat-12.0.2-150000.3.54.1 * sysstat-debugsource-12.0.2-150000.3.54.1 * sysstat-isag-12.0.2-150000.3.54.1 * sysstat-debuginfo-12.0.2-150000.3.54.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1280339 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:25 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:31:25 -0000 Subject: SUSE-SU-2026:4892-1: important: Security update for the Linux Kernel Message-ID: <179277308536.12145.15926093944044788535@c9d35c2308c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4892-1 Release Date: 2026-10-23T10:48:19Z Rating: important References: * bsc#1252519 * bsc#1255531 * bsc#1255995 * bsc#1256076 * bsc#1264851 * bsc#1272670 * bsc#1273040 * bsc#1273288 * bsc#1273290 * bsc#1273599 * bsc#1273764 * bsc#1274497 * bsc#1274653 * bsc#1274853 * bsc#1275080 * bsc#1275564 * bsc#1275644 * bsc#1275659 * bsc#1275964 * bsc#1276273 * bsc#1276387 * bsc#1276791 * bsc#1276844 * bsc#1276951 * bsc#1277310 * bsc#1277614 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1278313 * bsc#1280259 * bsc#1280387 * bsc#1280966 * bsc#1281058 * bsc#1281280 * bsc#1281771 * bsc#1281819 * bsc#1282744 * bsc#1282755 * bsc#1282762 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1283142 * bsc#1283823 * bsc#1283835 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284581 * bsc#1284606 * bsc#1284746 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2022-50578 * CVE-2023-54158 * CVE-2023-54180 * CVE-2025-68358 * CVE-2026-43299 * CVE-2026-63948 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64456 * CVE-2026-64593 * CVE-2026-68106 * CVE-2026-68233 * CVE-2026-68236 * CVE-2026-68303 * CVE-2026-68323 * CVE-2026-68430 * CVE-2026-72015 * CVE-2026-72236 * CVE-2026-72319 * CVE-2026-72476 * CVE-2026-72493 * CVE-2026-74408 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74653 * CVE-2026-74675 * CVE-2026-80977 * CVE-2026-89542 * CVE-2026-89726 * CVE-2026-89778 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-93252 * CVE-2026-93287 * CVE-2026-93800 * CVE-2026-93820 * CVE-2026-93822 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-98010 * CVE-2026-98077 * CVE-2026-98130 * CVE-2026-98252 * CVE-2026-98269 * CVE-2026-98347 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98365 * CVE-2026-99999 CVSS scores: * CVE-2022-50578 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2022-50578 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-54158 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2023-54158 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-54180 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2023-54180 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63948 ( SUSE ): 2.3 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-63948 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64456 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64456 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64593 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64593 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68106 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68106 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68236 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68236 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68236 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68303 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68430 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72476 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74408 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74675 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74675 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74675 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89726 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93287 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93287 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 56 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076). * CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995). * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288). * CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497). * CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659). * CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964). * CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784). * CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755). * CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * net: add inline function skb_csum_is_sctp (bsc#1285684). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4892 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4892 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4892 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (nosrc) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kernel-default-debugsource-4.12.14-122.336.1 * kernel-default-kgraft-4.12.14-122.336.1 * kgraft-patch-4_12_14-122_336-default-1-8.3.1 * kernel-default-kgraft-devel-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-base-debuginfo-4.12.14-122.336.1 * kernel-default-debugsource-4.12.14-122.336.1 * ocfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-syms-4.12.14-122.336.1 * cluster-md-kmp-default-debuginfo-4.12.14-122.336.1 * cluster-md-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-default-base-4.12.14-122.336.1 * dlm-kmp-default-debuginfo-4.12.14-122.336.1 * ocfs2-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-4.12.14-122.336.1 * kernel-default-devel-4.12.14-122.336.1 * dlm-kmp-default-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * kernel-default-devel-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * kernel-source-4.12.14-122.336.1 * kernel-macros-4.12.14-122.336.1 * kernel-devel-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x) * kernel-default-man-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * kernel-default-base-debuginfo-4.12.14-122.336.1 * kernel-default-devel-debuginfo-4.12.14-122.336.1 * kernel-default-debugsource-4.12.14-122.336.1 * ocfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-syms-4.12.14-122.336.1 * cluster-md-kmp-default-debuginfo-4.12.14-122.336.1 * cluster-md-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-default-base-4.12.14-122.336.1 * dlm-kmp-default-debuginfo-4.12.14-122.336.1 * ocfs2-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-4.12.14-122.336.1 * kernel-default-devel-4.12.14-122.336.1 * dlm-kmp-default-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (nosrc x86_64) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * kernel-source-4.12.14-122.336.1 * kernel-macros-4.12.14-122.336.1 * kernel-devel-4.12.14-122.336.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50578.html * https://www.suse.com/security/cve/CVE-2023-54158.html * https://www.suse.com/security/cve/CVE-2023-54180.html * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-63948.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64456.html * https://www.suse.com/security/cve/CVE-2026-64593.html * https://www.suse.com/security/cve/CVE-2026-68106.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68236.html * https://www.suse.com/security/cve/CVE-2026-68303.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-68430.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72476.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74408.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74675.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89726.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93287.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1252519 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1255995 * https://bugzilla.suse.com/show_bug.cgi?id=1256076 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1272670 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273288 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1274497 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1274853 * https://bugzilla.suse.com/show_bug.cgi?id=1275080 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275659 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276273 * https://bugzilla.suse.com/show_bug.cgi?id=1276387 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276844 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1278313 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281058 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282744 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:31:31 -0000 Subject: SUSE-SU-2026:4897-1: important: Security update for cifs-utils Message-ID: <179277309182.12145.11169580878920434766@c9d35c2308c0> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:4897-1 Release Date: 2026-10-23T10:51:30Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4897 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4897 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-debugsource-6.9-13.32.2 * cifs-utils-6.9-13.32.2 * cifs-utils-debuginfo-6.9-13.32.2 * cifs-utils-devel-6.9-13.32.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cifs-utils-debugsource-6.9-13.32.2 * cifs-utils-6.9-13.32.2 * cifs-utils-debuginfo-6.9-13.32.2 * cifs-utils-devel-6.9-13.32.2 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:43 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:31:43 -0000 Subject: SUSE-SU-2026:4895-1: important: Security update for gimp Message-ID: <179277310305.12145.2578926375792076673@c9d35c2308c0> # Security update for gimp Announcement ID: SUSE-SU-2026:4895-1 Release Date: 2026-10-23T10:51:04Z Rating: important References: * bsc#1277618 * bsc#1277622 * bsc#1284473 * bsc#1284474 * bsc#1284475 Cross-References: * CVE-2026-106061 * CVE-2026-106062 * CVE-2026-106063 * CVE-2026-82328 * CVE-2026-82343 CVSS scores: * CVE-2026-106061 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-106061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-106061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-106062 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-106062 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106062 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106063 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-106063 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106063 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-82328 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82328 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82328 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82343 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82343 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82343 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for gimp fixes the following issues: * CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads (bsc#1277618). * CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds reads (bsc#1277622). * CVE-2026-106061: integer overflow in the X cursor thumbnail loader leads to out-of-bounds read and process crash when generating a thumbnail for a crafted XMC file (bsc#1284473). * CVE-2026-106062: heap-based buffer overflow in DirectDraw Surface loader when loading a crafted DDS image (bsc#1284474). * CVE-2026-106063: heap-based buffer overflow in the DICOM export plug-in when exporting an image with extremely large width and height (bsc#1284475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4895 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4895 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4895 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-debugsource-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.85.1 * gimp-plugin-aa-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (x86_64) * libgimpui-2_0-0-32bit-2.10.30-150400.3.85.1 * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.85.1 * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.85.1 * libgimpui-2_0-0-64bit-2.10.30-150400.3.85.1 * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.85.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-debugsource-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * gimp-debugsource-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * gimp-plugin-aa-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.85.1 ## References: * https://www.suse.com/security/cve/CVE-2026-106061.html * https://www.suse.com/security/cve/CVE-2026-106062.html * https://www.suse.com/security/cve/CVE-2026-106063.html * https://www.suse.com/security/cve/CVE-2026-82328.html * https://www.suse.com/security/cve/CVE-2026-82343.html * https://bugzilla.suse.com/show_bug.cgi?id=1277618 * https://bugzilla.suse.com/show_bug.cgi?id=1277622 * https://bugzilla.suse.com/show_bug.cgi?id=1284473 * https://bugzilla.suse.com/show_bug.cgi?id=1284474 * https://bugzilla.suse.com/show_bug.cgi?id=1284475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:51 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:31:51 -0000 Subject: SUSE-SU-2026:4893-1: important: Security update for emacs Message-ID: <179277311182.12145.4013199873598963886@c9d35c2308c0> # Security update for emacs Announcement ID: SUSE-SU-2026:4893-1 Release Date: 2026-10-23T10:50:20Z Rating: important References: * bsc#1275927 * bsc#1284345 * bsc#1284990 Cross-References: * CVE-2026-108976 * CVE-2026-79992 CVSS scores: * CVE-2026-108976 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-108976 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-108976 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79992 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79992 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for emacs fixes the following issues: * CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). * CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#1284990). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4893 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4893 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4893 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4893 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4893 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4893 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4893 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4893 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4893 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4893 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4893 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4893 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4893 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * Basesystem Module 15-SP7 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2026-108976.html * https://www.suse.com/security/cve/CVE-2026-79992.html * https://bugzilla.suse.com/show_bug.cgi?id=1275927 * https://bugzilla.suse.com/show_bug.cgi?id=1284345 * https://bugzilla.suse.com/show_bug.cgi?id=1284990 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:59 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:31:59 -0000 Subject: SUSE-SU-2026:4891-1: important: Security update for aws-iam-authenticator Message-ID: <179277311952.12145.16551479714597423261@c9d35c2308c0> # Security update for aws-iam-authenticator Announcement ID: SUSE-SU-2026:4891-1 Release Date: 2026-10-23T10:47:07Z Rating: important References: * bsc#1272130 * bsc#1285302 Cross-References: * CVE-2026-56852 * CVE-2026-78669 CVSS scores: * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for aws-iam-authenticator fixes the following issues: * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272130). * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285302). Changes for aws-iam-authenticator: * Updated to version 0.7.22 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4891 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4891 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4891 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4891 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1272130 * https://bugzilla.suse.com/show_bug.cgi?id=1285302 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:32:05 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 16:32:05 -0000 Subject: SUSE-SU-2026:4890-1: important: Security update for cpupower Message-ID: <179277312569.12145.15541961792665247891@c9d35c2308c0> # Security update for cpupower Announcement ID: SUSE-SU-2026:4890-1 Release Date: 2026-10-23T10:46:05Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * Release to latest kernel-source including: * intel-speed-select: Harden daemon pidfile open (CVE-2026-80663 bsc#1278335) * cpupower: Fix incorrect size in cpuidle_state_disable() * cpupower: fix error return value in cpupower_write_sysfs() * cpupower: Fix a bug where the -t option of the set subcommand was not working * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4890 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libcpupower1-6.4.0-150700.9.6.2 * cpupower-debugsource-6.4.0-150700.9.6.2 * cpupower-devel-6.4.0-150700.9.6.2 * cpupower-debuginfo-6.4.0-150700.9.6.2 * cpupower-6.4.0-150700.9.6.2 * libcpupower1-debuginfo-6.4.0-150700.9.6.2 * Basesystem Module 15-SP7 (noarch) * cpupower-bash-completion-6.4.0-150700.9.6.2 * cpupower-lang-6.4.0-150700.9.6.2 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 20:30:09 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 20:30:09 -0000 Subject: SUSE-RU-2026:4900-1: moderate: Recommended update for perl-XML-Twig Message-ID: <179278740950.4061.16619841862809286932@f5dd93353bb2> # Recommended update for perl-XML-Twig Announcement ID: SUSE-RU-2026:4900-1 Release Date: 2026-10-23T14:29:55Z Rating: moderate References: * bsc#1282902 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has one fix can now be installed. ## Description: This update for perl-XML-Twig fixes the following issues: * Fix the test suite to build with expat 2.8.5 (bsc#1282902): * The test t/test_additional.t used the invalid XML declaration version="a.0". expat 2.8.5 rejects it, so the test aborted and the build failed. * Fix old typo in XML declaration ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4900 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4900 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * perl-XML-Twig-3.44-5.6.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * perl-XML-Twig-3.44-5.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1282902 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 20:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 20:30:16 -0000 Subject: SUSE-RU-2026:4899-1: moderate: Recommended update for perl-XML-Twig Message-ID: <179278741680.4061.11033255165124392892@f5dd93353bb2> # Recommended update for perl-XML-Twig Announcement ID: SUSE-RU-2026:4899-1 Release Date: 2026-10-23T14:29:37Z Rating: moderate References: * bsc#1282902 Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for perl-XML-Twig fixes the following issues: * Fix the test suite to build with expat 2.8.5 (bsc#1282902): * The test t/test_additional.t used the invalid XML declaration version="a.0". expat 2.8.5 rejects it, so the test aborted and the build failed. * Fix old typo in XML declaration ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4899 ## Package List: * Basesystem Module 15-SP7 (noarch) * perl-XML-Twig-3.52-150000.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1282902 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 20:30:21 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 23 Oct 2026 20:30:21 -0000 Subject: SUSE-RU-2026:4898-1: moderate: Recommended update for rust Message-ID: <179278742130.4061.16918938876691460499@f5dd93353bb2> # Recommended update for rust Announcement ID: SUSE-RU-2026:4898-1 Release Date: 2026-10-23T13:36:41Z Rating: moderate References: Affected Products: * Development Tools Module 15-SP7 * openSUSE Leap 15.3 * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rust fixes the following issues: Changes in rust: * Update to version 1.99.0 - for details see the rust1.99 package ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4898 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4898 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4898 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4898 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4898 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4898 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4898 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4898 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4898 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4898 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4898 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4898 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4898 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4898 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * rust-1.99.0-150300.21.109.1 * cargo-1.99.0-150300.21.109.1 * rust-src-1.99.0-150300.21.109.1 * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64) * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * openSUSE Leap 15.3 (aarch64 nosrc ppc64le s390x x86_64) * rust1.99-1.99.0-150300.7.4.1 * openSUSE Leap 15.3 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * openSUSE Leap 15.3 (nosrc) * rust1.99-test-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cargo-1.99.0-150400.24.91.1 * rust-1.99.0-150400.24.91.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cargo-1.99.0-150400.24.91.1 * rust-1.99.0-150400.24.91.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cargo-1.99.0-150400.24.91.1 * rust-1.99.0-150400.24.91.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rust-src-1.99.0-150400.24.91.1 * cargo-1.99.0-150400.24.91.1 * rust-1.99.0-150400.24.91.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * cargo-1.99.0-150500.27.84.1 * rust-1.99.0-150500.27.84.1 * rust-src-1.99.0-150500.27.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cargo-1.99.0-150400.24.91.1 * rust-1.99.0-150400.24.91.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * Development Tools Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * rust1.99-1.99.0-150300.7.4.1 * Development Tools Module 15-SP7 (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * rust1.99-src-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cargo-1.99.0-150500.27.84.1 * cargo1.99-debuginfo-1.99.0-150300.7.4.1 * rust1.99-debuginfo-1.99.0-150300.7.4.1 * cargo1.99-1.99.0-150300.7.4.1 * rust-1.99.0-150500.27.84.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * rust1.99-1.99.0-150300.7.4.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * rust1.99-src-1.99.0-150300.7.4.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:04 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:30:04 -0000 Subject: SUSE-SU-2026:4903-1: important: Security update for cosign Message-ID: <179300340435.6825.10611468222871770608@3c67540d6a94> # Security update for cosign Announcement ID: SUSE-SU-2026:4903-1 Release Date: 2026-10-25T14:05:55Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for cosign rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4903 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4903 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4903 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4903 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4903 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4903 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4903 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4903 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4903 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4903 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4903 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4903 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * openSUSE Leap 15.4 (noarch) * cosign-zsh-completion-3.1.3-150400.3.59.1 * cosign-fish-completion-3.1.3-150400.3.59.1 * cosign-bash-completion-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cosign-3.1.3-150400.3.59.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * Basesystem Module 15-SP7 (noarch) * cosign-zsh-completion-3.1.3-150400.3.59.1 * cosign-bash-completion-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:22 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:30:22 -0000 Subject: SUSE-SU-2026:24357-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300342263.6825.17376639158497952407@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24357-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-718 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-42-rt-9-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:36 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:30:36 -0000 Subject: SUSE-SU-2026:24356-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300343691.6825.7000254439069506742@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24356-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-717 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-8-1.2 * kernel-livepatch-6_4_0-45-rt-8-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-8-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:30:47 -0000 Subject: SUSE-SU-2026:24355-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300344788.6825.2886794675353177055@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24355-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-716 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-46-rt-8-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:30:59 -0000 Subject: SUSE-SU-2026:24354-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300345903.6825.1446538079148017226@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24354-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-715 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:10 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:31:10 -0000 Subject: SUSE-SU-2026:24353-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300347015.6825.5704576736359159864@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24353-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-714 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-43-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-8-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:20 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:31:20 -0000 Subject: SUSE-SU-2026:24352-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300348068.6825.2914231413035331078@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24352-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-713 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-47-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:31 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:31:31 -0000 Subject: SUSE-SU-2026:24351-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300349127.6825.9392061473904528386@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24351-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-712 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:40 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:31:40 -0000 Subject: SUSE-SU-2026:24350-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300350099.6825.12436435614739310880@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24350-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-711 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-49-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:50 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:31:50 -0000 Subject: SUSE-SU-2026:24349-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300351047.6825.13115742951172501561@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24349-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-710 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-rt-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:01 -0000 Subject: SUSE-SU-2026:24348-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300352143.6825.2686054274641980257@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24348-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-693 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-36-rt-18-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-18-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:13 -0000 Subject: SUSE-SU-2026:24347-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300353311.6825.13455458190423440697@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24347-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-692 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-37-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-37-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:23 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:23 -0000 Subject: SUSE-SU-2026:24346-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300354350.6825.12193491765971674609@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24346-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-691 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-38-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:34 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:34 -0000 Subject: SUSE-SU-2026:24345-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300355437.6825.9739059890750444918@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24345-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-690 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-39-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-39-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:45 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:45 -0000 Subject: SUSE-SU-2026:24344-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300356523.6825.7203017329968473651@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24344-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-700 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-45-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:56 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:32:56 -0000 Subject: SUSE-SU-2026:24343-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300357622.6825.318362726856945879@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24343-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-689 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-40-rt-12-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:07 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:07 -0000 Subject: SUSE-SU-2026:24342-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300358730.6825.14347980959726313612@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24342-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-699 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-46-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:18 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:18 -0000 Subject: SUSE-SU-2026:24341-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300359825.6825.8613191161798989112@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24341-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-698 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:30 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:30 -0000 Subject: SUSE-SU-2026:24340-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300361021.6825.515181931965784494@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24340-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-697 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-default-6-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:39 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:39 -0000 Subject: SUSE-SU-2026:24339-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300361984.6825.16827466543764299135@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24339-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-695 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-5-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:49 -0000 Subject: SUSE-SU-2026:24338-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300362950.6825.1430632346448591263@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24338-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-696 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-default-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:56 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:33:56 -0000 Subject: SUSE-SU-2026:24337-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300363637.6825.2084597452270408272@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24337-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-694 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-4-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:03 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:03 -0000 Subject: SUSE-SU-2026:24336-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300364336.6825.14926494700342397592@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24336-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-688 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-51-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-4-1.1 * kernel-livepatch-6_4_0-51-rt-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:14 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:14 -0000 Subject: SUSE-SU-2026:24335-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300365415.6825.2252498469111218686@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24335-1 Release Date: 2026-10-19T12:02:24Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-709 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-18-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-18-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:25 -0000 Subject: SUSE-SU-2026:24334-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300366534.6825.3647383667615346088@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24334-1 Release Date: 2026-10-19T12:02:24Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-708 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-16-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-16-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-16-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:37 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:37 -0000 Subject: SUSE-SU-2026:24333-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300367747.6825.7300350188464053001@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24333-1 Release Date: 2026-10-19T12:02:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-707 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-14-1.2 * kernel-livepatch-6_4_0-38-default-14-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-14-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:48 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:48 -0000 Subject: SUSE-SU-2026:24332-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300368822.6825.5224620723728855994@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24332-1 Release Date: 2026-10-19T12:02:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-706 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-39-default-13-1.1 * kernel-livepatch-MICRO-6-0_Update_16-debugsource-13-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:34:59 -0000 Subject: SUSE-SU-2026:24331-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300369924.6825.17405231213384193369@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24331-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-705 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_17-debugsource-12-1.1 * kernel-livepatch-6_4_0-40-default-12-1.1 * kernel-livepatch-6_4_0-40-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:09 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:35:09 -0000 Subject: SUSE-SU-2026:24330-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300370957.6825.3205795433145762172@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24330-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-704 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:35:21 -0000 Subject: SUSE-SU-2026:24329-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300372164.6825.5058480343104038800@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24329-1 Release Date: 2026-10-19T12:02:01Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-703 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_19-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-default-9-1.1 * kernel-livepatch-6_4_0-42-default-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:32 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:35:32 -0000 Subject: SUSE-SU-2026:24328-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300373248.6825.3531323184749752550@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24328-1 Release Date: 2026-10-19T12:02:01Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-702 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-43-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:43 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:35:43 -0000 Subject: SUSE-SU-2026:24327-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300374355.6825.4279191017687197955@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24327-1 Release Date: 2026-10-19T12:01:54Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-701 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-44-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:53 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:35:53 -0000 Subject: SUSE-SU-2026:24326-1: important: Security update for glibc Message-ID: <179300375312.6825.9274433304646285853@3c67540d6a94> # Security update for glibc Announcement ID: SUSE-SU-2026:24326-1 Release Date: 2026-10-19T08:29:48Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-936 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * glibc-locale-base-2.38-159998.1.1 * glibc-locale-base-debuginfo-2.38-159998.1.1 * glibc-2.38-159998.1.1 * glibc-devel-2.38-159998.1.1 * glibc-locale-2.38-159998.1.1 * glibc-debuginfo-2.38-159998.1.1 * glibc-devel-debuginfo-2.38-159998.1.1 * glibc-debugsource-2.38-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:06 -0000 Subject: SUSE-SU-2026:24325-1: important: Security update for python311 Message-ID: <179300376631.6825.14837461060821135666@3c67540d6a94> # Security update for python311 Announcement ID: SUSE-SU-2026:24325-1 Release Date: 2026-10-19T08:20:50Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-938 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libpython3_11-1_0-debuginfo-3.11.17-159998.1.1 * python311-core-debugsource-3.11.17-159998.1.1 * python311-base-debuginfo-3.11.17-159998.1.1 * libpython3_11-1_0-3.11.17-159998.1.1 * python311-curses-debuginfo-3.11.17-159998.1.1 * python311-base-3.11.17-159998.1.1 * python311-3.11.17-159998.1.1 * python311-debugsource-3.11.17-159998.1.1 * python311-debuginfo-3.11.17-159998.1.1 * python311-curses-3.11.17-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:11 -0000 Subject: SUSE-RU-2026:24324-1: moderate: Recommended update for python-gcemetadata Message-ID: <179300377188.6825.1079715093109027521@3c67540d6a94> # Recommended update for python-gcemetadata Announcement ID: SUSE-RU-2026:24324-1 Release Date: 2026-10-19T08:02:56Z Rating: moderate References: * bsc#1261908 Affected Products: * SUSE Linux Micro 6.0 An update that has one fix can now be installed. ## Description: This update for python-gcemetadata fixes the following issues: Changes in python-gcemetadata: * Update to version 1.1.2: * Fix: openQA publiccloud test fails to boot during instance creation waiting for guestregister.service (bsc#1261908): * Avoid connection attempt to black hole * Handle IPv6 and IPv4 access to the metadata server giving IPv6 preference ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-937 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python-gcemetadata-1.1.2-159998.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261908 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:42 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:42 -0000 Subject: SUSE-SU-2026:24323-1: important: Security update for expat Message-ID: <179300380211.6825.15103782143175869290@3c67540d6a94> # Security update for expat Announcement ID: SUSE-SU-2026:24323-1 Release Date: 2026-10-17T13:48:59Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-935 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-159998.1.1 * libexpat1-2.8.5-159998.1.1 * expat-debugsource-2.8.5-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:48 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:48 -0000 Subject: SUSE-RU-2026:24322-1: moderate: Recommended update for zypper, libzypp, libsolv, zypp-plugin Message-ID: <179300380831.6825.941907835159735736@3c67540d6a94> # Recommended update for zypper, libzypp, libsolv, zypp-plugin Announcement ID: SUSE-RU-2026:24322-1 Release Date: 2026-10-14T13:35:47Z Rating: moderate References: * bsc#1279541 Affected Products: * SUSE Linux Micro 6.0 An update that has one fix can now be installed. ## Description: This update for zypper, libzypp, libsolv, zypp-plugin fixes the following issues: Changes in libzypp: * Update to version 17.38.16: * BuildRequires: %{libsolv_devel_package} greater than or equal to 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. Changes in libsolv: * Update to version 0.7.39: * Improve SUSE product link dependency generation if there are multiple release packages for the same product (bsc#1279541) * Fix possible segfault in the SUSE namespace dependency generation Changes in zypp-plugin: * Update to version 0.6.6: * Fix link to libzypp plugins documentation: https://opensuse.github.io/libzypp/zypp-plugins.html * Update to version 0.6.5: * Build package for multiple Python flavors on the SLE15 family ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-932 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libsolv-tools-debuginfo-0.7.40-159998.1.1 * libsolv-tools-base-0.7.40-159998.1.1 * libzypp-debuginfo-17.38.16-159998.1.1 * libzypp-debugsource-17.38.16-159998.1.1 * zypper-debuginfo-1.14.101-159998.1.1 * zypper-debugsource-1.14.101-159998.1.1 * libsolv-debugsource-0.7.40-159998.1.1 * libzypp-17.38.16-159998.1.1 * libsolv-tools-base-debuginfo-0.7.40-159998.1.1 * libsolv-tools-0.7.40-159998.1.1 * zypper-1.14.101-159998.1.1 * SUSE Linux Micro 6.0 (noarch) * zypper-needs-restarting-1.14.101-159998.1.1 * python311-zypp-plugin-0.6.6-159998.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279541 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:54 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:54 -0000 Subject: SUSE-RU-2026:24321-1: moderate: Recommended update for ca-certificates-mozilla Message-ID: <179300381410.6825.7776487205555838056@3c67540d6a94> # Recommended update for ca-certificates-mozilla Announcement ID: SUSE-RU-2026:24321-1 Release Date: 2026-10-14T12:24:07Z Rating: moderate References: * bsc#1279961 Affected Products: * SUSE Linux Micro 6.0 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Changes in ca-certificates-mozilla: * Updated to 2.90 state (bsc#1279961): * Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority * Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-934 ## Package List: * SUSE Linux Micro 6.0 (noarch) * ca-certificates-mozilla-2.90-159998.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:59 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:36:59 -0000 Subject: SUSE-SU-2026:24320-1: important: Security update for rpcbind Message-ID: <179300381976.6825.10222278059200615637@3c67540d6a94> # Security update for rpcbind Announcement ID: SUSE-SU-2026:24320-1 Release Date: 2026-10-14T12:18:00Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-933 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * rpcbind-debuginfo-1.2.9-159998.1.1 * rpcbind-1.2.9-159998.1.1 * rpcbind-debugsource-1.2.9-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:37:04 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:37:04 -0000 Subject: SUSE-RU-2026:24319-1: important: Recommended update for scap-security-guide Message-ID: <179300382444.6825.6129345804028955084@3c67540d6a94> # Recommended update for scap-security-guide Announcement ID: SUSE-RU-2026:24319-1 Release Date: 2026-10-13T09:54:35Z Rating: important References: * jsc#ECO-3319 Affected Products: * SUSE Linux Micro 6.0 An update that contains one feature can now be installed. ## Description: This update for scap-security-guide fixes the following issues: Changes in scap-security-guide: * updated to version 0.1.82 (jsc#ECO-3319): * Add KylinSecServer6 OS baseline support * Add new product for Ubuntu 26.04 and a default profile * Create RHEL 10 STIG control file * Debian13 20260702 * Various updates for SLE 12/15/16 * Various updates for SLEM 5/6 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-931 ## Package List: * SUSE Linux Micro 6.0 (noarch) * scap-security-guide-0.1.82-159998.1.1 ## References: * https://jira.suse.com/browse/ECO-3319 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:37:20 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:37:20 -0000 Subject: SUSE-SU-2026:24318-1: important: Security update for docker Message-ID: <179300384057.6825.3362061761468034887@3c67540d6a94> # Security update for docker Announcement ID: SUSE-SU-2026:24318-1 Release Date: 2026-10-13T09:29:42Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266625 * bsc#1267827 * bsc#1278193 Cross-References: * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities and has three fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-930 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * docker-buildx-0.36.1-159998.1.1 * docker-29.7.2_ce-159998.1.1 * docker-debuginfo-29.7.2_ce-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:37:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:37:25 -0000 Subject: SUSE-RU-2026:24317-1: important: Recommended update for the initial kernel livepatch Message-ID: <179300384523.6825.10771382666539348273@3c67540d6a94> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24317-1 Release Date: 2026-10-12T15:22:34Z Rating: important References: Affected Products: * SUSE Linux Micro 6.0 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-687 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-159998_53-rt-1-159998.1.1 * kernel-livepatch-MICRO-6-0-RT_Update_30-debugsource-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-rt-debuginfo-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:48:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:48:06 -0000 Subject: SUSE-SU-2026:24316-1: important: Security update for the Linux Kernel Message-ID: <179300448672.6825.1123450008844341335@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24316-1 Release Date: 2026-10-12T15:10:35Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 479 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-686 ## Package List: * SUSE Linux Micro 6.0 (noarch) * kernel-devel-rt-6.4.0-159998.53.1 * kernel-source-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-livepatch-6.4.0-159998.53.1 * kernel-rt-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:59:05 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:59:05 -0000 Subject: SUSE-SU-2026:24315-1: important: Security update for the Linux Kernel Message-ID: <179300514547.6825.8036256489493739588@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24315-1 Release Date: 2026-10-12T14:49:37Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 479 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-684 * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-686 ## Package List: * SUSE Linux Micro 6.0 (aarch64 nosrc s390x x86_64) * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-default-base-6.4.0-159998.53.1.159998.21.37 * kernel-kvmsmall-debuginfo-6.4.0-159998.53.1 * kernel-kvmsmall-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * kernel-default-debugsource-6.4.0-159998.53.1 * kernel-default-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (noarch) * kernel-devel-6.4.0-159998.53.1 * kernel-source-6.4.0-159998.53.1 * kernel-macros-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (aarch64) * kernel-default-base-6.4.0-159998.53.1.159998.21.38 * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-devel-6.4.0-159998.53.1 * kernel-rt-devel-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:59:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 08:59:13 -0000 Subject: SUSE-RU-2026:24314-1: important: Recommended update for the initial kernel livepatch Message-ID: <179300515352.6825.11900752431209834806@3c67540d6a94> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24314-1 Release Date: 2026-10-12T14:45:36Z Rating: important References: Affected Products: * SUSE Linux Micro 6.0 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-685 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-159998_53-default-debuginfo-1-159998.1.1 * kernel-livepatch-MICRO-6-0_Update_30-debugsource-1-159998.1.1 * kernel-livepatch-6_4_0-159998_53-default-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:10:34 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:10:34 -0000 Subject: SUSE-SU-2026:24314-1: important: Security update for the Linux Kernel Message-ID: <179300583400.6825.17824899317519970884@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24314-1 Release Date: 2026-10-12T16:13:17Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 473 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-684 ## Package List: * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-64kb-6.4.0-159998.53.1 * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (aarch64) * kernel-64kb-debugsource-6.4.0-159998.53.1 * kernel-64kb-devel-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * kernel-obs-build-6.4.0-159998.53.1 * kernel-obs-build-debugsource-6.4.0-159998.53.1 * kernel-syms-6.4.0-159998.53.1 * kernel-default-devel-6.4.0-159998.53.1 * kernel-default-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:10:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:10:49 -0000 Subject: SUSE-SU-2026:24313-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300584964.6825.12470867121538073103@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24313-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-718 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-42-rt-9-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:00 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:00 -0000 Subject: SUSE-SU-2026:24312-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300586048.6825.14337575308874460033@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24312-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-717 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-8-1.2 * kernel-livepatch-6_4_0-45-rt-8-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-8-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:11 -0000 Subject: SUSE-SU-2026:24311-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300587112.6825.5984318943045070830@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24311-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-716 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-46-rt-8-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:22 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:22 -0000 Subject: SUSE-SU-2026:24310-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300588217.6825.6163774959729900097@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24310-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-715 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:33 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:33 -0000 Subject: SUSE-SU-2026:24309-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300589348.6825.5944362842968633749@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24309-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-714 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-43-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-8-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:44 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:44 -0000 Subject: SUSE-SU-2026:24308-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300590466.6825.4456056223246556970@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24308-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-713 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-47-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:55 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:11:55 -0000 Subject: SUSE-SU-2026:24307-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300591567.6825.15122458672161749795@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24307-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-712 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:05 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:12:05 -0000 Subject: SUSE-SU-2026:24306-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300592556.6825.16583730067630884869@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24306-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-711 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-49-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:15 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:12:15 -0000 Subject: SUSE-SU-2026:24305-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300593552.6825.14057437696355905822@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24305-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-710 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-rt-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:12:27 -0000 Subject: SUSE-SU-2026:24304-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300594702.6825.9510442696730616879@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24304-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-693 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-36-rt-18-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-18-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:38 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:12:38 -0000 Subject: SUSE-SU-2026:24303-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300595830.6825.14316533340564307576@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24303-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-692 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-37-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-37-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:12:49 -0000 Subject: SUSE-SU-2026:24302-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300596936.6825.12924860967719079399@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24302-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-691 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-38-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:13:01 -0000 Subject: SUSE-SU-2026:24301-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300598163.6825.12636167054975949221@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24301-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-690 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-39-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-39-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:14 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:13:14 -0000 Subject: SUSE-SU-2026:24300-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300599407.6825.9332600769803958525@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24300-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-689 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-40-rt-12-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:27 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:13:27 -0000 Subject: SUSE-SU-2026:24299-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300600736.6825.9834578472163684872@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24299-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-688 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-51-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-4-1.1 * kernel-livepatch-6_4_0-51-rt-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:38 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:13:38 -0000 Subject: SUSE-SU-2026:24298-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300601859.6825.17687752029704025039@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24298-1 Release Date: 2026-10-19T12:05:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-700 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-45-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:13:49 -0000 Subject: SUSE-SU-2026:24297-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300602959.6825.2477284630869530017@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24297-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-698 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:01 -0000 Subject: SUSE-SU-2026:24296-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300604133.6825.10693702664656004926@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24296-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-699 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-46-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:11 -0000 Subject: SUSE-SU-2026:24295-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300605153.6825.2613078423035241369@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24295-1 Release Date: 2026-10-19T12:04:32Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-696 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-default-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:21 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:21 -0000 Subject: SUSE-SU-2026:24294-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300606147.6825.3133913122084119053@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24294-1 Release Date: 2026-10-19T12:04:08Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-695 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-5-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:33 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:33 -0000 Subject: SUSE-SU-2026:24293-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300607300.6825.700512945378342111@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24293-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-697 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-default-6-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:40 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:40 -0000 Subject: SUSE-SU-2026:24292-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300608000.6825.358062093824988430@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24292-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-694 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-4-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:50 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:14:50 -0000 Subject: SUSE-SU-2026:24291-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300609071.6825.8952971838228322410@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24291-1 Release Date: 2026-10-19T12:02:22Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-709 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-18-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-18-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:15:01 -0000 Subject: SUSE-SU-2026:24290-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300610195.6825.10666630624051369641@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24290-1 Release Date: 2026-10-19T12:02:22Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-708 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-16-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-16-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-16-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:15:13 -0000 Subject: SUSE-SU-2026:24289-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300611337.6825.13180143682619990821@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24289-1 Release Date: 2026-10-19T12:02:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-707 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-14-1.2 * kernel-livepatch-6_4_0-38-default-14-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-14-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:25 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:15:25 -0000 Subject: SUSE-SU-2026:24288-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300612577.6825.7532410128980370483@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24288-1 Release Date: 2026-10-19T12:02:17Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-706 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-39-default-13-1.1 * kernel-livepatch-MICRO-6-0_Update_16-debugsource-13-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:37 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:15:37 -0000 Subject: SUSE-SU-2026:24287-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300613754.6825.710381825503551158@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24287-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-705 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_17-debugsource-12-1.1 * kernel-livepatch-6_4_0-40-default-12-1.1 * kernel-livepatch-6_4_0-40-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:15:49 -0000 Subject: SUSE-SU-2026:24286-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300614945.6825.2492608893380666861@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24286-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-704 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:16:01 -0000 Subject: SUSE-SU-2026:24285-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300616178.6825.17630803483904160901@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24285-1 Release Date: 2026-10-19T12:02:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-703 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_19-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-default-9-1.1 * kernel-livepatch-6_4_0-42-default-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:13 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:16:13 -0000 Subject: SUSE-SU-2026:24284-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300617358.6825.10700692682862066262@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24284-1 Release Date: 2026-10-19T12:02:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-702 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-43-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:26 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:16:26 -0000 Subject: SUSE-SU-2026:24283-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300618618.6825.12306309117218336259@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24283-1 Release Date: 2026-10-19T12:01:52Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-701 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-44-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:57 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:16:57 -0000 Subject: SUSE-SU-2026:24282-1: important: Security update for helm Message-ID: <179300621724.6825.13425074903007457154@3c67540d6a94> # Security update for helm Announcement ID: SUSE-SU-2026:24282-1 Release Date: 2026-10-19T09:48:48Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-63209 * CVE-2026-78662 * CVE-2026-81870 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). Changes for helm: * update to 4.3.0: * feat: Add duration functions * feat(engine): add debug logging when lookup returns empty * feat: add ownership verification before deleting resources * feat: honor SOURCE_DATE_EPOCH for chart archives * feat(rollback): add --description flag to provide rollback reason * fix (internal/plugin): remove zero-width spaces from plugin name comment * fix(loader): do not drop values files ending at a 4096-byte boundary * fix(chart): normalize StampModTimes timestamp to UTC/truncate * Chart.lock reproducibility test * fix(provenance): support GnuPG keybox (pubring.kbx) keyrings * fix(template): regression - route registry messages to stderr in template and show * refactor: lower resync period from one hour to 3 minutes * perf: enable concurrent status computation to prevent multi-minute delays * fix: Improve error reporting for helm template --debug with \--show-only- #31185 * fix: fetch logs from all containers in test pods- #32099 * fix(provenance): check error return in Digest and encodeRelease- #32136 * fix panic on repeated IsReachable calls- #32184 * fix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 * Fix missing conflict retry with server-side apply- #32088 * Properly format the extra field in gzipped packages- #31884 * Fix vanishing empty lines- #32327 * fix: pass registry client to downloader.Manager in upgrade- #32400 * chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- #32450 * fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 * chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7f (Terry Howe) * bump golang.org/x/text to v.0.40.0 * Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32214 * Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #31925 * Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #32056 * Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #31757 * Fixed a race condition in WaitForDelete where the status failures when running a full test suite #32081 #32153 * Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller- runtime 0.24.1 and k8s 1.36.1 #32128 * Dependency updates * Bump to version v4.2 0646808 (George Jenkins) * build: Clean up Goreleaser change (#32098) e23bf3a (Scott Rigby) * fix: add -extldflags -static to dist target to match build-cross f60ab7c (Terry Howe) * build: use goreleaser build with manual archive creation 64aa46f (Terry Howe) * chore: remove build-cross dependency from test-acceptance d199a1a (Terry Howe) * ci: add fetch-depth 0 to canary checkout for goreleaser 8289940 * fix: address goreleaser build issues flagged in review c075022 (Terry Howe) * fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd (Terry Howe) * fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce (Terry Howe) * fix: use index for optional env var in version_template e49a1dc * fix: canary build file names eaa0910 (Terry Howe) * Fix archive name 5a75279 (Terry Howe) * fix goreleaser archive 37284a9 (Terry Howe) * add support for loong64 45336cc (Terry Howe) * fix artifact directory a9659b0 (Terry Howe) * update configuration to v2 e368f17 (Terry Howe) * remove GOTOOLCHAIN e7bea85 (Terry Howe) * chore: replace mitchellh/gox with goreleaser 075c096 (Terry Howe) * chore(deps): bump github.com/distribution/distribution/v3 12f2c41 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffd (dependabot[bot]) * chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfb (dependabot[bot]) * Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6df (Matheus Pimenta) * fix: adds topLevel permissions to improve openSSF scores 277d970 (Gagan H R) * Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7 * fix(templating): hooks conflicting with templates in post-renderers (#32049) 8f56f24 (Matheus Pimenta) * docs: fix grammar and spacing in CONTRIBUTING.md db40adb (Mohit) * chore(deps): bump the k8s-io group with 7 updates 775e794 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace3 (dependabot[bot]) * fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#31952) 265c5eb (Matheus Pimenta) * chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7d (dependabot[bot]) * Update pkg/chart/common/util/coalesce.go a8e2497 (Evans Mungai) * test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971 (Johannes Lohmer) * fix(values): do not copy chart-default nils into coalesced values 0063877 (Johannes Lohmer) * test(values): add test for subchart nil producing %!s() 6eb4ebf (Johannes Lohmer) * test(values): add tests for subchart nil value regressions 5cb4e7d (Johannes Lohmer) * chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 b5c7c80 (dependabot[bot]) * fix(templating): fix wrong YAML separator parsing for post-renderers (#31941) a27f1ad (Matheus Pimenta) * fix: add debug logging to HTTP getter for helm pull c26be60 (Cairon) * chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 953f5f0 (dependabot[bot]) * chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 10fc5f3 (dependabot[bot]) * chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 d89e7c6 (dependabot[bot]) * chore: Update release notes script for Helm v4 8a95461 (George Jenkins) * refactor(cli): share RetryingRoundTripper via pkg/kubeenv 213c869 (Sumit Solanki) * chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 bd5027a (dependabot[bot]) * fix: unnecessary-format lint issues from merge 087736b (George * fix: Plugin missing provenance bypass 586eb57 (George Jenkins) * chore(deps): bump github.com/fluxcd/cli-utils c8c5dfa * chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 998466c (dependabot[bot]) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp b0cec58 (dependabot[bot]) go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 6ebfb29 (dependabot[bot]) * test(kube): fix flaky WaitForDelete test by avoiding informer sync race a7f8443 (Terry Howe) * test(kube): fix flaky WaitForDelete timing in status wait tests 4c0d21f (Terry Howe) 08dea9c (dependabot[bot]) * Minor nit: fix import instructions to comply with canonical import paths de58531 (Anmol Virdi) 9b1ad4c (dependabot[bot]) * fix(action): return correct error variable in prepareUpgrade 8ef2d45 (Rhys McNeill) * chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 cd7cf76 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1 45ee55b (dependabot[bot]) * chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 9a06741 (dependabot[bot]) * chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0 d1e31ca * fix(kube): clarify server-side apply patch errors f257c95 (abhay1999) workflow 7025480 (Terry Howe) * refactor(cli): decouple EnvSettings from pkg/kube 64f1d0a (Sumit Solanki) * docs(registry): fix incorrect and improve clarity of comments in client.go 85bf56e (Debasish Mohanty) * refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles 1549937 (Sumit Solanki) * chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 c7a75b1 (dependabot[bot]) * chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 3a7573a (dependabot[bot]) * chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 0229da1 (dependabot[bot]) * docs(engine): fix misleading toTOML doc comment c1a5a6e (Ilya Kiselev) * feat(engine): add mustToToml template function b075f7a (Ilya * chore: fix unnecessary-format issues from revive 7edfff3 (Matthieu MOREL) * chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 37185d2 (dependabot[bot]) * chore: fix bool-compare issues from testifylint 071558d * chore: enable perfsprint linter 6249489 (Matthieu MOREL) * ignore error plugin loads (cli, getter) 47a0840 (George * chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 3d06fd1 (dependabot[bot]) * fix(kube): remove legacy import comments from test files e64d628 (Terry Howe) * pkg/kube: remove legacy import comments d7cdc9e (abhay1999) * fix: Plugin version path traversal 36dcc27 (George Jenkins) * chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 c4be7af (dependabot[bot]) * chore: fix some minor issues in the comments 259f181 (tsinglua) * fix: Chart dot-name path bug 6018499 (George Jenkins) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 74e7cf8 (dependabot[bot]) * fix: insert newline after doc separators glued to content by template trimming af94abf (Matheus Pimenta) * chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 16073b1 (dependabot[bot]) * chore: enable modernize linter (#31860) e31a078 (Matthieu MOREL) * Restored --atomic flag on install command 16573f8 (Travis Leeden) * fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 b550ce9 (Terry Howe) * fix: bump fluxcd/cli-utils to v0.37.2-flux.1 1dfa77e (Terry * Update pkg/cmd/status.go 5d40f17 (Matthieu MOREL) * chore(internal): enable perfsprint linter (#31871) d4f6193 * chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 82d9bed (dependabot[bot]) * chore(pkg): fix perfsprint linter issues part 6 dc0e3f1 * chore(pkg): enable perfsprint linter e3c74fd (Matthieu MOREL) * chore(pkg): enable perfsprint linter 1d2d63c (Matthieu MOREL) * chore(pkg): enable perfsprint linter 63f03c0 (Matthieu MOREL) * chore(pkg): enable perfsprint linter c25c988 (Matthieu MOREL) * chore(pkg): enable perfsprint linter 0fecfd0 (Matthieu MOREL) * chore(internal): enable perfsprint linter 6524162 (Matthieu * chore(pkg): enable perfsprint linter 6c2cb2f (Matthieu MOREL) * chore(internal): enable perfsprint linter 9409226 (Matthieu * Replace unneeded use of t.Fatalf with t.Fatal 36cb3a2 (Mads Jensen) * fix: enable nolinlint linter 5b6c6bb (Matthieu MOREL) * fixup strings.Cut variables b667317 (George Jenkins) * chore: Improve AGENTS.md 956c724 (George Jenkins) * chore: fixes 92b64e8 (George Jenkins) * fix: correct import comment in statuswait.go from v3 to v4 c59c140 (rohansood10) * fix: handle OCI digest algorithm prefix in chart downloader (#31601) ee01860 (Evans Mungai) * chore(deps): bump actions/stale from 10.1.1 to 10.2.0 304d25f * chore(deps): bump the k8s-io group with 7 updates 0b13436 * feat(release): add internal/release/v2 package for chart v3 support (#31709) 4a91f3a (Evans Mungai) 7823853 (dependabot[bot]) aec7ace (dependabot[bot]) a23b638 (dependabot[bot]) 5cddc95 (dependabot[bot]) * chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 2e266c3 (dependabot[bot]) * fix(pkg): errorlint linter 259f76a (Matthieu MOREL) * fix(internal): errorlint linter 0254182 (Matthieu MOREL) * fix(pkg): errorlint linter 6d1490e (Matthieu MOREL) * fix(pkg): errorlint linter 4d0ae7f (Matthieu MOREL) * fix(internal): errorlint linter abecafa (Matthieu MOREL) * fix(pkg): errorlint linter 4330bde (Matthieu MOREL) * fix(pkg): errorlint linter c8989d9 (Matthieu MOREL) * fix(cmd): errorlint linter edbd705 (Matthieu MOREL) * chore: new KEYS entry for George Jenkins 5638c35 (George * fix(downloader): safely handle concurrent file writes on Windows 76eb37c (Orgad Shaneh) * fix(install): check nil for restClientGetter and fix tests 9817a68 (Manuel Alonso) * feat(create): add --chart-api-version flag (when HELM_EXPERIMENTAL_CHART_V3 env var is set) (#31592) 5aac320 (Evans Mungai) * chore(pkg): fix modernize linter 0d75d86 (Matthieu MOREL) * chore(internal): fix modernize linter 859292e (Matthieu MOREL) * chore(pkg): fix modernize linter 5cc2e55 (Matthieu MOREL) * chore(pkg): fix modernize linter ba38159 (Matthieu MOREL) * chore(internal): fix modernize linter e2d184c (Matthieu MOREL) * chore(pkg): fix modernize linter 111d4e6 (Matthieu MOREL) * add image index test e8f386b (Pedro Torres) * fix pulling charts from OCI indices d983696 (Pedro Torres) 9c9c3a6 (dependabot[bot]) * Revert "Consider GroupVersionKind when matching resources" 787b61c (Matheus Pimenta) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 becf9bf (dependabot[bot]) * fix(template): deprecate unused --hide-notes and \--render-subchart-notes flags 6d5f56f (Scott Rigby) * chore(deps): bump github.com/fluxcd/cli-utils b53198e * chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 b59e533 * whitespace ec07265 (Austin Abro) * fix(copystructure): handle nil elements in slice copying e3829eb (Philipp Born) * use logger with waiter 63b40a7 (Austin Abro) * feat(kstatus): fine-grained context options for waiting b0b35f1 * Apply suggestions from code review 26e28e8 (George Jenkins) * Remove legacy sync-repo.sh script 97fd007 (Jeevan Yewale) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 5262007 (dependabot[bot]) * docs: document uninstall using cascade foreground flag e70d59d * bugfix(kstatus): do not wait forever on failed resources bbec77c (Matheus Pimenta) * Modernize Helm v3 CONTRIBUTING.md 443a2a6 (George Jenkins) * chore(defaults): server-side apply SDK defaults should always match the CLI defaults c1cc625 (Matheus Pimenta) * chore: clarify --wait flag help text 828038a (Evans Mungai) * chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 e223771 * chore(refactor): better testing and functionality for installing crd 6501ef4 (Manuel Alonso) * bugfix(storage): fix storage not getting logger from driver a8eb527 (Matheus Pimenta) da1d68a (dependabot[bot]) * fix(test): fix tests and check nil for restclient 0f949a9 (Manuel Alonso) * fix(test): merge fix correctly 561410a (Manuel Alonso Gonzalez) * Remove refactorring changes from coalesce_test.go 0298b2f * Fix import b8937ad (Evans Mungai) * Update pkg/chart/common/util/coalesce_test.go a333bba (Evans Mungai) * Fix rollback for missing resources 374aeb4 (Feruzjon Muyassarov) * fix(install): add more tests and check nil file data 00f0a48 * fix(test): no check empty resources 0357e8d (Manuel Alonso) * fix(install): check lenght and file nil, add tests 52235cc * fix(action): crd resources can be empty 268593b (Manuel Alonso) * fix: casing issue fixed 1709114 (Mujib Ahasan) * fix: error handled correctly 9486062 (Mujib Ahasan) * fix: doc string added 12e8b71 (Mujib Ahasan) * Fix lint warning 3416dd5 (Evans Mungai) * Preserve nil values in chart already 679f051 (Evans Mungai) * fix(values): preserve nil values when chart default is empty map 292fe70 (Evans Mungai) * update: test coverage added for helper function validateNameAndGenerateName 1154099 (Mujib Ahasan) * update: helper function added for the business logic 522d2fe (Mujib Ahasan) * generateName is also considered in logic 6769fb6 (Mujib Ahasan) * fxi: test concurrency download index 64bae71 (Terry Howe) * update: business logic respected for skipping object missing name b357bca (Mujib Ahasan) * fixed: --dry-run=server now respect generateName 2820ebe (Mujib Ahasan) * Make error message instructional for the case of lock file being out of date 1836c59 (Andreas Sommer) * GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install * GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory * fix: Plugin missing provenance bypass 05fa379 (George * fix: Chart dot-name path bug 4e7994d (George Jenkins) * ignore error plugin loads (cli, getter) 2581943 (George * fix: Plugin version path traversal 36c8539 (George Jenkins) scorecards workflow c61e086 (Terry Howe) * Fixed a bug where --dry-run=server was not respecting generateName #31563 * Fixed a bug where empty CRD resources caused a crash. Now it prints an error #31578 * Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #31601 * Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #31644 * Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #31776 * Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #31868 * Fixed a bug where `FailedStatus` is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #31897 * Fixed broken backwards compatibility for deprecated `--atomic` flag on install command #31901 * SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #31128 * SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #31717 * SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #31732 * SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #31852 * Fixed a bug where --dry-run=server was not respecting * Fixed a bug where empty CRD resources caused a crash. Now it * Fixed a bug where OCI references with tag+digest failed with * Fixed a bug where user-provided nil value was not preserved * Fixed a regression since Helm 3.18.0 where Pulling charts * Fixed a Helm 4 regression where gotemplate white space * Fixed a bug where FailedStatus is treated as a terminal * Fixed broken backwards compatibility for deprecated --atomic flag on install command #31901 * SDK: Fixed a Windows 'Access Deined' error if multiple * SDK: Fixed a bug where users did not receive any logs from * SDK: Fixed a bug where server-side apply defaults did not * SDK: Fixed a Go import issue when downstream tooling * Update to version 4.1.1: * fix: fine-grained context options for waiting #31735 * fix: kstatus do not wait forever on failed resources #31730 * fix: Revert "Consider GroupVersionKind when matching resources" #31772 * fix: handle nil elements in slice copying #31751 * Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #31530 * Feature: improved plugin name validation error messages and field name detection #31491 * Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #31421 * Feature: allow concurrent dependency build with atomic file write #30984 * Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #31448 * SDK feature: added a LoadArchive to common loader #31462 * SDK feature: introduced support for custom kstatus readers #31706 * Fixed bug where a plugin name could already be used by another command #31427 * Fixed bug where --server-side flag was not passed to install when using upgrade --install #31635 * Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #31613 * Fixed bug where Helm test --logs failed with hook-delete-policy "hook- failed" or "hook-succeed" #31579 * Fixed kube client logging issue #31560 * Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #31528 * Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #12564 * docs: updated helm template help text to document \--api-versions #31683 * docs: fixed documentation about default wait strategy * Update pkg/kube/statuswait.go * pkg/kube: introduce support for custom kstatus readers * chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 * fix(release): fix test compilation error * Suppress SC2154 without changing behavior * Lint sync-repo.sh with ShellCheck * chore: move Evans Mungai from triage to maintainers * Replace reflect.Ptr with reflect.Pointer * fix: typo in the function names * Add documentation for --api-versions flag in template command * Fixing failing tests for cli-tools update * chore(deps): bump github.com/fluxcd/cli-utils * Replace deprecated `NewSimpleClientset` * docs(README): add mise alternate installation documentation * enable exhaustive linter * fix: add default casess to switch statements * build: set kube version via `debug.BuildInfo` * chore(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 * doc: update based on review suggestion * test(statuswait): fix Copilot code review suggestion for goroutine in tests * test(statuswait): add more tests suggested by Copilot code review * test(statuswait): add some tests for statuswait * fix: use namespace-scoped watching to avoid cluster-wide LIST permissions * fix(doc): Update default wait strategy * Update to use slog * Fix TestCliPluginExitCode * Check plugin name is not used * Fix `TestConcurrencyDownloadIndex` typo * Use errors.Is to check for io.EOF and gzip.ErrHeader * chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 * chore: fix some comments to improve readability * feat: move TerryHowe triage to maintainers * Use latest patch release of Go in releases * fix(upgrade): pass --server-side flag to install when using upgrade --install * chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 * Run the vulnerability check on PR that change the file * Fix govulncheck in CI * Update the govulncheck.yml to run on change * Enable the sloglint linter * fix(cli): handle nil config in EnvSettings.Namespace() * fix(getter): pass settings environment variables * fixes comment in install.go * chore(deps): bump actions/stale from 10.1.0 to 10.1.1 * chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 * fixes tests after merge * fixes lint issue * updates tests after rebase from master * Add tests to action package to improve coverage * chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 * Inform we use a different golangci-lint version than the CI * Deal with golint warning with private executeShutdownFunc * Use length check for MetaDependencies instead of nil comparison * Code review * Fix linting issue * Update pkg/action/hooks.go * added check for nil shutdown * cleaned up empty line * updated comment and made defer of shutdown function return errors as before and not the possible shutdown error * added shutdown hook that is executed after the logs have been retrieved * chore: fix typo in pkg/downloader/chart_downloader.go * Bump required go version (`go.mod` version) * Use modernize to use newer Golang features. * Remove two redundant if-checks. * Fix kube client logging * chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 * chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 * chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0 * fix: prevent segmentation violation on empty yaml in multidoc * fix: prevent reporting fallback on version when none specified * fix: add missing context to debug logs * fix: preserve vendor suffixes in KubeVersion.GitVersion * chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 * fixup test * logs * fix * chore: add warning for registry login with namespace * style: linting * test: split tests between valid and invalid * test: convert tests to table drive tests * test: refactor TestMetadataLegacyValidate to be more generic * update tests * fix: Use server-side apply for object create during update * Copy adopted resource info * Refactor environment variable expansion in PrepareCommands and update tests * fix: correct LDFLAGS path for default Kubernetes version * fix: improve plugin name validation err messages early via unmarshalling * fix: Make invalid name error message more similar and move tests * fix: focus only on plugin name but give more info about what we get * Make validation error similar and explicit for both metadatas * fix: improve plugin name validation error messages * Fix syntax errors in the document * docs: Fix LFX Health Score badge URL in README.md * chore(deps): bump github.com/tetratelabs/wazero from 1.9.0 to 1.10.1 * Publish Helm v4 -> `helm-latest-version` * Adding script to download Helm v4 * refactor: use strings.Builder to improve performance * chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 * Update pkg/cmd/flags.go * Error strategy list match help * Prevent surprising failure with SDK when timeout is not set * Do not change the default waiting strategy when --wait is not set * Provide more help for SDK user when setting up WaitStrategy * Avoid confusion between `--wait` (watcher) and no --wait (hookOnly) * The default is not HookOnlyStrategy but WaitStrategy * Make wait strategy selection more obvious * Increase documentation of --wait flag * While testing SDK features for v4. I was surprised with the error: * fix: do not run release workflow on forks * Convert pkg/cmd/load_plugins.go to slog * Rename copilot-instructions.md to AGENTS.md * fix(rollback): `errors.Is` instead of string comp * fix(uninstall): supersede deployed releases * for remaining local variable case inconsistency * Properly test error messages on pull command's test * Adding a LoadArchive to common loader * for all other similar cases * chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 * chore: increase logging package test coverage * feat(repo): add --no-headers option to 'helm repo list' * chore: fix typo of public field * rename interface{} to any * test: protect unknown hook delete policies * chore: replace github.com/mitchellh/copystructure * fix: Fix Helm v4 release distribtion/get-helm-3 script * fix test * Make test scripts run without /bin/bash * Ignore duplicated URN in logs * chore: delete unused var in installer.go * fix: assign KUBECONFIG environment variable value to env.Kubeconfig * add concurrency test on write & load index file * update writing index files to writeAtomicFile * fix index concurrency * Update to version 4.0.5: * Fixed rollback error when a manifest is removed in a failed upgrade #13437 * Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command * Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #9098 * Fixed a bug where empty dependency lists were incorrectly treated as present * Fixed a bug where the watch library did not only watch namespaces associated with the objects * Fixed regression in downloader plugins environment variables #31612 * Fixed bug where --server-side flag is not respected with helm upgrade --install #31627 * For SDK users: exposed KUBECONFIG to env upgrade --install 1b6053d (Evans Mungai) 1e3ee1d (Zadkiel AHARONIAN) * fix(getter): pass settings environment variables 31bd995 (Zadkiel AHARONIAN) goroutine in tests 41a6b36 (Mohsen Mottaghi) review 2a2e6f7 (Mohsen Mottaghi) * test(statuswait): add some tests for statuswait 3818c02 (Mohsen Mottaghi) permissions 66cab24 (Mohsen Mottaghi) comparison abf2007 (Calvin Bui) 4b3de18 (Benoit Tigeot) * Code review 3212770 (Benoit Tigeot) * Fix linting issue 417aae9 (Benoit Tigeot) * Update pkg/action/hooks.go 6c838b4 (Michelle Fernandez Bieber) * added check for nil shutdown c5d87f2 (Michelle Fernandez * cleaned up empty line 53175b7 (Michelle Fernandez Bieber) errors as before and not the possible shutdown error d2df1ab (Michelle Fernandez Bieber) retrieved 5b223de (Michelle Fernandez Bieber) * Fix TestCliPluginExitCode e845b68 (tison) * Check plugin name is not used 30bfd57 (tison) * Fix rollback for missing resources 0fd2c41 (Feruzjon env.Kubeconfig b456e27 (LinPr) * fix(rollback): errors.Is instead of string comp e2021f8 * fix(uninstall): supersede deployed releases af7c153 (Hidde * Update to version 4.0.4 (4.0.3 was not released): * Bump v4.0.2 CVE deps cd700e0 (George Jenkins) * Use latest patch release of Go in releases 9db13ee (Matt * Update to version 4.0.2: * fix: prevent reporting fallback on version when none specified * fix: prevent segmentation violation on empty yaml in multidoc * Ignore duplicated URN in logs * jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 * Publish Helm v4 -> `helm-latest-version` * fix: Fix Helm v4 release distribtion/get-helm-3 script * Copy adopted resource info 12500dd (George Jenkins) * fixup test 1cf3841 (George Jenkins) * logs 32e2d08 (George Jenkins) * fix 4b6472f (George Jenkins) * fix: Use server-side apply for object create during update 9dfe3b3 (George Jenkins) * Fix kube client logging 861adc2 (Matt Farina) * update tests b2f7872 (yxxhero) * Refactor environment variable expansion in PrepareCommands and update tests 77f97a1 (yxxhero) * Fix syntax errors in the document a156195 (Fish-pro) * fix: correct LDFLAGS path for default Kubernetes version 2c0dcda (Benoit Tigeot) * New Features Helm 4 has numerous new features, but a few deserve highlighting here: * Redesigned plugin system that supports Web Assembly based plugins * Post-renderers are now plugins * Server side apply is now supported * Improved resource watching, to support waiting, based on kstatus * Local Content-based caching (e.g. for charts) * Logging via slog enabling SDK logging to integrate with modern loggers * Reproducible builds of chart archives * Updated SDK API including support for multiple chart API versions (new experimental v3 chart API version coming soon) * Compatibility with Helm v3 Helm v4 is a major version with backward incompatible changes including to the flags and output of the Helm CLI and to the SDK. Please evaluate the changes to your workflows. The changes are not as extensive as those from Helm v2 to v3, with the goal that the majority of workflows remain compatible between Helm v3 and v4. Helm charts apiVersion v2 (majority of today's charts) will continue to be supported in Helm v4. Existing charts should continue to install, upgrade, and otherwise work. Please test the installation and upgrade of charts to ensure it works as expected. Changes (e.g., server side apply) may impact the experience. * Breaking Changes * Post-renderers implemented as plugins Post-renderers are implemented as plugins. With this change, it is no longer possible to pass an executable directly to helm render --post-renderer, but a plugin name must be passed. This might require updates to existing any post-renderer workflows. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-754 ## Package List: * SUSE Linux Micro 6.1 (ppc64le s390x x86_64) * helm-4.3.0-slfo.1.1_1.1 * helm-debuginfo-4.3.0-slfo.1.1_1.1 * SUSE Linux Micro 6.1 (noarch) * helm-bash-completion-4.3.0-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:17:11 -0000 Subject: SUSE-SU-2026:24281-1: important: Security update for glibc Message-ID: <179300623156.6825.188994432422783698@3c67540d6a94> # Security update for glibc Announcement ID: SUSE-SU-2026:24281-1 Release Date: 2026-10-19T09:50:34Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-751 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * glibc-debugsource-2.38-slfo.1.1_11.1 * glibc-devel-2.38-slfo.1.1_11.1 * glibc-locale-base-2.38-slfo.1.1_11.1 * glibc-locale-base-debuginfo-2.38-slfo.1.1_11.1 * glibc-locale-2.38-slfo.1.1_11.1 * glibc-devel-debuginfo-2.38-slfo.1.1_11.1 * glibc-debuginfo-2.38-slfo.1.1_11.1 * glibc-2.38-slfo.1.1_11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:26 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:17:26 -0000 Subject: SUSE-SU-2026:24280-1: important: Security update for python311 Message-ID: <179300624696.6825.5940295263094459012@3c67540d6a94> # Security update for python311 Announcement ID: SUSE-SU-2026:24280-1 Release Date: 2026-10-19T09:44:33Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. * CVE-2026-15310: bound zipfile decompression for bzip2/LZMA (bsc#1277111, gh#python/cpython#156002) * CVE-2026-19672: in tarfile, handle a member that leaves the destination and comes back (bsc#1276227, gh#python/cpython#156000) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-750 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.17-slfo.1.1_1.1 * python311-base-3.11.17-slfo.1.1_1.1 * python311-debuginfo-3.11.17-slfo.1.1_1.1 * libpython3_11-1_0-debuginfo-3.11.17-slfo.1.1_1.1 * python311-3.11.17-slfo.1.1_1.1 * python311-core-debugsource-3.11.17-slfo.1.1_1.1 * libpython3_11-1_0-3.11.17-slfo.1.1_1.1 * python311-curses-3.11.17-slfo.1.1_1.1 * python311-base-debuginfo-3.11.17-slfo.1.1_1.1 * python311-debugsource-3.11.17-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:49 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:17:49 -0000 Subject: SUSE-SU-2026:24279-1: important: Security update for docker Message-ID: <179300626964.6825.4210925603158934129@3c67540d6a94> # Security update for docker Announcement ID: SUSE-SU-2026:24279-1 Release Date: 2026-10-19T09:19:11Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266176 * bsc#1266625 * bsc#1267827 * bsc#1268280 * bsc#1268359 * bsc#1271209 * bsc#1278193 Cross-References: * CVE-2026-31431 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities and has six fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at fixes(bsc#1268280, bsc#1268359, bsc#1271209, bsc#1266176) * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-755 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * docker-29.7.2_ce-slfo.1.1_11.1 * docker-buildx-0.36.1-slfo.1.1_11.1 * docker-debuginfo-29.7.2_ce-slfo.1.1_11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31431.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266176 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1268280 * https://bugzilla.suse.com/show_bug.cgi?id=1268359 * https://bugzilla.suse.com/show_bug.cgi?id=1271209 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:56 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:17:56 -0000 Subject: SUSE-SU-2026:24278-1: important: Security update for wpa_supplicant Message-ID: <179300627657.6825.12868841832669587316@3c67540d6a94> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24278-1 Release Date: 2026-10-19T09:14:25Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-753 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debuginfo-2.11-slfo.1.1_3.1 * wpa_supplicant-debugsource-2.11-slfo.1.1_3.1 * wpa_supplicant-2.11-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:04 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:18:04 -0000 Subject: SUSE-SU-2026:24277-1: important: Security update for google-osconfig-agent Message-ID: <179300628454.6825.2736517391294888637@3c67540d6a94> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24277-1 Release Date: 2026-10-19T09:13:25Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-752 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-debuginfo-20260928.01-slfo.1.1_1.1 * google-osconfig-agent-20260928.01-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:11 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:18:11 -0000 Subject: SUSE-RU-2026:24276-1: important: Recommended update for python-gcemetadata Message-ID: <179300629194.6825.3506042594829243989@3c67540d6a94> # Recommended update for python-gcemetadata Announcement ID: SUSE-RU-2026:24276-1 Release Date: 2026-10-19T09:11:24Z Rating: important References: * bsc#1261908 Affected Products: * SUSE Linux Micro 6.1 An update that has one fix can now be installed. ## Description: This update for python-gcemetadata fixes the following issues: Changes in python-gcemetadata: * Update to version 1.1.2: * Fix: openQA publiccloud test fails to boot during instance creation waiting for guestregister.service (bsc#1261908): * Avoid connection attempt to black hole * Handle IPv6 and IPv4 access to the metadata server giving IPv6 preference ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-748 ## Package List: * SUSE Linux Micro 6.1 (noarch) * python-gcemetadata-1.1.2-slfo.1.1_1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261908 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:18 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:18:18 -0000 Subject: SUSE-SU-2026:24275-1: important: Security update for rpcbind Message-ID: <179300629862.6825.10379942621755952234@3c67540d6a94> # Security update for rpcbind Announcement ID: SUSE-SU-2026:24275-1 Release Date: 2026-10-19T09:11:24Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-747 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-slfo.1.1_3.1 * rpcbind-debugsource-1.2.9-slfo.1.1_3.1 * rpcbind-debuginfo-1.2.9-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:28 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:18:28 -0000 Subject: SUSE-RU-2026:24274-1: important: Recommended update for google-guest-configs Message-ID: <179300630865.6825.18366551980606609443@3c67540d6a94> # Recommended update for google-guest-configs Announcement ID: SUSE-RU-2026:24274-1 Release Date: 2026-10-19T09:11:03Z Rating: important References: * bsc#1254266 * bsc#1273385 * bsc#1281946 Affected Products: * SUSE Linux Micro 6.1 An update that has three fixes can now be installed. ## Description: This update for google-guest-configs fixes the following issues: Changes in google-guest-configs: * Update to version 20260918.01 (bsc#1281946): * Update SR-IOV udev rule for idpf network devices. * from version 20260916.00: * nic-naming: Fix IDPF VF device rename * from version 20260915.00: * Remove build.sh file * from version 20260914.00: * set_multiqueue: stop setting XPS at all on a4x/a5x * from version 20260911.00: * No public description * from version 20260910.00: * set_multiqueue: fix awk parsing for idpf ring len * from version 20260819.00: * set_multiqueue: Set IDPF ring length to 4096 by default * from version 20260804.00: * nic-naming: improve handling of BM IRDMA devices * Update to version 20260729.00 (bsc#1273385): * set_multiqueue: extend x4-specific configs to future x series * Update to version 20260707.00: * add nic naming support for CX-9 with VR200 * from version 20260623.00: * Avoid eval in google-dhclient-script * from version 20260617.00: * Enable SR-IOV for specific Intel PCI devices. * from version 20260521.00: * Set max queue count for IDPF devices; remove broken virtio logic * Update to version 20260428.00: * gce-nic-naming: optimize runtime performance * from version 20260401.00 * set_multiqueue: Consider c4n a "multinic accelerator" * Update to version 20260306.00: * gce-nic-naming: fix divide-by-zero error * from version 20260305.00: * set_multiqueue: detect IRDMA devices using their `infiniband/` directory * from version 20260303.00: * set_multiqueue: Special tunes for x4 machine family * from version 20260223.00: * gce-nic-naming: restore fallback to hardcoded `ip` paths * from version 20260121.00: * set_multiqueue: set a4x-max ring len before irq affinity * Install NetworkManager disptacher for SLE 16 and newer only * Add NetworkManager-devel to BuildRequires * Install NetworkManager dispatcher script (bsc#1254266) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-746 ## Package List: * SUSE Linux Micro 6.1 (noarch) * google-guest-configs-20260918.01-slfo.1.1_1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1254266 * https://bugzilla.suse.com/show_bug.cgi?id=1273385 * https://bugzilla.suse.com/show_bug.cgi?id=1281946 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:52 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:18:52 -0000 Subject: SUSE-SU-2026:24273-1: important: Security update for openssl-3 Message-ID: <179300633265.6825.6864180086022153528@3c67540d6a94> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24273-1 Release Date: 2026-10-19T09:10:07Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 Cross-References: * CVE-2026-102010 * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves seven vulnerabilities, contains two features and has seven fixes can now be installed. ## Security update for openssl-3 ### Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Security update for gcc13 ### Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 * Update to gcc-13 branch head, 3c92f70d174a1bc9a4bfb866d, git10509 * GCC 13.5 release candidate when a PCH is used * pulls fix for haproxy build [bsc#1267998] * pulls build fixes for libcody when using a C++20 defaulting host compiler ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-757 * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-756 ## Package List: * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * gcc13-13.5.0+git10516-slfo.1.1_1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-slfo.1.1_1.1 * gcc13-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * cpp13-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * gcc13-debugsource-13.5.0+git10516-slfo.1.1_1.1 * gcc13-c++-13.5.0+git10516-slfo.1.1_1.1 * gcc13-c++-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * cpp13-13.5.0+git10516-slfo.1.1_1.1 * gcc13-PIE-13.5.0+git10516-slfo.1.1_1.1 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.1.4-slfo.1.1_14.1 * openssl-3-debugsource-3.1.4-slfo.1.1_14.1 * openssl-3-3.1.4-slfo.1.1_14.1 * libopenssl-3-fips-provider-3.1.4-slfo.1.1_14.1 * libopenssl-3-devel-3.1.4-slfo.1.1_14.1 * libopenssl3-3.1.4-slfo.1.1_14.1 * openssl-3-debuginfo-3.1.4-slfo.1.1_14.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-slfo.1.1_14.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:19:01 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:19:01 -0000 Subject: SUSE-SU-2026:4902-1: important: Security update for container-suseconnect Message-ID: <179300634115.6825.4941475601153214466@3c67540d6a94> # Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4902-1 Release Date: 2026-10-24T19:35:37Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for container-suseconnect rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4902 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4902 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4902 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4902 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4902 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4902 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4902 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4902 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4902 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4902 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4902 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:19:06 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 09:19:06 -0000 Subject: SUSE-SU-2026:4901-1: important: Security update for kubernetes Message-ID: <179300634633.6825.12409337668165041767@3c67540d6a94> # Security update for kubernetes Announcement ID: SUSE-SU-2026:4901-1 Release Date: 2026-10-24T19:34:12Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4901 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4901 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-common-1.37.0-150600.13.47.1 * kubernetes1.37-client-1.37.0-150600.13.47.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.47.1 * kubernetes1.37-client-fish-completion-1.37.0-150600.13.47.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-common-1.37.0-150600.13.47.1 * kubernetes1.37-client-1.37.0-150600.13.47.1 * Containers Module 15-SP7 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.47.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:32 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 12:30:32 -0000 Subject: SUSE-SU-2026:4909-1: important: Security update for squid Message-ID: <179301783240.6919.9330620608150298677@f5dd93353bb2> # Security update for squid Announcement ID: SUSE-SU-2026:4909-1 Release Date: 2026-10-26T07:22:13Z Rating: important References: * bsc#1216496 * bsc#1217825 * bsc#1223329 * bsc#1228150 * bsc#1252281 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2023-49288 * CVE-2023-5824 * CVE-2025-62168 * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2023-49288 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49288 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-62168 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-62168 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-62168 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-62168 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities and has two security fixes can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). * CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). * CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4909 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4909 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4909 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4909 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4909 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4909 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4909 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4909 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4909 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49288.html * https://www.suse.com/security/cve/CVE-2023-5824.html * https://www.suse.com/security/cve/CVE-2025-62168.html * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1216496 * https://bugzilla.suse.com/show_bug.cgi?id=1217825 * https://bugzilla.suse.com/show_bug.cgi?id=1223329 * https://bugzilla.suse.com/show_bug.cgi?id=1228150 * https://bugzilla.suse.com/show_bug.cgi?id=1252281 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:47 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 12:30:47 -0000 Subject: SUSE-SU-2026:4907-1: important: Security update for openssh8.4 Message-ID: <179301784707.6919.15009056756984855899@f5dd93353bb2> # Security update for openssh8.4 Announcement ID: SUSE-SU-2026:4907-1 Release Date: 2026-10-26T07:21:10Z Rating: important References: * bsc#1271044 * bsc#1271048 * bsc#1271049 * bsc#1271052 * bsc#1271053 * bsc#1271054 * bsc#1271055 Cross-References: * CVE-2026-59995 * CVE-2026-59997 * CVE-2026-59998 * CVE-2026-59999 * CVE-2026-60000 * CVE-2026-60001 * CVE-2026-60002 CVSS scores: * CVE-2026-59995 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59995 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59997 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59997 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59998 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59998 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59999 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-59999 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-60000 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-60000 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-60001 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-60001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60002 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-60002 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for openssh8.4 fixes the following issues: * CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). * CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). * CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). * CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). * CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). * CVE-2026-60001: sshd: honor the minimum authentication delay (bsc#1271054). * CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange (bsc#1271055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4907 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4907 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh8.4-clients-8.4p1-8.30.1 * openssh8.4-debugsource-8.4p1-8.30.1 * openssh8.4-server-debuginfo-8.4p1-8.30.1 * openssh8.4-clients-debuginfo-8.4p1-8.30.1 * openssh8.4-common-8.4p1-8.30.1 * openssh8.4-8.4p1-8.30.1 * openssh8.4-helpers-8.4p1-8.30.1 * openssh8.4-fips-8.4p1-8.30.1 * openssh8.4-helpers-debuginfo-8.4p1-8.30.1 * openssh8.4-common-debuginfo-8.4p1-8.30.1 * openssh8.4-server-8.4p1-8.30.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh8.4-clients-8.4p1-8.30.1 * openssh8.4-debugsource-8.4p1-8.30.1 * openssh8.4-server-debuginfo-8.4p1-8.30.1 * openssh8.4-clients-debuginfo-8.4p1-8.30.1 * openssh8.4-common-8.4p1-8.30.1 * openssh8.4-8.4p1-8.30.1 * openssh8.4-helpers-8.4p1-8.30.1 * openssh8.4-fips-8.4p1-8.30.1 * openssh8.4-helpers-debuginfo-8.4p1-8.30.1 * openssh8.4-common-debuginfo-8.4p1-8.30.1 * openssh8.4-server-8.4p1-8.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59995.html * https://www.suse.com/security/cve/CVE-2026-59997.html * https://www.suse.com/security/cve/CVE-2026-59998.html * https://www.suse.com/security/cve/CVE-2026-59999.html * https://www.suse.com/security/cve/CVE-2026-60000.html * https://www.suse.com/security/cve/CVE-2026-60001.html * https://www.suse.com/security/cve/CVE-2026-60002.html * https://bugzilla.suse.com/show_bug.cgi?id=1271044 * https://bugzilla.suse.com/show_bug.cgi?id=1271048 * https://bugzilla.suse.com/show_bug.cgi?id=1271049 * https://bugzilla.suse.com/show_bug.cgi?id=1271052 * https://bugzilla.suse.com/show_bug.cgi?id=1271053 * https://bugzilla.suse.com/show_bug.cgi?id=1271054 * https://bugzilla.suse.com/show_bug.cgi?id=1271055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:54 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 12:30:54 -0000 Subject: SUSE-SU-2026:4906-1: moderate: Security update for krb5 Message-ID: <179301785451.6919.6136677340783962597@f5dd93353bb2> # Security update for krb5 Announcement ID: SUSE-SU-2026:4906-1 Release Date: 2026-10-26T07:20:54Z Rating: moderate References: * bsc#1284816 * bsc#1284817 Cross-References: * CVE-2026-107708 * CVE-2026-107778 CVSS scores: * CVE-2026-107708 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107708 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107708 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107778 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for krb5 fixes the following issues: * CVE-2026-107708: Denial of Service via malformed PAC in S4U2Proxy requests (bsc#1284816). * CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4906 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4906 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-1.20.1-150500.3.26.1 * krb5-plugin-preauth-otp-1.20.1-150500.3.26.1 * krb5-mini-debugsource-1.20.1-150500.3.26.1 * krb5-server-debuginfo-1.20.1-150500.3.26.1 * krb5-server-1.20.1-150500.3.26.1 * krb5-debugsource-1.20.1-150500.3.26.1 * krb5-plugin-preauth-pkinit-1.20.1-150500.3.26.1 * krb5-client-debuginfo-1.20.1-150500.3.26.1 * krb5-client-1.20.1-150500.3.26.1 * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-devel-1.20.1-150500.3.26.1 * krb5-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-debuginfo-1.20.1-150500.3.26.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150500.3.26.1 * krb5-1.20.1-150500.3.26.1 * krb5-plugin-preauth-spake-1.20.1-150500.3.26.1 * krb5-plugin-preauth-spake-debuginfo-1.20.1-150500.3.26.1 * krb5-plugin-kdb-ldap-1.20.1-150500.3.26.1 * krb5-devel-1.20.1-150500.3.26.1 * openSUSE Leap 15.5 (x86_64) * krb5-32bit-1.20.1-150500.3.26.1 * krb5-devel-32bit-1.20.1-150500.3.26.1 * krb5-32bit-debuginfo-1.20.1-150500.3.26.1 * openSUSE Leap 15.5 (aarch64_ilp32) * krb5-devel-64bit-1.20.1-150500.3.26.1 * krb5-64bit-1.20.1-150500.3.26.1 * krb5-64bit-debuginfo-1.20.1-150500.3.26.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * krb5-1.20.1-150500.3.26.1 * krb5-client-1.20.1-150500.3.26.1 * krb5-debugsource-1.20.1-150500.3.26.1 * krb5-debuginfo-1.20.1-150500.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107708.html * https://www.suse.com/security/cve/CVE-2026-107778.html * https://bugzilla.suse.com/show_bug.cgi?id=1284816 * https://bugzilla.suse.com/show_bug.cgi?id=1284817 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:31:04 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 12:31:04 -0000 Subject: SUSE-SU-2026:4904-1: important: Security update for python, python-base, python-doc Message-ID: <179301786472.6919.81492447561570353@f5dd93353bb2> # Security update for python, python-base, python-doc Announcement ID: SUSE-SU-2026:4904-1 Release Date: 2026-10-26T07:20:20Z Rating: important References: * bsc#1280459 * bsc#1285433 Cross-References: * CVE-2026-82049 CVSS scores: * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python, python-base, python-doc fixes the following issue: * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4904 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4904 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python-devel-2.7.18-33.93.1 * python-base-debugsource-2.7.18-33.93.1 * python-gdbm-2.7.18-33.93.1 * python-tk-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-2.7.18-33.93.1 * python-idle-2.7.18-33.93.1 * python-demo-2.7.18-33.93.1 * python-2.7.18-33.93.1 * python-curses-2.7.18-33.93.1 * python-base-2.7.18-33.93.1 * python-debugsource-2.7.18-33.93.1 * python-debuginfo-2.7.18-33.93.1 * python-gdbm-debuginfo-2.7.18-33.93.1 * python-xml-debuginfo-2.7.18-33.93.1 * python-tk-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-2.7.18-33.93.1 * python-curses-debuginfo-2.7.18-33.93.1 * python-xml-2.7.18-33.93.1 * python-base-debuginfo-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.93.1 * python-32bit-2.7.18-33.93.1 * python-debuginfo-32bit-2.7.18-33.93.1 * libpython2_7-1_0-32bit-2.7.18-33.93.1 * python-base-debuginfo-32bit-2.7.18-33.93.1 * python-base-32bit-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * python-doc-pdf-2.7.18-33.93.1 * python-doc-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python-32bit-2.7.18-33.93.1 * python-devel-2.7.18-33.93.1 * python-base-debugsource-2.7.18-33.93.1 * python-gdbm-2.7.18-33.93.1 * python-tk-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-2.7.18-33.93.1 * python-idle-2.7.18-33.93.1 * python-demo-2.7.18-33.93.1 * python-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.93.1 * python-curses-2.7.18-33.93.1 * python-base-2.7.18-33.93.1 * python-debugsource-2.7.18-33.93.1 * python-debuginfo-2.7.18-33.93.1 * python-debuginfo-32bit-2.7.18-33.93.1 * python-gdbm-debuginfo-2.7.18-33.93.1 * python-xml-debuginfo-2.7.18-33.93.1 * python-base-debuginfo-32bit-2.7.18-33.93.1 * python-tk-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-2.7.18-33.93.1 * python-curses-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-32bit-2.7.18-33.93.1 * python-xml-2.7.18-33.93.1 * python-base-debuginfo-2.7.18-33.93.1 * python-base-32bit-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-doc-pdf-2.7.18-33.93.1 * python-doc-2.7.18-33.93.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:09 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:30:09 -0000 Subject: SUSE-SU-2026:24362-1: important: Security update for cpupower Message-ID: <179303220927.6105.10226425382167344020@c9d35c2308c0> # Security update for cpupower Announcement ID: SUSE-SU-2026:24362-1 Release Date: 2026-10-22T16:03:55Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663) * turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes) * cpupower: Reset errno before strtoull() (stable-fixes) * intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes) * cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes) * cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes) * cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes) * turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes) * turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes) * turbostat: Handle cap_get_proc() ENOSYS (stable-fixes) * turbostat: Fix build with musl (stable-fixes) * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes) * power turbostat: Fix bogus SysWatt for forked program (git-fixes) * cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1959 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1959 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cpupower-6.12.0-160000.3.1 * cpupower-bench-debuginfo-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 * cpupower-devel-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-bench-6.12.0-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * cpupower-bash-completion-6.12.0-160000.3.1 * cpupower-lang-6.12.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cpupower-6.12.0-160000.3.1 * cpupower-bench-debuginfo-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 * cpupower-devel-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-bench-6.12.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * cpupower-bash-completion-6.12.0-160000.3.1 * cpupower-lang-6.12.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:30:17 -0000 Subject: SUSE-SU-2026:24361-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179303221756.6105.9897894969330987633@c9d35c2308c0> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24361-1 Release Date: 2026-10-22T09:39:59Z Rating: moderate References: * bsc#1286261 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1958 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1958 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.92-160000.1.4 * ca-certificates-mozilla-2.92-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.92-160000.1.4 * ca-certificates-mozilla-2.92-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:30 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:30:30 -0000 Subject: SUSE-SU-2026:24360-1: important: Security update for go1.27 Message-ID: <179303223005.6105.17878739473166232770@c9d35c2308c0> # Security update for go1.27 Announcement ID: SUSE-SU-2026:24360-1 Release Date: 2026-10-21T21:25:38Z Rating: important References: * bsc#1272545 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1957 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1957 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.27-race-1.27.3-160000.1.1 * go1.27-1.27.3-160000.1.1 * go1.27-doc-1.27.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.27-race-1.27.3-160000.1.1 * go1.27-1.27.3-160000.1.1 * go1.27-doc-1.27.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:48 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:30:48 -0000 Subject: SUSE-SU-2026:24359-1: important: Security update for go1.26 Message-ID: <179303224825.6105.8836570146286005999@c9d35c2308c0> # Security update for go1.26 Announcement ID: SUSE-SU-2026:24359-1 Release Date: 2026-10-21T21:25:38Z Rating: important References: * bsc#1255111 * bsc#1284770 * bsc#1284772 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 * CVE-2026-78663 * CVE-2026-78669 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities and has two fixes can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.10 (bsc#1255111): * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1956 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1956 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.26-race-1.26.10-160000.1.1 * go1.26-1.26.10-160000.1.1 * go1.26-doc-1.26.10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.26-race-1.26.10-160000.1.1 * go1.26-1.26.10-160000.1.1 * go1.26-doc-1.26.10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:00 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:31:00 -0000 Subject: SUSE-SU-2026:4913-1: important: Security update for gcc7 Message-ID: <179303226012.6105.8622729160763101814@c9d35c2308c0> # Security update for gcc7 Announcement ID: SUSE-SU-2026:4913-1 Release Date: 2026-10-26T11:06:04Z Rating: important References: * bsc#1239566 * bsc#1267946 * bsc#1282500 * bsc#1283123 Cross-References: * CVE-2026-102010 * CVE-2026-95619 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-95619 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-95619 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities and has two security fixes can now be installed. ## Description: This update for gcc7 fixes the following issues: * CVE-2026-95619: libstdc++ integer overflow in `new` operator (bsc#1282500). * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4913 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4913 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4913 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4913 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4913 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4913 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4913 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4913 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4913 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4913 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4913 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4913 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libgfortran4-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * Basesystem Module 15-SP7 (x86_64) * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://www.suse.com/security/cve/CVE-2026-95619.html * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1267946 * https://bugzilla.suse.com/show_bug.cgi?id=1282500 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:05 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:31:05 -0000 Subject: SUSE-SU-2026:4912-1: important: Security update for kubernetes-old Message-ID: <179303226535.6105.919193095642962732@c9d35c2308c0> # Security update for kubernetes-old Announcement ID: SUSE-SU-2026:4912-1 Release Date: 2026-10-26T09:46:57Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes-old rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4912 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4912 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.46.1 * kubernetes1.35-client-1.35.8-150600.13.46.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.35-client-fish-completion-1.35.8-150600.13.46.1 * kubernetes1.35-client-bash-completion-1.35.8-150600.13.46.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.46.1 * kubernetes1.35-client-1.35.8-150600.13.46.1 * Containers Module 15-SP7 (noarch) * kubernetes1.35-client-bash-completion-1.35.8-150600.13.46.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:10 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 16:31:10 -0000 Subject: SUSE-SU-2026:4911-1: important: Security update for runc Message-ID: <179303227035.6105.18222283548683338331@c9d35c2308c0> # Security update for runc Announcement ID: SUSE-SU-2026:4911-1 Release Date: 2026-10-26T09:08:07Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for runc rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4911 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4911 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4911 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4911 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4911 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4911 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4911 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4911 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4911 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4911 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4911 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4911 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4911 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4911 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4911 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4911 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4911 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:17 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 20:32:17 -0000 Subject: SUSE-SU-2026:24364-1: important: Security update for the Linux Kernel Message-ID: <179304673744.8149.5729738115220960761@9bf698548bc1> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24364-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-719 ## Package List: * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-64kb-6.4.0-159998.54.1 * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (aarch64) * kernel-64kb-devel-6.4.0-159998.54.1 * kernel-64kb-debugsource-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * kernel-obs-build-6.4.0-159998.54.1 * kernel-syms-6.4.0-159998.54.1 * kernel-default-devel-6.4.0-159998.54.1 * kernel-obs-build-debugsource-6.4.0-159998.54.1 * kernel-default-debugsource-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:34 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 20:32:34 -0000 Subject: SUSE-SU-2026:24363-1: important: Security update for gcc13 Message-ID: <179304675429.8149.4698978762534303584@9bf698548bc1> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24363-1 Release Date: 2026-10-20T11:29:36Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1238491 * bsc#1239566 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 * jsc#PED-7395 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability, contains three features and has nine fixes can now be installed. ## Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-941 ## Package List: * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * libtsan2-13.5.0+git10516-159998.1.1 * cpp13-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-c++-debuginfo-13.5.0+git10516-159998.1.1 * libtsan2-debuginfo-13.5.0+git10516-159998.1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-159998.1.1 * libubsan1-13.5.0+git10516-159998.1.1 * gcc13-debuginfo-13.5.0+git10516-159998.1.1 * libubsan1-debuginfo-13.5.0+git10516-159998.1.1 * libitm1-debuginfo-13.5.0+git10516-159998.1.1 * liblsan0-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-PIE-13.5.0+git10516-159998.1.1 * cpp13-13.5.0+git10516-159998.1.1 * gcc13-debugsource-13.5.0+git10516-159998.1.1 * gcc13-13.5.0+git10516-159998.1.1 * libasan8-debuginfo-13.5.0+git10516-159998.1.1 * libasan8-13.5.0+git10516-159998.1.1 * libitm1-13.5.0+git10516-159998.1.1 * gcc13-c++-13.5.0+git10516-159998.1.1 * liblsan0-13.5.0+git10516-159998.1.1 * SUSE Linux Micro Extras 6.0 (aarch64 x86_64) * libhwasan0-debuginfo-13.5.0+git10516-159998.1.1 * libhwasan0-13.5.0+git10516-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1238491 * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 * https://jira.suse.com/browse/PED-7395 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:41 2026 From: null at suse.de (SLE-UPDATES) Date: Mon, 26 Oct 2026 20:32:41 -0000 Subject: SUSE-SU-2026:4915-1: important: Security update for rekor Message-ID: <179304676178.8149.4427981858031804855@9bf698548bc1> # Security update for rekor Announcement ID: SUSE-SU-2026:4915-1 Release Date: 2026-10-26T14:43:30Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rekor rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4915 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4915 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4915 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4915 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4915 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4915 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4915 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4915 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4915 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4915 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4915 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4915 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.42.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:30:04 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:30:04 -0000 Subject: SUSE-RU-2026:24384-1: important: Recommended update for the initial kernel livepatch Message-ID: <179308980470.8521.10169979903970233252@f5dd93353bb2> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24384-1 Release Date: 2026-10-21T11:04:28Z Rating: important References: Affected Products: * SUSE Linux Micro 6.1 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-720 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-159998_54-default-1-159998.1.1 * kernel-livepatch-6_4_0-159998_54-default-debuginfo-1-159998.1.1 * kernel-livepatch-MICRO-6-0_Update_31-debugsource-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:30:23 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:30:23 -0000 Subject: SUSE-SU-2026:24383-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179308982392.8521.2698243598528520787@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24383-1 Release Date: 2026-10-23T13:54:54Z Rating: moderate References: * bsc#1279961 * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state (bsc#1286261 bsc#1287180 CVE-2026-114406) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 Updated to 2.90 state (bsc#1279961) Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-762 ## Package List: * SUSE Linux Micro 6.1 (noarch) * ca-certificates-mozilla-2.92-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1279961 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:30:53 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:30:53 -0000 Subject: SUSE-SU-2026:24382-1: important: Security update for openssh Message-ID: <179308985345.8521.3820367666088893958@f5dd93353bb2> # Security update for openssh Announcement ID: SUSE-SU-2026:24382-1 Release Date: 2026-10-23T11:50:56Z Rating: important References: * bsc#1259462 * bsc#1271044 * bsc#1271046 * bsc#1271048 * bsc#1271049 * bsc#1271052 * bsc#1271053 * bsc#1271054 * bsc#1271055 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-59995 * CVE-2026-59996 * CVE-2026-59997 * CVE-2026-59998 * CVE-2026-59999 * CVE-2026-60000 * CVE-2026-60001 * CVE-2026-60002 * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-59995 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59995 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59996 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59997 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59997 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59998 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59998 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59999 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-59999 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-60000 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-60000 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-60001 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-60001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60002 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-60002 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 11 vulnerabilities and has one fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). * CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory (bsc#1271046). * CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). * CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). * CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). * CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). * CVE-2026-60001: sshd: honor the minimum authentication delay (bsc#1271054). * CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange (bsc#1271055). * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-766 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * openssh-9.6p1-slfo.1.1_7.1 * openssh-server-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-server-config-rootlogin-9.6p1-slfo.1.1_7.1 * openssh-common-9.6p1-slfo.1.1_7.1 * openssh-common-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-debugsource-9.6p1-slfo.1.1_7.1 * openssh-clients-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-server-9.6p1-slfo.1.1_7.1 * openssh-clients-9.6p1-slfo.1.1_7.1 * openssh-fips-9.6p1-slfo.1.1_7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59995.html * https://www.suse.com/security/cve/CVE-2026-59996.html * https://www.suse.com/security/cve/CVE-2026-59997.html * https://www.suse.com/security/cve/CVE-2026-59998.html * https://www.suse.com/security/cve/CVE-2026-59999.html * https://www.suse.com/security/cve/CVE-2026-60000.html * https://www.suse.com/security/cve/CVE-2026-60001.html * https://www.suse.com/security/cve/CVE-2026-60002.html * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1271044 * https://bugzilla.suse.com/show_bug.cgi?id=1271046 * https://bugzilla.suse.com/show_bug.cgi?id=1271048 * https://bugzilla.suse.com/show_bug.cgi?id=1271049 * https://bugzilla.suse.com/show_bug.cgi?id=1271052 * https://bugzilla.suse.com/show_bug.cgi?id=1271053 * https://bugzilla.suse.com/show_bug.cgi?id=1271054 * https://bugzilla.suse.com/show_bug.cgi?id=1271055 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:31:07 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:31:07 -0000 Subject: SUSE-SU-2026:24381-1: important: Security update for containerd Message-ID: <179308986766.8521.9552265589431288058@f5dd93353bb2> # Security update for containerd Announcement ID: SUSE-SU-2026:24381-1 Release Date: 2026-10-23T08:05:54Z Rating: important References: * bsc#1268430 * bsc#1268441 * bsc#1274214 * bsc#1280007 * bsc#1282669 * bsc#1285124 Cross-References: * CVE-2026-39882 * CVE-2026-47262 * CVE-2026-53488 * CVE-2026-53493 * CVE-2026-53495 * CVE-2026-95838 CVSS scores: * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47262 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-47262 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-47262 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53493 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53493 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53493 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53495 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53495 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves six vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). * CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). * CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). * CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-765 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-slfo.1.1_5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-47262.html * https://www.suse.com/security/cve/CVE-2026-53488.html * https://www.suse.com/security/cve/CVE-2026-53493.html * https://www.suse.com/security/cve/CVE-2026-53495.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 * https://bugzilla.suse.com/show_bug.cgi?id=1268441 * https://bugzilla.suse.com/show_bug.cgi?id=1274214 * https://bugzilla.suse.com/show_bug.cgi?id=1280007 * https://bugzilla.suse.com/show_bug.cgi?id=1282669 * https://bugzilla.suse.com/show_bug.cgi?id=1285124 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:31:19 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:31:19 -0000 Subject: SUSE-SU-2026:24380-1: important: Security update for cyrus-sasl Message-ID: <179308987971.8521.489292779990809027@f5dd93353bb2> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24380-1 Release Date: 2026-10-22T07:33:06Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1233529 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability, contains one feature and has four fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-763 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-2.1.28-slfo.1.1_2.1 * cyrus-sasl-digestmd5-2.1.28-slfo.1.1_2.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-gssapi-2.1.28-slfo.1.1_2.1 * libsasl2-3-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-debugsource-2.1.28-slfo.1.1_2.1 * libsasl2-3-2.1.28-slfo.1.1_2.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1233529 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:32 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:33:32 -0000 Subject: SUSE-SU-2026:24379-1: important: Security update for the Linux Kernel Message-ID: <179309001286.8521.14648770817606288738@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24379-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-719 ## Package List: * SUSE Linux Micro 6.1 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (aarch64 x86_64) * kernel-default-base-6.4.0-159998.54.1.159998.21.40 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-159998.54.1 * kernel-default-devel-6.4.0-159998.54.1 * kernel-default-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (noarch) * kernel-devel-6.4.0-159998.54.1 * kernel-macros-6.4.0-159998.54.1 * kernel-source-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (ppc64le) * kernel-default-base-6.4.0-159998.54.1.159998.21.39 * SUSE Linux Micro 6.1 (ppc64le x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-kvmsmall-debuginfo-6.4.0-159998.54.1 * kernel-kvmsmall-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:41 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:33:41 -0000 Subject: SUSE-SU-2026:24378-1: important: Security update for podman Message-ID: <179309002108.8521.8981993006334456235@f5dd93353bb2> # Security update for podman Announcement ID: SUSE-SU-2026:24378-1 Release Date: 2026-10-20T15:13:34Z Rating: important References: * bsc#1268579 * bsc#1269471 Cross-References: * CVE-2025-22869 * CVE-2025-47913 * CVE-2025-47914 * CVE-2025-52881 * CVE-2025-6032 * CVE-2025-9566 * CVE-2026-34986 * CVE-2026-39829 * CVE-2026-39830 * CVE-2026-42508 * CVE-2026-55686 * CVE-2026-57231 CVSS scores: * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22869 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47913 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-47913 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47913 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-47914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-47914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-52881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2025-52881 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-52881 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-52881 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2025-6032 ( SUSE ): 9.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2025-6032 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2025-6032 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2025-9566 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9566 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2025-9566 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-34986 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39829 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39830 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39830 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39830 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-39830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42508 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42508 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42508 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42508 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-760 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * podmansh-5.4.2-slfo.1.1_6.1 * podman-5.4.2-slfo.1.1_6.1 * podman-remote-debuginfo-5.4.2-slfo.1.1_6.1 * podman-remote-5.4.2-slfo.1.1_6.1 * podman-debuginfo-5.4.2-slfo.1.1_6.1 * SUSE Linux Micro 6.1 (noarch) * podman-docker-5.4.2-slfo.1.1_6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-47913.html * https://www.suse.com/security/cve/CVE-2025-47914.html * https://www.suse.com/security/cve/CVE-2025-52881.html * https://www.suse.com/security/cve/CVE-2025-6032.html * https://www.suse.com/security/cve/CVE-2025-9566.html * https://www.suse.com/security/cve/CVE-2026-34986.html * https://www.suse.com/security/cve/CVE-2026-39829.html * https://www.suse.com/security/cve/CVE-2026-39830.html * https://www.suse.com/security/cve/CVE-2026-42508.html * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:58 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:33:58 -0000 Subject: SUSE-SU-2026:24377-1: important: Security update for python-PyJWT Message-ID: <179309003821.8521.14599025719237835269@f5dd93353bb2> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24377-1 Release Date: 2026-10-20T15:09:47Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-761 ## Package List: * SUSE Linux Micro 6.1 (noarch) * python311-PyJWT-2.12.1-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:34:15 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:34:15 -0000 Subject: SUSE-SU-2026:24376-1: important: Security update for unbound Message-ID: <179309005566.8521.8165325011801295071@f5dd93353bb2> # Security update for unbound Announcement ID: SUSE-SU-2026:24376-1 Release Date: 2026-10-20T08:22:33Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-759 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-slfo.1.1_1.1 * unbound-anchor-1.26.1-slfo.1.1_1.1 * libunbound8-1.26.1-slfo.1.1_1.1 * unbound-anchor-debuginfo-1.26.1-slfo.1.1_1.1 * libunbound8-debuginfo-1.26.1-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:33 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:36:33 -0000 Subject: SUSE-SU-2026:24375-1: important: Security update for the Linux Kernel Message-ID: <179309019381.8521.3675476934058433245@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24375-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-kernel-719 ## Package List: * SUSE Linux Micro Extras 6.1 (nosrc) * kernel-64kb-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.1 (aarch64) * kernel-64kb-debugsource-6.4.0-159998.54.1 * kernel-64kb-devel-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-159998.54.1 * kernel-obs-build-6.4.0-159998.54.1 * kernel-obs-build-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:42 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:36:42 -0000 Subject: SUSE-SU-2026:24374-1: important: Security update for google-osconfig-agent Message-ID: <179309020259.8521.16961755739285788415@f5dd93353bb2> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24374-1 Release Date: 2026-10-26T07:00:03Z Rating: important References: * bsc#1284870 * bsc#1285135 * bsc#1285283 Cross-References: * CVE-2026-61801 * CVE-2026-78669 * CVE-2026-95838 CVSS scores: * CVE-2026-61801 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-61801 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-61801 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for google-osconfig-agent fixes the following issues: * CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285135). Changes for google-osconfig-agent: * Update to version 20261015.00 * Add scalibr os benchmarks (#1044) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-948 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * google-osconfig-agent-20261015.00-159998.1.1 * google-osconfig-agent-debuginfo-20261015.00-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-61801.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1284870 * https://bugzilla.suse.com/show_bug.cgi?id=1285135 * https://bugzilla.suse.com/show_bug.cgi?id=1285283 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:49 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:36:49 -0000 Subject: SUSE-SU-2026:24373-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179309020976.8521.15320723052260804257@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24373-1 Release Date: 2026-10-23T13:55:47Z Rating: moderate References: * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-946 ## Package List: * SUSE Linux Micro 6.0 (noarch) * ca-certificates-mozilla-2.92-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:55 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:36:55 -0000 Subject: SUSE-SU-2026:24372-1: important: Security update for cifs-utils Message-ID: <179309021590.8521.5929975589160776021@f5dd93353bb2> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:24372-1 Release Date: 2026-10-23T08:00:13Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-947 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * cifs-utils-7.0-159998.1.1 * cifs-utils-debuginfo-7.0-159998.1.1 * cifs-utils-debugsource-7.0-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:09 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:39:09 -0000 Subject: SUSE-SU-2026:24371-1: important: Security update for the Linux Kernel Message-ID: <179309034954.8521.12933758598924148203@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24371-1 Release Date: 2026-10-21T11:44:16Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-719 ## Package List: * SUSE Linux Micro 6.0 (aarch64 nosrc s390x x86_64) * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (aarch64 x86_64) * kernel-default-base-6.4.0-159998.54.1.159998.21.40 * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * kernel-default-debugsource-6.4.0-159998.54.1 * kernel-default-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (noarch) * kernel-devel-6.4.0-159998.54.1 * kernel-macros-6.4.0-159998.54.1 * kernel-source-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-kvmsmall-debuginfo-6.4.0-159998.54.1 * kernel-kvmsmall-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:14 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:39:14 -0000 Subject: SUSE-RU-2026:24370-1: important: Recommended update for the initial kernel livepatch Message-ID: <179309035456.8521.6421808382529647095@f5dd93353bb2> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24370-1 Release Date: 2026-10-21T11:41:46Z Rating: important References: Affected Products: * SUSE Linux Micro 6.0 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-720 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-159998_54-default-1-159998.1.1 * kernel-livepatch-6_4_0-159998_54-default-debuginfo-1-159998.1.1 * kernel-livepatch-MICRO-6-0_Update_31-debugsource-1-159998.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:21 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:39:21 -0000 Subject: SUSE-RU-2026:24369-1: moderate: Recommended update for google-guest-configs Message-ID: <179309036187.8521.14617063949501800146@f5dd93353bb2> # Recommended update for google-guest-configs Announcement ID: SUSE-RU-2026:24369-1 Release Date: 2026-10-21T09:41:53Z Rating: moderate References: * bsc#1281946 Affected Products: * SUSE Linux Micro 6.0 An update that has one fix can now be installed. ## Description: This update for google-guest-configs fixes the following issues: Changes in google-guest-configs: * Update to version 20260918.01 (bsc#1281946): * Update SR-IOV udev rule for idpf network devices. * from version 20260916.00: * nic-naming: Fix IDPF VF device rename * from version 20260915.00: * Remove build.sh file * from version 20260914.00: * set_multiqueue: stop setting XPS at all on a4x/a5x * from version 20260911.00: * No public description * from version 20260910.00: * set_multiqueue: fix awk parsing for idpf ring len * from version 20260819.00: * set_multiqueue: Set IDPF ring length to 4096 by default * from version 20260804.00: * nic-naming: improve handling of BM IRDMA devices ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-944 ## Package List: * SUSE Linux Micro 6.0 (noarch) * google-guest-configs-20260918.01-159998.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281946 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:44 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:39:44 -0000 Subject: SUSE-SU-2026:24368-1: important: Security update for libsoup Message-ID: <179309038494.8521.909983669369404559@f5dd93353bb2> # Security update for libsoup Announcement ID: SUSE-SU-2026:24368-1 Release Date: 2026-10-21T09:15:58Z Rating: important References: * bsc#1271446 * bsc#1271447 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1272196 * bsc#1273156 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-943 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libsoup-debugsource-3.4.2-159998.1.1 * libsoup-3_0-0-3.4.2-159998.1.1 * libsoup-3_0-0-debuginfo-3.4.2-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1272196 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:03 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:40:03 -0000 Subject: SUSE-SU-2026:24367-1: important: Security update for gcc13 Message-ID: <179309040380.8521.16713668025381227531@f5dd93353bb2> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24367-1 Release Date: 2026-10-20T11:25:12Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1238491 * bsc#1239566 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 * jsc#PED-7395 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability, contains three features and has nine fixes can now be installed. ## Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-941 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libatomic1-13.5.0+git10516-159998.1.1 * libgcc_s1-debuginfo-13.5.0+git10516-159998.1.1 * libgomp1-debuginfo-13.5.0+git10516-159998.1.1 * libstdc++6-13.5.0+git10516-159998.1.1 * libstdc++6-debuginfo-13.5.0+git10516-159998.1.1 * libgomp1-13.5.0+git10516-159998.1.1 * libatomic1-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-debugsource-13.5.0+git10516-159998.1.1 * libgcc_s1-13.5.0+git10516-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1238491 * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 * https://jira.suse.com/browse/PED-7395 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:22 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:40:22 -0000 Subject: SUSE-SU-2026:24366-1: important: Security update for libXi Message-ID: <179309042274.8521.4279239807819314369@f5dd93353bb2> # Security update for libXi Announcement ID: SUSE-SU-2026:24366-1 Release Date: 2026-10-20T09:40:34Z Rating: important References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 * bsc#1285084 * bsc#1285085 Cross-References: * CVE-2026-109089 * CVE-2026-109090 * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-109089 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109089 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109090 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109090 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). * CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). * CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion (bsc#1281651). * CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). * CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-942 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libXi-debugsource-1.8.1-159998.1.1 * libXi6-1.8.1-159998.1.1 * libXi6-debuginfo-1.8.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109089.html * https://www.suse.com/security/cve/CVE-2026-109090.html * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 * https://bugzilla.suse.com/show_bug.cgi?id=1285084 * https://bugzilla.suse.com/show_bug.cgi?id=1285085 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:37 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 08:40:37 -0000 Subject: SUSE-SU-2026:24365-1: important: Security update for libX11 Message-ID: <179309043732.8521.13367420283336466558@f5dd93353bb2> # Security update for libX11 Announcement ID: SUSE-SU-2026:24365-1 Release Date: 2026-10-20T05:42:35Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-940 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libX11-debugsource-1.8.7-159998.1.1 * libX11-xcb1-1.8.7-159998.1.1 * libX11-6-1.8.7-159998.1.1 * libX11-6-debuginfo-1.8.7-159998.1.1 * libX11-xcb1-debuginfo-1.8.7-159998.1.1 * SUSE Linux Micro 6.0 (noarch) * libX11-data-1.8.7-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 12:30:06 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 12:30:06 -0000 Subject: SUSE-SU-2026:4918-1: important: Security update for suseconnect-ng Message-ID: <179310420629.9067.4180884027866469182@f5dd93353bb2> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:4918-1 Release Date: 2026-10-27T03:34:51Z Rating: important References: Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for suseconnect-ng rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4918 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4918 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4918 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4918 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4918 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4918 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * mcp-server-suseconnect-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:10 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 16:30:10 -0000 Subject: SUSE-SU-2026:4922-1: important: Security update for podman Message-ID: <179311861025.9806.10939288616926998390@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4922-1 Release Date: 2026-10-27T12:08:50Z Rating: important References: Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4922 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4922 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * podman-remote-debuginfo-4.9.5-150300.9.89.1 * podmansh-4.9.5-150300.9.89.1 * podman-debuginfo-4.9.5-150300.9.89.1 * podman-4.9.5-150300.9.89.1 * podman-remote-4.9.5-150300.9.89.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.89.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-debuginfo-4.9.5-150300.9.89.1 * podman-4.9.5-150300.9.89.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:15 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4921-1: important: Security update for podman Message-ID: <179311861509.9806.10093680429196500279@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4921-1 Release Date: 2026-10-27T12:08:31Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4921 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4921 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4921 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4921 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4921 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4921 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4921 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4921 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4921 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * podmansh-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * podman-docker-4.9.5-150400.4.85.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:20 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 16:30:20 -0000 Subject: SUSE-SU-2026:4920-1: important: Security update for podman Message-ID: <179311862043.9806.14202174860018530655@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4920-1 Release Date: 2026-10-27T12:07:44Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4920 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4920 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4920 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4920 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4920 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4920 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4920 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4920 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4920 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * Containers Module 15-SP7 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * podman-docker-4.9.5-150500.3.86.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Tue, 27 Oct 2026 16:30:35 -0000 Subject: SUSE-SU-2026:4919-1: moderate: Security update for python Message-ID: <179311863554.9806.11873084626819880947@9bf698548bc1> # Security update for python Announcement ID: SUSE-SU-2026:4919-1 Release Date: 2026-10-27T09:39:14Z Rating: moderate References: * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-19445 CVSS scores: * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python fixes the following issue: * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4919 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libpython2_7-1_0-2.7.18-150000.139.2 * python-curses-debuginfo-2.7.18-150000.139.1 * python-xml-debuginfo-2.7.18-150000.139.2 * python-base-debugsource-2.7.18-150000.139.2 * python-debuginfo-2.7.18-150000.139.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.139.2 * python-xml-2.7.18-150000.139.2 * python-base-2.7.18-150000.139.2 * python-debugsource-2.7.18-150000.139.1 * python-curses-2.7.18-150000.139.1 * python-gdbm-debuginfo-2.7.18-150000.139.1 * python-2.7.18-150000.139.1 * python-gdbm-2.7.18-150000.139.1 * python-base-debuginfo-2.7.18-150000.139.2 ## References: * https://www.suse.com/security/cve/CVE-2026-19445.html * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 28 08:30:22 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 28 Oct 2026 08:30:22 -0000 Subject: SUSE-SU-2026:4923-1: moderate: Security update for containerd Message-ID: <179317622230.10389.14847909564754469990@f5dd93353bb2> # Security update for containerd Announcement ID: SUSE-SU-2026:4923-1 Release Date: 2026-10-27T17:09:42Z Rating: moderate References: * bsc#1268441 * bsc#1274214 * bsc#1280007 * bsc#1282669 * bsc#1285124 Cross-References: * CVE-2026-39882 * CVE-2026-47262 * CVE-2026-53493 * CVE-2026-53495 * CVE-2026-95838 CVSS scores: * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47262 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-47262 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-47262 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-53493 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53493 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53493 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53495 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53495 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). * CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). * CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). * CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4923 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * containerd-1.7.29-16.119.1 * containerd-devel-1.7.29-16.119.1 * containerd-ctr-1.7.29-16.119.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-47262.html * https://www.suse.com/security/cve/CVE-2026-53493.html * https://www.suse.com/security/cve/CVE-2026-53495.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1268441 * https://bugzilla.suse.com/show_bug.cgi?id=1274214 * https://bugzilla.suse.com/show_bug.cgi?id=1280007 * https://bugzilla.suse.com/show_bug.cgi?id=1282669 * https://bugzilla.suse.com/show_bug.cgi?id=1285124 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 28 16:30:08 2026 From: null at suse.de (SLE-UPDATES) Date: Wed, 28 Oct 2026 16:30:08 -0000 Subject: SUSE-OU-2026:4924-1: low: Optional update for glfw Message-ID: <179320500849.1510.1764810538769236753@8741a845db10> # Optional update for glfw Announcement ID: SUSE-OU-2026:4924-1 Release Date: 2026-10-28T10:48:10Z Rating: low References: * bsc#1287780 Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that has one fix can now be installed. ## Description: This update for glfw fixes the following issue: * Add glfw to SLE-Module-Packagehub-Subpackages-15-SP7 (bsc#1287780). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4924 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4924 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libglfw3-wayland-debuginfo-3.3.9-150600.3.6.1 * libglfw3-debuginfo-3.3.9-150600.3.6.1 * glfw-debugsource-3.3.9-150600.3.6.1 * glfw-wayland-debugsource-3.3.9-150600.3.6.1 * libglfw-devel-3.3.9-150600.3.6.1 * libglfw3-3.3.9-150600.3.6.1 * libglfw3-wayland-3.3.9-150600.3.6.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libglfw3-3.3.9-150600.3.6.1 * libglfw-devel-3.3.9-150600.3.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1287780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:30:11 -0000 Subject: SUSE-SU-2026:24435-1: important: Security update for cifs-utils Message-ID: <179326261169.12376.13659447060878603473@f5dd93353bb2> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:24435-1 Release Date: 2026-10-26T13:05:47Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1988 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wb-cifs-idmap-plugin-debuginfo-7.4-160000.3.1 * cifs-utils-7.4-160000.3.1 * wb-cifs-idmap-plugin-7.4-160000.3.1 * cifs-utils-debugsource-7.4-160000.3.1 * cifs-utils-debuginfo-7.4-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:30:30 -0000 Subject: SUSE-SU-2026:24434-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179326263092.12376.6195994582450562935@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24434-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1986 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:50 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:30:50 -0000 Subject: SUSE-SU-2026:24433-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179326265001.12376.2588468976192242897@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24433-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1985 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:31:03 -0000 Subject: SUSE-SU-2026:24432-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179326266389.12376.13073166699081369516@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24432-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1984 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:18 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:31:18 -0000 Subject: SUSE-SU-2026:24431-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179326267800.12376.12781854154122200604@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24431-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1983 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:32 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:31:32 -0000 Subject: SUSE-SU-2026:24430-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179326269259.12376.407572234520460834@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24430-1 Release Date: 2026-10-26T08:46:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1982 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:31:46 -0000 Subject: SUSE-SU-2026:24429-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179326270688.12376.5328064297667912533@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24429-1 Release Date: 2026-10-24T16:11:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1981 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:00 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:32:00 -0000 Subject: SUSE-SU-2026:24428-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179326272090.12376.11138389936916191933@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24428-1 Release Date: 2026-10-24T12:40:45Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1980 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:15 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:32:15 -0000 Subject: SUSE-SU-2026:24427-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179326273595.12376.9493362976422230600@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24427-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1979 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:32:29 -0000 Subject: SUSE-SU-2026:24426-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179326274926.12376.17267763978910246296@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24426-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1978 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:43 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:32:43 -0000 Subject: SUSE-SU-2026:24425-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179326276322.12376.5577745617924190303@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24425-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1977 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:32:57 -0000 Subject: SUSE-SU-2026:24424-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179326277709.12376.3940853160228586042@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24424-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1976 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:33:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:33:11 -0000 Subject: SUSE-SU-2026:24423-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179326279188.12376.16976104361409397868@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24423-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1975 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:14 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:36:14 -0000 Subject: SUSE-SU-2026:24422-1: important: Security update for the Linux Kernel Message-ID: <179326297422.12376.992727439427612405@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24422-1 Release Date: 2026-10-24T10:42:33Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1973 ## Package List: * SUSE Linux Micro 6.2 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (ppc64le x86_64) * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-rt-livepatch-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-rt-devel-debuginfo-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (noarch) * kernel-source-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-devel-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 nosrc x86_64) * kernel-rt-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * kernel-rt-devel-6.12.0-160000.40.1 * kernel-rt-debuginfo-6.12.0-160000.40.1 * kernel-rt-debugsource-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64) * kernel-64kb-devel-6.12.0-160000.40.1 * kernel-64kb-debugsource-6.12.0-160000.40.1 * kernel-64kb-debuginfo-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.30 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:36:19 -0000 Subject: SUSE-RU-2026:24421-1: important: Recommended update for the initial kernel livepatch Message-ID: <179326297949.12376.904383758872845420@f5dd93353bb2> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24421-1 Release Date: 2026-10-24T10:40:36Z Rating: important References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise 16.0 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1974 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_40-default-1-160000.1.1 * kernel-livepatch-6_12_0-160000_40-default-debuginfo-1-160000.1.1 * kernel-livepatch-SLE16_Update_19-debugsource-1-160000.1.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_40-rt-debuginfo-1-160000.1.1 * kernel-livepatch-6_12_0-160000_40-rt-1-160000.1.1 * kernel-livepatch-SLE16-RT_Update_19-debugsource-1-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:34 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:36:34 -0000 Subject: SUSE-SU-2026:24420-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179326299444.12376.13006991854521713480@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24420-1 Release Date: 2026-10-24T09:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1972 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:36:48 -0000 Subject: SUSE-SU-2026:24419-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179326300802.12376.6601326172851378494@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24419-1 Release Date: 2026-10-24T06:13:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1971 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:36:53 -0000 Subject: SUSE-SU-2026:24418-1: moderate: Security update for haproxy Message-ID: <179326301391.12376.5631581559211818262@f5dd93353bb2> # Security update for haproxy Announcement ID: SUSE-SU-2026:24418-1 Release Date: 2026-10-23T17:10:20Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1969 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * haproxy-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:07 -0000 Subject: SUSE-SU-2026:24417-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179326302769.12376.8314065182265566716@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24417-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1968 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:20 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:20 -0000 Subject: SUSE-SU-2026:24416-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179326304009.12376.523576338885068404@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24416-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1967 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:28 -0000 Subject: SUSE-SU-2026:24415-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179326304888.12376.16444276219402197078@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24415-1 Release Date: 2026-10-23T15:20:40Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1966 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:35 -0000 Subject: SUSE-SU-2026:24414-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179326305596.12376.9138547059815767212@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24414-1 Release Date: 2026-10-23T13:50:54Z Rating: moderate References: * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1958 ## Package List: * SUSE Linux Micro 6.2 (noarch) * ca-certificates-mozilla-2.92-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:43 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:43 -0000 Subject: SUSE-RU-2026:24413-1: important: Recommended update for sysstat Message-ID: <179326306303.12376.15732987569854569463@f5dd93353bb2> # Recommended update for sysstat Announcement ID: SUSE-RU-2026:24413-1 Release Date: 2026-10-23T12:05:04Z Rating: important References: * bsc#1280339 * bsc#1282512 Affected Products: * SUSE Linux Micro 6.2 An update that has two fixes can now be installed. ## Description: This update for sysstat fixes the following issues: Changes in sysstat: * Fix typo: syssstat-rotate to sysstat-rotate * Fix: Upgrade from 15 to 16 is getting error No provider of 'shim' found (bsc#1282512) * sar/sadf: compute used memory as total memory - available memory, consistent with free(1) (bsc#1280339) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1965 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * sysstat-debugsource-12.7.5-160000.3.1 * sysstat-debuginfo-12.7.5-160000.3.1 * sysstat-12.7.5-160000.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1280339 * https://bugzilla.suse.com/show_bug.cgi?id=1282512 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:50 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:50 -0000 Subject: SUSE-SU-2026:24412-1: important: Security update for mozilla-nss, MozillaFirefox Message-ID: <179326307018.12376.6383132759931125666@f5dd93353bb2> # Security update for mozilla-nss, MozillaFirefox Announcement ID: SUSE-SU-2026:24412-1 Release Date: 2026-10-23T10:37:30Z Rating: important References: * bsc#1286261 * bsc#1286385 Cross-References: * CVE-2026-113470 CVSS scores: * CVE-2026-113470 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-113470 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for mozilla-nss, MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385): * CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow- lists, and other State component (bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1963 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libfreebl3-3.125-160000.3.1 * mozilla-nss-debuginfo-3.125-160000.3.1 * mozilla-nss-debugsource-3.125-160000.3.1 * mozilla-nss-certs-debuginfo-3.125-160000.3.1 * libsoftokn3-3.125-160000.3.1 * mozilla-nss-3.125-160000.3.1 * mozilla-nss-tools-3.125-160000.3.1 * mozilla-nss-tools-debuginfo-3.125-160000.3.1 * libfreebl3-debuginfo-3.125-160000.3.1 * mozilla-nss-certs-3.125-160000.3.1 * libsoftokn3-debuginfo-3.125-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-113470.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286385 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:37:54 -0000 Subject: SUSE-RU-2026:24411-1: moderate: Recommended update for crypto-policies Message-ID: <179326307451.12376.18259694058766720836@f5dd93353bb2> # Recommended update for crypto-policies Announcement ID: SUSE-RU-2026:24411-1 Release Date: 2026-10-23T09:30:18Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for crypto-policies fixes the following issues: Changes in crypto-policies: * Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. * Makes Makefile independent on the exact version of the Python interpreter. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1964 ## Package List: * SUSE Linux Micro 6.2 (noarch) * crypto-policies-20250714.cd6043a-160000.3.1 * crypto-policies-scripts-20250714.cd6043a-160000.3.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:13 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:13 -0000 Subject: SUSE-SU-2026:24410-1: important: Security update for docker Message-ID: <179326309326.12376.16170853037158489189@f5dd93353bb2> # Security update for docker Announcement ID: SUSE-SU-2026:24410-1 Release Date: 2026-10-23T09:04:02Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266176 * bsc#1266625 * bsc#1267827 * bsc#1268280 * bsc#1268359 * bsc#1271209 * bsc#1278193 Cross-References: * CVE-2026-31431 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves five vulnerabilities and has six fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at fixes(bsc#1268280, bsc#1268359, bsc#1271209, bsc#1266176) * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1962 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * docker-debuginfo-29.7.2_ce-160000.8.1 * docker-buildx-0.36.1-160000.8.1 * docker-29.7.2_ce-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31431.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266176 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1268280 * https://bugzilla.suse.com/show_bug.cgi?id=1268359 * https://bugzilla.suse.com/show_bug.cgi?id=1271209 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:19 -0000 Subject: SUSE-RU-2026:24409-1: moderate: Recommended update for ovmf Message-ID: <179326309910.12376.15825117520399891029@f5dd93353bb2> # Recommended update for ovmf Announcement ID: SUSE-RU-2026:24409-1 Release Date: 2026-10-23T08:24:43Z Rating: moderate References: * bsc#1284436 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for ovmf fixes the following issues: Changes in ovmf: * Fix: libvirt / OVMF: firmware auto-selection selects AMD SEV firmware on an Intel host, when just asking for SMM off (bsc#1284436): * Lower the priority of CoCo OVMF descriptors: * Rename 50-ovmf-x86_64-sev.json to 61-ovmf-x86_64-sev.json * Rename 50-ovmf-x86_64-sev-snp.json to 61-ovmf-x86_64-sev-snp.json * Rename 60-ovmf-x86_64-tdx.json to 61-ovmf-x86_64-tdx.json ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1961 ## Package List: * SUSE Linux Micro 6.2 (noarch) * qemu-uefi-aarch64-202502-160000.9.1 * qemu-ovmf-x86_64-202502-160000.9.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1284436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:25 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:25 -0000 Subject: SUSE-SU-2026:24408-1: important: Security update for cpupower Message-ID: <179326310571.12376.1736324948558946397@f5dd93353bb2> # Security update for cpupower Announcement ID: SUSE-SU-2026:24408-1 Release Date: 2026-10-22T16:03:55Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663) * turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes) * cpupower: Reset errno before strtoull() (stable-fixes) * intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes) * cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes) * cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes) * cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes) * turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes) * turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes) * turbostat: Handle cap_get_proc() ENOSYS (stable-fixes) * turbostat: Fix build with musl (stable-fixes) * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes) * power turbostat: Fix bogus SysWatt for forked program (git-fixes) * cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1959 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * cpupower-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:32 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:32 -0000 Subject: SUSE-RU-2026:24407-1: moderate: Recommended update for libvirt Message-ID: <179326311272.12376.1134028423795501564@f5dd93353bb2> # Recommended update for libvirt Announcement ID: SUSE-RU-2026:24407-1 Release Date: 2026-10-21T09:15:30Z Rating: moderate References: * bsc#1279843 * bsc#1284528 * jsc#PED-16192 Affected Products: * SUSE Linux Micro 6.2 An update that contains one feature and has two fixes can now be installed. ## Description: This update for libvirt fixes the following issues: Changes in libvirt: * qemu: * Avoid returning error when query job cannot be acquired in virDomainGetXMLDesc() (bsc#1284528) * Additional commits to fix incoming migration to QEMU 10.0.0 and newer (bsc#1279843) * Add ClearwaterForest CPU model (jsc#PED-16192) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1954 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libvirt-daemon-common-debuginfo-11.4.0-160000.7.1 * libvirt-client-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-config-nwfilter-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-logical-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-11.4.0-160000.7.1 * libvirt-libs-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-hooks-11.4.0-160000.7.1 * libvirt-daemon-driver-network-debuginfo-11.4.0-160000.7.1 * libvirt-libs-11.4.0-160000.7.1 * libvirt-nss-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-log-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-11.4.0-160000.7.1 * libvirt-daemon-driver-nwfilter-11.4.0-160000.7.1 * libvirt-daemon-driver-qemu-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-lock-11.4.0-160000.7.1 * libvirt-daemon-proxy-11.4.0-160000.7.1 * libvirt-daemon-driver-network-11.4.0-160000.7.1 * libvirt-nss-11.4.0-160000.7.1 * libvirt-client-qemu-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-core-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-proxy-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-iscsi-direct-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-11.4.0-160000.7.1 * libvirt-daemon-config-network-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-11.4.0-160000.7.1 * libvirt-debugsource-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-logical-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-scsi-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-disk-11.4.0-160000.7.1 * libvirt-daemon-log-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-storage-mpath-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-lock-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-plugin-lockd-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-driver-secret-11.4.0-160000.7.1 * libvirt-client-11.4.0-160000.7.1 * libvirt-daemon-qemu-11.4.0-160000.7.1 * libvirt-daemon-driver-nodedev-debuginfo-11.4.0-160000.7.1 * libvirt-daemon-common-11.4.0-160000.7.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279843 * https://bugzilla.suse.com/show_bug.cgi?id=1284528 * https://jira.suse.com/browse/PED-16192 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:39 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:39 -0000 Subject: SUSE-SU-2026:24406-1: moderate: Security update for coreutils Message-ID: <179326311966.12376.11522632686427968574@f5dd93353bb2> # Security update for coreutils Announcement ID: SUSE-SU-2026:24406-1 Release Date: 2026-10-21T08:10:37Z Rating: moderate References: * bsc#1272698 Cross-References: * CVE-2026-56391 CVSS scores: * CVE-2026-56391 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-56391 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-56391 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issue: * CVE-2026-56391: uniq: denial of service and information disclosure via out- of-bounds read with multibyte input (bsc#1272698). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1951 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * coreutils-9.6-160000.3.1 * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56391.html * https://bugzilla.suse.com/show_bug.cgi?id=1272698 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:49 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:49 -0000 Subject: SUSE-SU-2026:24405-1: important: Security update for cyrus-sasl Message-ID: <179326312940.12376.16097035776266885138@f5dd93353bb2> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24405-1 Release Date: 2026-10-21T05:48:33Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability, contains one feature and has three fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1950 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:38:53 -0000 Subject: SUSE-RU-2026:24404-1: moderate: Recommended update for python3 Message-ID: <179326313381.12376.11308919611110964911@f5dd93353bb2> # Recommended update for python3 Announcement ID: SUSE-RU-2026:24404-1 Release Date: 2026-10-20T14:59:51Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 An update that can now be installed. ## Description: This update for python3 fixes the following issues: Changes in python3: * do not hardrequire the primary interpreter version, otherwise we have a bootstrapping problem if we update the primary_python version ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1948 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * python3-base-3.13.14-160000.2.1 * python3-curses-3.13.14-160000.2.1 * python3-3.13.14-160000.2.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:39:12 -0000 Subject: SUSE-SU-2026:24403-1: important: Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179326315275.12376.16420415186532560908@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24403-1 Release Date: 2026-10-19T14:35:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1943 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_29-rt-10-160000.1.1 * kernel-livepatch-SLE16-RT_Update_8-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-rt-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:39:28 -0000 Subject: SUSE-SU-2026:24402-1: important: Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179326316847.12376.4080137595399637144@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24402-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1933 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_0-debugsource-18-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-18-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-debuginfo-18-160000.3.4 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:39:41 -0000 Subject: SUSE-SU-2026:24401-1: important: Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179326318191.12376.14169558916996169610@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24401-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1932 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_6-rt-17-160000.1.1 * kernel-livepatch-SLE16-RT_Update_1-debugsource-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-debuginfo-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:39:55 -0000 Subject: SUSE-SU-2026:24400-1: important: Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179326319537.12376.8058698091765424497@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24400-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1931 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16-RT_Update_2-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:10 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:40:10 -0000 Subject: SUSE-SU-2026:24399-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179326321041.12376.8666005491026531169@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24399-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1930 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-debuginfo-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:25 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:40:25 -0000 Subject: SUSE-SU-2026:24398-1: important: Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179326322555.12376.5630256124069098786@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24398-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1929 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-debuginfo-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:39 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:40:39 -0000 Subject: SUSE-SU-2026:24397-1: important: Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179326323969.12376.10115991711993558780@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24397-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1928 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_5-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-debuginfo-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:40:53 -0000 Subject: SUSE-SU-2026:24396-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179326325351.12376.12497018741284735446@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24396-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1941 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_33-rt-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16-RT_Update_12-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:06 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:41:06 -0000 Subject: SUSE-SU-2026:24395-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179326326690.12376.3551625409592726272@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24395-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1940 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_34-rt-7-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16-RT_Update_13-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:18 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:41:18 -0000 Subject: SUSE-SU-2026:24394-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179326327889.12376.10639203423533503949@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24394-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1939 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-debuginfo-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:41:31 -0000 Subject: SUSE-SU-2026:24393-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179326329158.12376.9745621567635504942@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24393-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1938 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-debuginfo-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:41:46 -0000 Subject: SUSE-SU-2026:24392-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179326330644.12376.359936781854149737@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24392-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1936 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_30-rt-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-rt-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_9-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:00 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:42:00 -0000 Subject: SUSE-SU-2026:24391-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179326332023.12376.18350908785274857606@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24391-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1935 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_31-rt-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-rt-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:14 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:42:14 -0000 Subject: SUSE-SU-2026:24390-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179326333452.12376.834179335869431832@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24390-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1934 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:42:28 -0000 Subject: SUSE-SU-2026:24389-1: important: Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179326334832.12376.14718489515364790784@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24389-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1927 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:44 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:42:44 -0000 Subject: SUSE-SU-2026:24388-1: important: Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179326336469.12376.10364124145651321075@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24388-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1926 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_7-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:42:54 -0000 Subject: SUSE-SU-2026:24387-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179326337417.12376.10574758133670964112@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24387-1 Release Date: 2026-10-19T12:38:58Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1937 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_37-rt-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-rt-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16-RT_Update_16-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:45:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:45:54 -0000 Subject: SUSE-SU-2026:24386-1: important: Security update for the Linux Kernel Message-ID: <179326355467.12376.17684737288686630415@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24386-1 Release Date: 2026-10-24T11:15:59Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1973 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-6.12.0-160000.40.1 * kernel-obs-build-debugsource-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:45:59 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:45:59 -0000 Subject: SUSE-RU-2026:24385-1: moderate: Recommended update for python-rpm-packaging Message-ID: <179326355964.12376.8625148227926621110@f5dd93353bb2> # Recommended update for python-rpm-packaging Announcement ID: SUSE-RU-2026:24385-1 Release Date: 2026-10-19T15:48:43Z Rating: moderate References: Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that can now be installed. ## Description: This update for python-rpm-packaging fixes the following issues: Changes in python-rpm-packaging: * Remove dependency on /usr/bin/python3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1945 ## Package List: * SUSE Linux Micro Extras 6.2 (noarch) * python-rpm-packaging-20210526+a18ca48-160000.3.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:46:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 08:46:29 -0000 Subject: SUSE-SU-2026:4926-1: critical: Security update for perl-Cpanel-JSON-XS Message-ID: <179326358953.12376.10453427431927894437@f5dd93353bb2> # Security update for perl-Cpanel-JSON-XS Announcement ID: SUSE-SU-2026:4926-1 Release Date: 2026-10-28T16:22:22Z Rating: critical References: * bsc#1249331 * bsc#1267546 * bsc#1267547 * bsc#1286166 * bsc#1286167 * bsc#1286168 * bsc#1286169 * bsc#1286170 * bsc#1286173 * bsc#1286174 * bsc#1286175 * bsc#1286176 * bsc#1286177 * bsc#1286179 * bsc#1286180 * bsc#1286181 * bsc#1286182 * bsc#1286183 Cross-References: * CVE-2025-40929 * CVE-2026-110672 * CVE-2026-110673 * CVE-2026-110674 * CVE-2026-110675 * CVE-2026-110676 * CVE-2026-110677 * CVE-2026-110678 * CVE-2026-110680 * CVE-2026-110681 * CVE-2026-110682 * CVE-2026-110684 * CVE-2026-110685 * CVE-2026-110686 * CVE-2026-110687 * CVE-2026-110688 * CVE-2026-9334 * CVE-2026-9516 CVSS scores: * CVE-2025-40929 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40929 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40929 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-110672 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110673 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110673 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110674 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110674 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110675 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-110675 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-110676 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110676 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110677 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110677 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110678 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110680 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110681 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110681 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110682 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-110682 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-110684 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110684 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110685 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110685 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110686 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110686 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110687 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-110687 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-110688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-9334 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9334 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-9334 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-9516 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9516 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9516 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for perl-Cpanel-JSON-XS fixes the following issues: * CVE-2025-40929: integer overflow (bsc#1249331). * CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546). * CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter callback throws (bsc#1267547). * CVE-2026-110672: leak of decoded key of an object rejected for a duplicate key or a missing colon in `decode_hv` (bsc#1286166). * CVE-2026-110673: stack exhaustion via nested tagged values under `allow_tags` in `decode_tag` (bsc#1286167). * CVE-2026-110674: duplicate non-ASCII bare keys are missed, allowing type confusion under `dupkeys_as_arrayref` in `decode_hv` (bsc#1286168). * CVE-2026-110675: malformed UTF-8 accepted in bare hash keys under `allow_barekey` in `decode_hv` (bsc#1286169). * CVE-2026-110676: memory exhaustion by encoding exponent notation as full decimal digits under `allow_bignum` (bsc#1286170). * CVE-2026-110677: array collecting duplicate key values leaked under `dupkeys_as_arrayref` in `decode_hv` (bsc#1286173). * CVE-2026-110678: memory exhaustion by buffering incremental input past `max_size` in `incr_parse` (bsc#1286174). * CVE-2026-110680: out-of-bounds write when a tied or shared hash grows during canonical encoding in `encode_hv` (bsc#1286175). * CVE-2026-110681: parent interpreter's scalars from a parser object cloned into a new `ithread` (bsc#1286176). * CVE-2026-110682: input chunking can change the decoded value of top-level numbers in `incr_parse` (bsc#1286177). * CVE-2026-110684: memory leaked and overloaded objects retained when encoding values as strings in `encode_stringify` (bsc#1286179). * CVE-2026-110685: decoded arguments of a tagged value leaked when its THAW method dies in `decode_tag` (bsc#1286180). * CVE-2026-110686: freed filter callbacks used when a filter removes itself during decoding in `decode_hv` (bsc#1286181). * CVE-2026-110687: byte-string keys misordered during canonical encoding in `utf16_cmp` (bsc#1286182). * CVE-2026-110688: quadratic CPU use due to remaining buffer revalidation per value in `incr_parse` (bsc#1286183). Changes for perl-Cpanel-JSON-XS: * updated to 4.800.0 (4.80) * Add version markers to all module files. (PR #260 demerphq) * Use utf8n_to_uvchr on Perl 5.32 and later to avoid the deprecated utf8n_to_uvuni API. (PR #260 demerphq) * Add schema-based validation for decoded JSON (GH #238): Cpanel::JSON::XS::Type now provides check_type($data, $schema[, $found_type]), which validates an already-decoded perl structure against a type spec built from the existing encoder building blocks (JSON_TYPE_* / json_type_arrayof / json_type_hashof / json_type_anyof), plus the new json_type_optional() for hash keys that may be absent, and short scalar type name sugar ('Str', 'Int', 'Float', 'Bool', 'Null', 'Any', and nullable 'Str?' etc.) so a schema reads as "just a hash of keys and types", as requested. Unlike the encoder's hash type spec, a plain hashref schema is closed: unknown keys and missing required keys are reported. New $json->decode_and_validate($json_text, $schema) method decodes and croaks with all mismatches if validation fails, using decode()'s own type introspection as ground truth to avoid perl's usual dual-var/stringified- number ambiguity. * json_type_optional() and the nullable '?' type-name suffixes ('Str?', 'Int?', 'Float?', 'Bool?') give schemas an explicit way to declare a key/value as optional instead of demanding a complete type specification for every key. The encoder now also understands json_type_optional() directly (it unwraps to the wrapped type, since encode() only ever sees keys that are actually present): the exact same type spec built for check_type()/decode_and_validate() can now be handed to encode() as-is, instead of croaking with "no type was specified for hash key '...'" for every optional key. Encoding stays strict by default otherwise: a hash key with no entry at all in the type spec still croaks (GH #242). eg/bench_large.pl: old encode: 20.5--22.9/s decode: 16.2--16.5/s for 4.53 new encode: 21.1--22.5/s decode: 15.7--16.3/s for 4.80 4.53 2026-09-28 (rurban) * Fix C90 violations with arm neon (GH #258 rjbs) * Added a native arm64 test runner. * updated to 4.520.0 (4.52) 4.52 2026-09-12 (rurban) * OSX 10.9 fix for SIMD UTF-8 (Christian Carey) * Change my maintainer email to reini.urban at gmail.com 4.51 2026-09-11 (rurban) * Add faster SIMD UTF-8 validation (GH #213, Zhang Boyang) * Fix tests for yath (GH #255, with H.Merijn Brand): the test files now work with Test2::Harness instead of only Test::Harness, and a yath run is added to `make xtest` when yath is installed. * Skip one t/117_numbers.t test on Perls with 32-bit IVs (GH #254, Jeremy Hansen). 4.50 2026-09-08 (rurban) * Add $json->encode_to($fh, $data, [$type]) to stream encoded JSON directly to a filehandle instead of building the whole result in memory (GH #250, requested by yairlenga. designed 2016 in GH #58). Internally flushes a bounded 8k chunk buffer as it fills, keeping peak memory bounded for large data structures. * Encoder performance improvements suggested in GH #237 (17dec): * Large-integer encoding now uses a 100-digit lookup table instead of snprintf, roughly 2x faster for integers outside the existing branchless small-integer fast path (|value| > 59000). * encode_str now bulk-copies runs of consecutive bytes that need no escaping instead of a need()+store per byte, notably faster for strings with few or no characters to escape. Added eg/bench_large.pl with results. * updated to 4.440.0 (4.44) 4.44 2026-09-02 (rurban) * Fix canonical sort infinite loop (GH #252 amelchio): malformed UTF-8 keys (e.g. Latin-1 byte strings mixed with Unicode) made utf16_cmp treat the decoder's (STRLEN)-1 malformed sentinel as a length, wrapping the buffer pointer. Now checked as 0 or > remaining length. * updated to 4.430.0 (4.43) 4.43 2026-07-18 (rurban) * Fix canonical sort: compare by UTF-16 code units per RFC 8785 (GH #248, leont) * Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts UTF-8 decoding instead of checking SvUTF8 flag, since older Perls may store valid UTF-8 hash keys without the flag set. * Fix quadmath encode dropping ".0" for large floats (GH #246, reported by Tux). The .0 guard condition that suppressed appending for NV values > UV_MAX was incorrect on high-precision FP (quadmath, 128-bit long double on arm64) where %g uses fixed-point notation for values like 1.01e30. Guarded with #if NV_DIG < 31 to skip only on double/80-bit-ld where %g naturally uses %e for large values. * updated to 4.420.0 (4.42) 4.42 2026-06-27 (rurban) * Ensure encode with a type spec hashref does not change the hashref argument (GH #240) * Fix -e docs: "written" -> "read" (GH #239, reported by Ron Savage). * Fix Boolean eq overload matching undef (GH #207, reported by fd-t). Cpanel::JSON::XS::Boolean overloaded eq would match undef as equal to false because undef stringifies to "". Added defined() guard. * Fix error messages showing overloaded stringification for blessed objects (GH #191, reported by karenetheridge). Error messages now use ClassName=TYPE(addr) format, bypassing any "" overload. * Fix type_all_string overriding allow_blessed/convert_blessed (GH #175, reported by alpha6). With type_all_string + allow_blessed, blessed objects are now encoded as null (not stringified as HASH address). * Fix infinite recursion when encode is called from a "" overload (GH #128, reported by pbrthemaster). The recursion guard temporarily clears convert_blessed and allow_stringify flags on the JSON object before calling the overload, preventing re-entrant encode loops. * Fix $obj->new creating a broken object (GH #93, reported by cpansprout). When new() is called on an existing object (e.g. $json->new->new), the class name is now extracted from the object's stash rather than using the stringified reference. * Change allow_nonref default to true (GH #241, matching JSON::PP and JSON::XS 4.0+ and the insecure RFC 7159). encode and decode now accept non-reference values by default. decode_json() with an explicit 0/1 second argument still works. allow_nonref(0) to disable scalars-only for secure JSON. * Fix minor t/12_blessed.t typo. * Fix GH #112: encode large whole-number NV values without .0 on 32-bit Perl (values exceeding UV_MAX that Perl stores as float). * Fix GH #197: prefer IOK over pNOK when encoding values where IV is accurate but NV is imprecise (SvNOK not set). * updated to 4.410.0 (4.41) 4.41 2026-05-27 (rurban) * Fix incr_parse single-quote string delimiter (GH #245, reported by Paul Johnson) * Fix a one-byte out-of-bounds heap read reachable via allow_barekey on truncated input (GH #244, reported by Paul Johnson) * updated to 4.400.0 (4.40) 4.40 2025-09-07 (rurban) * Fix CVE-2025-40929 overflow with overlong numbers, fuzzing only. * Detect more malformed numbers, with two decimal points. * Pin github actions to latest @v via pinact run -u (bsc#1249331) * updated to 4.390.0 (4.39) 4.39 2024-12-12 (rurban) * Fix Windows -Dusequadmath (sisyphus GH #235, GH #229) * Fix inconsistent behavior between decoding escaped and unescaped surrogates, and escaped non-characters vs non-escaped non-characters. Now aligned to JSON::PP (Gavin Hayes GH #233, GH #227) * Add type_all_string tests (Bernhard Schmalhofer GH #236) * Silence UV to char cast warnings (bulk88 GH #232) * Fix MSVC preprocessor errors (bulk88 GH #232) * Fix -Wformat warnings on Windows (sisyphus GH #228) * Clarify BigInt decoding (GH #226) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4926 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-Cpanel-JSON-XS-debuginfo-4.800.0-150700.3.9.1 * perl-Cpanel-JSON-XS-4.800.0-150700.3.9.1 * perl-Cpanel-JSON-XS-debugsource-4.800.0-150700.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40929.html * https://www.suse.com/security/cve/CVE-2026-110672.html * https://www.suse.com/security/cve/CVE-2026-110673.html * https://www.suse.com/security/cve/CVE-2026-110674.html * https://www.suse.com/security/cve/CVE-2026-110675.html * https://www.suse.com/security/cve/CVE-2026-110676.html * https://www.suse.com/security/cve/CVE-2026-110677.html * https://www.suse.com/security/cve/CVE-2026-110678.html * https://www.suse.com/security/cve/CVE-2026-110680.html * https://www.suse.com/security/cve/CVE-2026-110681.html * https://www.suse.com/security/cve/CVE-2026-110682.html * https://www.suse.com/security/cve/CVE-2026-110684.html * https://www.suse.com/security/cve/CVE-2026-110685.html * https://www.suse.com/security/cve/CVE-2026-110686.html * https://www.suse.com/security/cve/CVE-2026-110687.html * https://www.suse.com/security/cve/CVE-2026-110688.html * https://www.suse.com/security/cve/CVE-2026-9334.html * https://www.suse.com/security/cve/CVE-2026-9516.html * https://bugzilla.suse.com/show_bug.cgi?id=1249331 * https://bugzilla.suse.com/show_bug.cgi?id=1267546 * https://bugzilla.suse.com/show_bug.cgi?id=1267547 * https://bugzilla.suse.com/show_bug.cgi?id=1286166 * https://bugzilla.suse.com/show_bug.cgi?id=1286167 * https://bugzilla.suse.com/show_bug.cgi?id=1286168 * https://bugzilla.suse.com/show_bug.cgi?id=1286169 * https://bugzilla.suse.com/show_bug.cgi?id=1286170 * https://bugzilla.suse.com/show_bug.cgi?id=1286173 * https://bugzilla.suse.com/show_bug.cgi?id=1286174 * https://bugzilla.suse.com/show_bug.cgi?id=1286175 * https://bugzilla.suse.com/show_bug.cgi?id=1286176 * https://bugzilla.suse.com/show_bug.cgi?id=1286177 * https://bugzilla.suse.com/show_bug.cgi?id=1286179 * https://bugzilla.suse.com/show_bug.cgi?id=1286180 * https://bugzilla.suse.com/show_bug.cgi?id=1286181 * https://bugzilla.suse.com/show_bug.cgi?id=1286182 * https://bugzilla.suse.com/show_bug.cgi?id=1286183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:32:27 -0000 Subject: SUSE-SU-2026:24458-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179329154746.14553.11527343234481635581@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24458-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1986 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1986 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:32:41 -0000 Subject: SUSE-SU-2026:24457-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179329156136.14553.5563089712719472797@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24457-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1985 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1985 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:57 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:32:57 -0000 Subject: SUSE-SU-2026:24456-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179329157735.14553.8811052358230454042@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24456-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1984 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1984 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:12 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:33:12 -0000 Subject: SUSE-SU-2026:24455-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179329159278.14553.5683244134088688109@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24455-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1983 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1983 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:27 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:33:27 -0000 Subject: SUSE-SU-2026:24454-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179329160727.14553.7140567757506883463@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24454-1 Release Date: 2026-10-26T08:46:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1982 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1982 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:41 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:33:41 -0000 Subject: SUSE-SU-2026:24453-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179329162128.14553.13881851756392132912@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24453-1 Release Date: 2026-10-24T16:11:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1981 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1981 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:54 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:33:54 -0000 Subject: SUSE-SU-2026:24452-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179329163461.14553.11403860190343698026@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24452-1 Release Date: 2026-10-24T12:40:45Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1980 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1980 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:34:09 -0000 Subject: SUSE-SU-2026:24451-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179329164904.14553.3885172087467326437@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24451-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1979 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1979 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:22 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:34:22 -0000 Subject: SUSE-SU-2026:24450-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179329166283.14553.10987976322224355541@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24450-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1978 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1978 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:36 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:34:36 -0000 Subject: SUSE-SU-2026:24449-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179329167677.14553.16141326030131486054@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24449-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1977 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1977 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:50 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:34:50 -0000 Subject: SUSE-SU-2026:24448-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179329169073.14553.2478898332941610905@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24448-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1976 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1976 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:35:04 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:35:04 -0000 Subject: SUSE-SU-2026:24447-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179329170495.14553.8513121138728990998@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24447-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1975 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1975 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:06 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:06 -0000 Subject: SUSE-SU-2026:24446-1: important: Security update for the Linux Kernel Message-ID: <179329188603.14553.14544274665628875277@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24446-1 Release Date: 2026-10-24T10:42:33Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1973 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1973 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * gfs2-kmp-default-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-debugsource-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-devel-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.40.1 * dlm-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-obs-qa-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * dlm-kmp-default-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * gfs2-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * cluster-md-kmp-default-6.12.0-160000.40.1 * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc x86_64) * kernel-azure-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * kernel-azure-extra-6.12.0-160000.40.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-devel-6.12.0-160000.40.1 * kernel-azure-debugsource-6.12.0-160000.40.1 * kernel-default-vdso-6.12.0-160000.40.1 * kernel-azure-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-extra-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-6.12.0-160000.40.1 * kernel-default-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.40.1 * kernel-azure-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.40.1 * kernel-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kernel-devel-6.12.0-160000.40.1 * kernel-source-6.12.0-160000.40.1 * kernel-docs-html-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-source-vanilla-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * kernel-64kb-devel-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.30 * kernel-64kb-debugsource-6.12.0-160000.40.1 * kernel-64kb-extra-debuginfo-6.12.0-160000.40.1 * kernel-64kb-extra-6.12.0-160000.40.1 * kernel-64kb-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc x86_64) * kernel-azure-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * kernel-azure-extra-6.12.0-160000.40.1 * kernel-azure-devel-6.12.0-160000.40.1 * kernel-azure-debugsource-6.12.0-160000.40.1 * kernel-azure-extra-debuginfo-6.12.0-160000.40.1 * kernel-azure-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-obs-qa-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kernel-devel-6.12.0-160000.40.1 * kernel-source-6.12.0-160000.40.1 * kernel-docs-html-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-source-vanilla-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-devel-6.12.0-160000.40.1 * kernel-kvmsmall-debugsource-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.40.1 * kernel-default-vdso-6.12.0-160000.40.1 * kernel-azure-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-6.12.0-160000.40.1 * kernel-default-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (ppc64le x86_64) * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (nosrc s390x) * kernel-zfcpdump-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (s390x) * kernel-zfcpdump-debugsource-6.12.0-160000.40.1 * kernel-zfcpdump-debuginfo-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:11 -0000 Subject: SUSE-RU-2026:24445-1: important: Recommended update for the initial kernel livepatch Message-ID: <179329189122.14553.12589979308858366894@8cb11e3fd1c0> # Recommended update for the initial kernel livepatch Announcement ID: SUSE-RU-2026:24445-1 Release Date: 2026-10-24T10:40:36Z Rating: important References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update provides the initial livepatches for the SUSE Linux Enterprise 16.0 kernel update. This update does not contain any fixes and will be updated with livepatches later. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1974 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1974 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_40-default-1-160000.1.1 * kernel-livepatch-6_12_0-160000_40-default-debuginfo-1-160000.1.1 * kernel-livepatch-SLE16_Update_19-debugsource-1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_40-default-1-160000.1.1 * kernel-livepatch-6_12_0-160000_40-default-debuginfo-1-160000.1.1 * kernel-livepatch-SLE16_Update_19-debugsource-1-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:24 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:24 -0000 Subject: SUSE-SU-2026:24444-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179329190471.14553.18259568871496600312@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24444-1 Release Date: 2026-10-24T09:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1972 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1972 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:40 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:40 -0000 Subject: SUSE-SU-2026:24443-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179329192056.14553.6692576797417437209@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24443-1 Release Date: 2026-10-24T06:13:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1971 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1971 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:46 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:46 -0000 Subject: SUSE-SU-2026:24442-1: moderate: Security update for rabbitmq-server Message-ID: <179329192642.14553.8871339725512451629@8cb11e3fd1c0> # Security update for rabbitmq-server Announcement ID: SUSE-SU-2026:24442-1 Release Date: 2026-10-23T17:13:02Z Rating: moderate References: * bsc#1271338 Cross-References: * CVE-2026-57215 CVSS scores: * CVE-2026-57215 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-57215 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57215 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-57215 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for rabbitmq-server fixes the following issue: * CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1970 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1970 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * erlang-rabbitmq-client-4.1.5-160000.3.1 * rabbitmq-server-4.1.5-160000.3.1 * rabbitmq-server-plugins-4.1.5-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * rabbitmq-server-bash-completion-4.1.5-160000.3.1 * rabbitmq-server-zsh-completion-4.1.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * erlang-rabbitmq-client-4.1.5-160000.3.1 * rabbitmq-server-4.1.5-160000.3.1 * rabbitmq-server-plugins-4.1.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * rabbitmq-server-bash-completion-4.1.5-160000.3.1 * rabbitmq-server-zsh-completion-4.1.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-57215.html * https://bugzilla.suse.com/show_bug.cgi?id=1271338 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:38:53 -0000 Subject: SUSE-SU-2026:24441-1: moderate: Security update for haproxy Message-ID: <179329193384.14553.11379738408610160608@8cb11e3fd1c0> # Security update for haproxy Announcement ID: SUSE-SU-2026:24441-1 Release Date: 2026-10-23T17:10:20Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1969 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 * haproxy-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:39:07 -0000 Subject: SUSE-SU-2026:24440-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179329194744.14553.6784646975138447933@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24440-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1968 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1968 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:20 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:39:20 -0000 Subject: SUSE-SU-2026:24439-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179329196021.14553.11214526830755409068@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24439-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1967 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1967 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:39:29 -0000 Subject: SUSE-SU-2026:24438-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179329196931.14553.13725246861842650337@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24438-1 Release Date: 2026-10-23T15:20:40Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1966 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1966 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:42:29 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:42:29 -0000 Subject: SUSE-SU-2026:24437-1: important: Security update for the Linux Kernel Message-ID: <179329214985.14553.3899184780183581978@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24437-1 Release Date: 2026-10-24T11:15:59Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1973 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * gfs2-kmp-default-6.12.0-160000.40.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * dlm-kmp-default-debuginfo-6.12.0-160000.40.1 * dlm-kmp-default-6.12.0-160000.40.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.40.1 * cluster-md-kmp-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (nosrc) * kernel-default-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:42:36 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:42:36 -0000 Subject: SUSE-SU-2026:24436-1: moderate: Security update for haproxy Message-ID: <179329215637.14553.9718220125679549611@8cb11e3fd1c0> # Security update for haproxy Announcement ID: SUSE-SU-2026:24436-1 Release Date: 2026-10-23T17:14:51Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1969 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 * haproxy-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:45:09 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:45:09 -0000 Subject: SUSE-SU-2026:4935-1: important: Security update for the Linux Kernel Message-ID: <179329230928.14553.4931058953745625950@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4935-1 Release Date: 2026-10-29T10:37:40Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264295 * bsc#1264614 * bsc#1264622 * bsc#1264851 * bsc#1265000 * bsc#1266694 * bsc#1266730 * bsc#1266757 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275518 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1281991 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283795 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283945 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284429 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285880 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43132 * CVE-2026-43184 * CVE-2026-43283 * CVE-2026-43299 * CVE-2026-43457 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-46034 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-90430 * CVE-2026-92488 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97571 * CVE-2026-97574 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43132 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43132 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43184 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-43184 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-43184 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43283 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46034 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * Legacy Module 15-SP7 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 108 vulnerabilities, contains two features and has six security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). * CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). * CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283945). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * s390/cio: Purge based on the cdev's online status (bsc#1284429). * s390/topology: Use zero-based numbering for containing (bsc#1275518). * selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4935 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4935 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4935 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4935 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4935 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4935 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4935 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-6.4.0-150700.53.87.3 * gfs2-kmp-default-6.4.0-150700.53.87.3 * ocfs2-kmp-default-debuginfo-6.4.0-150700.53.87.3 * dlm-kmp-default-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debugsource-6.4.0-150700.53.87.3 * cluster-md-kmp-default-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * dlm-kmp-default-6.4.0-150700.53.87.3 * ocfs2-kmp-default-6.4.0-150700.53.87.3 * gfs2-kmp-default-debuginfo-6.4.0-150700.53.87.3 * SUSE Linux Enterprise High Availability Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150700.53.87.3.150700.17.49.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-default-devel-6.4.0-150700.53.87.3 * kernel-default-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (noarch) * kernel-devel-6.4.0-150700.53.87.3 * kernel-macros-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (nosrc s390x) * kernel-zfcpdump-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150700.53.87.3 * kernel-zfcpdump-debuginfo-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 nosrc) * kernel-64kb-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64) * kernel-64kb-devel-6.4.0-150700.53.87.3 * kernel-64kb-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-64kb-debuginfo-6.4.0-150700.53.87.3 * kernel-64kb-debugsource-6.4.0-150700.53.87.3 * Development Tools Module 15-SP7 (noarch nosrc) * kernel-docs-6.4.0-150700.53.87.3 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-6.4.0-150700.53.87.2 * kernel-obs-build-debugsource-6.4.0-150700.53.87.2 * kernel-syms-6.4.0-150700.53.87.1 * Development Tools Module 15-SP7 (noarch) * kernel-source-6.4.0-150700.53.87.3 * Legacy Module 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * reiserfs-kmp-default-6.4.0-150700.53.87.3 * reiserfs-kmp-default-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Live Patching 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-default-debuginfo-6.4.0-150700.53.87.3 * kernel-livepatch-SLE15-SP7_Update_23-debugsource-1-150700.15.3.2 * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-livepatch-6_4_0-150700_53_87-default-debuginfo-1-150700.15.3.2 * kernel-livepatch-6_4_0-150700_53_87-default-1-150700.15.3.2 * kernel-default-livepatch-devel-6.4.0-150700.53.87.3 * kernel-default-livepatch-6.4.0-150700.53.87.3 * Public Cloud Module 15-SP7 (aarch64 nosrc x86_64) * kernel-azure-6.4.0-150700.53.87.3 * Public Cloud Module 15-SP7 (aarch64 x86_64) * kernel-azure-debugsource-6.4.0-150700.53.87.3 * kernel-azure-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-azure-debuginfo-6.4.0-150700.53.87.3 * kernel-azure-devel-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Workstation Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-default-extra-6.4.0-150700.53.87.3 * kernel-default-extra-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43132.html * https://www.suse.com/security/cve/CVE-2026-43184.html * https://www.suse.com/security/cve/CVE-2026-43283.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-43457.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-46034.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264295 * https://bugzilla.suse.com/show_bug.cgi?id=1264614 * https://bugzilla.suse.com/show_bug.cgi?id=1264622 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1265000 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1266757 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275518 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284429 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285880 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:45:53 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:45:53 -0000 Subject: SUSE-SU-2026:4937-1: important: Security update for the Linux Kernel Message-ID: <179329235340.14553.17320637066927727670@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4937-1 Release Date: 2026-10-29T11:39:31Z Rating: important References: * bsc#1227103 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277821 * bsc#1280176 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2024-39468 * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2024-39468 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 27 vulnerabilities and has one security fix can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4937 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4937 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4937 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4937 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4937 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4937 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4937 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4937 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4937 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4937 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4937 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * gfs2-kmp-default-5.14.21-150400.24.246.1 * cluster-md-kmp-default-5.14.21-150400.24.246.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.246.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * ocfs2-kmp-default-5.14.21-150400.24.246.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-livepatch-5_14_21-150400_24_246-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_61-debugsource-1-150400.9.3.1 * kernel-default-livepatch-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-livepatch-5_14_21-150400_24_246-default-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64) * ocfs2-kmp-64kb-5.14.21-150400.24.246.1 * dtb-amlogic-5.14.21-150400.24.246.1 * dtb-sprd-5.14.21-150400.24.246.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-amazon-5.14.21-150400.24.246.1 * dtb-marvell-5.14.21-150400.24.246.1 * reiserfs-kmp-64kb-5.14.21-150400.24.246.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.246.1 * dtb-mediatek-5.14.21-150400.24.246.1 * dtb-altera-5.14.21-150400.24.246.1 * dtb-socionext-5.14.21-150400.24.246.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.246.1 * dtb-renesas-5.14.21-150400.24.246.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-lg-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * kernel-64kb-devel-5.14.21-150400.24.246.1 * kselftests-kmp-64kb-5.14.21-150400.24.246.1 * dtb-exynos-5.14.21-150400.24.246.1 * dtb-xilinx-5.14.21-150400.24.246.1 * dtb-apple-5.14.21-150400.24.246.1 * kernel-64kb-extra-5.14.21-150400.24.246.1 * dtb-hisilicon-5.14.21-150400.24.246.1 * dtb-rockchip-5.14.21-150400.24.246.1 * dtb-broadcom-5.14.21-150400.24.246.1 * kernel-64kb-optional-5.14.21-150400.24.246.1 * dtb-cavium-5.14.21-150400.24.246.1 * dtb-arm-5.14.21-150400.24.246.1 * cluster-md-kmp-64kb-5.14.21-150400.24.246.1 * dtb-amd-5.14.21-150400.24.246.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-allwinner-5.14.21-150400.24.246.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-apm-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * dtb-nvidia-5.14.21-150400.24.246.1 * dtb-qcom-5.14.21-150400.24.246.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-freescale-5.14.21-150400.24.246.1 * gfs2-kmp-64kb-5.14.21-150400.24.246.1 * dlm-kmp-64kb-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kselftests-kmp-default-debuginfo-5.14.21-150400.24.246.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kselftests-kmp-default-5.14.21-150400.24.246.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.246.1 * gfs2-kmp-default-5.14.21-150400.24.246.1 * cluster-md-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-qa-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-default-optional-5.14.21-150400.24.246.1 * ocfs2-kmp-default-5.14.21-150400.24.246.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-extra-5.14.21-150400.24.246.1 * kernel-default-livepatch-5.14.21-150400.24.246.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.246.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.246.1 * kernel-default-base-rebuild-5.14.21-150400.24.246.1.150400.24.124.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_246-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_61-debugsource-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_246-default-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-docs-html-5.14.21-150400.24.246.1 * kernel-source-vanilla-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150400.24.246.1 * kernel-zfcpdump-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150400.24.246.1 * kernel-zfcpdump-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 ## References: * https://www.suse.com/security/cve/CVE-2024-39468.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1227103 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280176 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:46:35 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:46:35 -0000 Subject: SUSE-SU-2026:4936-1: important: Security update for the Linux Kernel Message-ID: <179329239558.14553.17401115723359160384@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4936-1 Release Date: 2026-10-29T11:33:30Z Rating: important References: * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277742 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72301 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 27 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4936 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4936 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4936 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4936 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4936 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4936 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4936 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_195-default-debuginfo-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.195.1 * kernel-livepatch-5_14_21-150500_55_195-default-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_47-debugsource-1-150500.11.3.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-livepatch-devel-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * dtb-apple-5.14.21-150500.55.195.1 * dtb-hisilicon-5.14.21-150500.55.195.1 * cluster-md-kmp-64kb-5.14.21-150500.55.195.1 * dtb-exynos-5.14.21-150500.55.195.1 * dtb-nvidia-5.14.21-150500.55.195.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * ocfs2-kmp-64kb-5.14.21-150500.55.195.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-qcom-5.14.21-150500.55.195.1 * dtb-amlogic-5.14.21-150500.55.195.1 * dtb-altera-5.14.21-150500.55.195.1 * kernel-64kb-extra-5.14.21-150500.55.195.1 * dtb-allwinner-5.14.21-150500.55.195.1 * reiserfs-kmp-64kb-5.14.21-150500.55.195.1 * dtb-broadcom-5.14.21-150500.55.195.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.195.1 * dtb-renesas-5.14.21-150500.55.195.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-64kb-5.14.21-150500.55.195.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * dtb-lg-5.14.21-150500.55.195.1 * dtb-amd-5.14.21-150500.55.195.1 * dtb-marvell-5.14.21-150500.55.195.1 * kernel-64kb-optional-5.14.21-150500.55.195.1 * dtb-xilinx-5.14.21-150500.55.195.1 * dlm-kmp-64kb-5.14.21-150500.55.195.1 * dtb-freescale-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * dtb-amazon-5.14.21-150500.55.195.1 * dtb-socionext-5.14.21-150500.55.195.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.195.1 * dtb-cavium-5.14.21-150500.55.195.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-sprd-5.14.21-150500.55.195.1 * dtb-apm-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-mediatek-5.14.21-150500.55.195.1 * dtb-rockchip-5.14.21-150500.55.195.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-arm-5.14.21-150500.55.195.1 * kselftests-kmp-64kb-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-qa-5.14.21-150500.55.195.1 * ocfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-optional-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-livepatch-5.14.21-150500.55.195.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kselftests-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-default-extra-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.195.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-kvmsmall-devel-5.14.21-150500.55.195.1 * kernel-default-base-rebuild-5.14.21-150500.55.195.1.150500.6.91.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_195-default-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_47-debugsource-1-150500.11.3.1 * kernel-default-livepatch-devel-5.14.21-150500.55.195.1 * kernel-livepatch-5_14_21-150500_55_195-default-debuginfo-1-150500.11.3.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-5.14.21-150500.55.195.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-vanilla-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * kernel-docs-html-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.195.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.195.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 ## References: * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:18 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:47:18 -0000 Subject: SUSE-SU-2026:4934-1: important: Security update for the Linux Kernel Message-ID: <179329243863.14553.3730677092461694901@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4934-1 Release Date: 2026-10-29T10:35:56Z Rating: important References: * bsc#1257631 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277599 * bsc#1277804 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280743 * bsc#1281280 * bsc#1281819 * bsc#1282932 * bsc#1283144 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284408 * bsc#1284415 * bsc#1284518 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2025-71183 * CVE-2026-72041 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-93787 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97945 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98366 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2025-71183 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-71183 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-71183 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 29 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4934 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4934 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4934 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4934 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4934 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * reiserfs-kmp-default-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 * kernel-default-devel-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * kernel-devel-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Live Patching 15-SP6 (nosrc) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-default-livepatch-6.4.0-150600.23.143.1 * kernel-livepatch-6_4_0-150600_23_143-default-1-150600.13.5.1 * kernel-livepatch-6_4_0-150600_23_143-default-debuginfo-1-150600.13.5.1 * kernel-livepatch-SLE15-SP6_Update_33-debugsource-1-150600.13.5.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-livepatch-devel-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64) * dlm-kmp-64kb-6.4.0-150600.23.143.1 * kernel-64kb-optional-6.4.0-150600.23.143.1 * kernel-64kb-extra-debuginfo-6.4.0-150600.23.143.1 * dtb-amd-6.4.0-150600.23.143.1 * dtb-nvidia-6.4.0-150600.23.143.1 * dtb-marvell-6.4.0-150600.23.143.1 * dtb-xilinx-6.4.0-150600.23.143.1 * dtb-broadcom-6.4.0-150600.23.143.1 * dtb-apple-6.4.0-150600.23.143.1 * kernel-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-mediatek-6.4.0-150600.23.143.1 * dtb-amazon-6.4.0-150600.23.143.1 * kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-lg-6.4.0-150600.23.143.1 * dtb-exynos-6.4.0-150600.23.143.1 * kernel-64kb-optional-debuginfo-6.4.0-150600.23.143.1 * dtb-altera-6.4.0-150600.23.143.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.143.1 * reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-freescale-6.4.0-150600.23.143.1 * dtb-qcom-6.4.0-150600.23.143.1 * dtb-apm-6.4.0-150600.23.143.1 * dtb-renesas-6.4.0-150600.23.143.1 * kernel-64kb-devel-6.4.0-150600.23.143.1 * kernel-64kb-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-hisilicon-6.4.0-150600.23.143.1 * dtb-arm-6.4.0-150600.23.143.1 * dtb-sprd-6.4.0-150600.23.143.1 * gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-64kb-6.4.0-150600.23.143.1 * dtb-socionext-6.4.0-150600.23.143.1 * cluster-md-kmp-64kb-6.4.0-150600.23.143.1 * dtb-allwinner-6.4.0-150600.23.143.1 * kselftests-kmp-64kb-6.4.0-150600.23.143.1 * reiserfs-kmp-64kb-6.4.0-150600.23.143.1 * dtb-cavium-6.4.0-150600.23.143.1 * kernel-64kb-extra-6.4.0-150600.23.143.1 * dlm-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-amlogic-6.4.0-150600.23.143.1 * ocfs2-kmp-64kb-6.4.0-150600.23.143.1 * cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-rockchip-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kernel-default-livepatch-6.4.0-150600.23.143.1 * kernel-default-extra-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kselftests-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-optional-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * kernel-default-devel-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * kselftests-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-obs-qa-6.4.0-150600.23.143.1 * kernel-default-extra-debuginfo-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-optional-debuginfo-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc) * dtb-aarch64-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc ppc64le x86_64) * kernel-debug-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (ppc64le x86_64) * kernel-debug-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-debugsource-6.4.0-150600.23.143.1 * kernel-debug-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-devel-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (x86_64) * kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-vdso-6.4.0-150600.23.143.1 * kernel-debug-vdso-6.4.0-150600.23.143.1 * kernel-default-vdso-6.4.0-150600.23.143.1 * kernel-default-vdso-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-vdso-debuginfo-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * kernel-default-base-rebuild-6.4.0-150600.23.143.1.150600.12.66.3 * kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-debugsource-6.4.0-150600.23.143.1 * kernel-kvmsmall-devel-6.4.0-150600.23.143.1 * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_143-default-debuginfo-1-150600.13.5.1 * kernel-livepatch-SLE15-SP6_Update_33-debugsource-1-150600.13.5.1 * kernel-default-livepatch-devel-6.4.0-150600.23.143.1 * kernel-livepatch-6_4_0-150600_23_143-default-1-150600.13.5.1 * openSUSE Leap 15.6 (noarch) * kernel-source-vanilla-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * kernel-devel-6.4.0-150600.23.143.1 * kernel-docs-html-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.143.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * kernel-devel-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.143.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64) * kernel-64kb-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-64kb-debuginfo-6.4.0-150600.23.143.1 * kernel-64kb-devel-6.4.0-150600.23.143.1 * kernel-64kb-debugsource-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 ## References: * https://www.suse.com/security/cve/CVE-2025-71183.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1257631 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:30 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:47:30 -0000 Subject: SUSE-SU-2026:4933-1: important: Security update for the Linux Kernel Message-ID: <179329245081.14553.10475813806752545863@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4933-1 Release Date: 2026-10-29T09:17:03Z Rating: important References: * bsc#1277821 * bsc#1280387 * bsc#1281280 * bsc#1285684 Cross-References: * CVE-2026-74587 * CVE-2026-89542 * CVE-2026-90011 * CVE-2026-99999 CVSS scores: * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves four vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes). * ACPI: sysfs: Fix a buffer overrun problem with description_show() (git- fixes). * PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). * PCI: PM: Fix pci_power_up() (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4933 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4933 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (nosrc x86_64) * kernel-default-3.0.101-108.226.1 * kernel-xen-3.0.101-108.226.1 * kernel-ec2-3.0.101-108.226.1 * kernel-trace-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * kernel-trace-debuginfo-3.0.101-108.226.1 * kernel-default-debuginfo-3.0.101-108.226.1 * kernel-xen-debuginfo-3.0.101-108.226.1 * kernel-xen-devel-3.0.101-108.226.1 * kernel-syms-3.0.101-108.226.1 * kernel-xen-base-3.0.101-108.226.1 * kernel-xen-devel-debuginfo-3.0.101-108.226.1 * kernel-default-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-3.0.101-108.226.1 * kernel-trace-debugsource-3.0.101-108.226.1 * kernel-default-base-3.0.101-108.226.1 * kernel-ec2-base-3.0.101-108.226.1 * kernel-trace-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-debuginfo-3.0.101-108.226.1 * kernel-trace-devel-3.0.101-108.226.1 * kernel-ec2-debugsource-3.0.101-108.226.1 * kernel-trace-base-3.0.101-108.226.1 * kernel-default-devel-3.0.101-108.226.1 * kernel-default-debugsource-3.0.101-108.226.1 * kernel-source-3.0.101-108.226.1 * kernel-xen-debugsource-3.0.101-108.226.1 * kernel-ec2-debuginfo-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch nosrc) * kernel-docs-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) * kernel-default-3.0.101-108.226.1 * kernel-xen-3.0.101-108.226.1 * kernel-ec2-3.0.101-108.226.1 * kernel-trace-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * kernel-trace-debuginfo-3.0.101-108.226.1 * kernel-default-debuginfo-3.0.101-108.226.1 * kernel-xen-debuginfo-3.0.101-108.226.1 * kernel-xen-devel-3.0.101-108.226.1 * kernel-syms-3.0.101-108.226.1 * kernel-xen-base-3.0.101-108.226.1 * kernel-xen-devel-debuginfo-3.0.101-108.226.1 * kernel-default-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-3.0.101-108.226.1 * kernel-trace-debugsource-3.0.101-108.226.1 * kernel-default-base-3.0.101-108.226.1 * kernel-ec2-base-3.0.101-108.226.1 * kernel-trace-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-debuginfo-3.0.101-108.226.1 * kernel-trace-devel-3.0.101-108.226.1 * kernel-ec2-debugsource-3.0.101-108.226.1 * kernel-trace-base-3.0.101-108.226.1 * kernel-default-devel-3.0.101-108.226.1 * kernel-default-debugsource-3.0.101-108.226.1 * kernel-source-3.0.101-108.226.1 * kernel-xen-debugsource-3.0.101-108.226.1 * kernel-ec2-debuginfo-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (noarch nosrc) * kernel-docs-3.0.101-108.226.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:47:48 -0000 Subject: SUSE-SU-2026:4932-1: critical: Security update for 389-ds Message-ID: <179329246829.14553.15667644485720984749@8cb11e3fd1c0> # Security update for 389-ds Announcement ID: SUSE-SU-2026:4932-1 Release Date: 2026-10-29T08:54:26Z Rating: critical References: * bsc#1273133 * bsc#1279572 * bsc#1279864 * bsc#1279865 * bsc#1279866 * bsc#1279867 * bsc#1284028 * bsc#1284034 Cross-References: * CVE-2026-11770 * CVE-2026-18355 * CVE-2026-18453 * CVE-2026-18922 * CVE-2026-19843 * CVE-2026-76560 * CVE-2026-86344 * CVE-2026-86345 CVSS scores: * CVE-2026-11770 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-11770 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18355 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18355 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18355 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18453 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18453 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18453 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18922 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18922 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-19843 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19843 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19843 ( NVD ): 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2026-76560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76560 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-76560 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-86344 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86344 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86345 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86345 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86345 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). * CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864). * CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572). * CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865). * CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866). * CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867). * CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028). * CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034). Update to version 2.2.11~git12.1e612cde2: * Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS) * Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947) Update to version 2.2.11~git10.1f26fcebd: * Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913) * Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909) * Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849) * Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838) * Issue 6270 - heap-use-after-free with pwp dictionary path (#7791) * Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854) * iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826) * Migrate pwdchan to base64 0.23 Engine API * Update rust-dependencies Update to version 2.2.11~git1.98ee3aac7: * Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759) * Bump version to 2.2.11 * Security fix for CVE-2026-76560 * Security fix for CVE-2026-19843 * Security fix for CVE-2026-18922 * Security fix for CVE-2026-18453 * Security fix for CVE-2026-18355 * Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs * Fix expiration time check (#7718) * Issue 7774 - Add backport action (#7775) * Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771) * Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768) * CVE-2026-11770 - Fix StartReplicationRequest auth gate response format * Security fix for CVE-2026-11770 * Issue 3082 - Add test389.topologies compatibility shim for backports (#7725) * Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755) * Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730) * Issue 7723 - Range search returns an empty result when its start key is removed (#7724) * Issue 7735 - Heap overflow when parsing objectclass superior (#7736) * Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734) * Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4932 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4932 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4932 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4932 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4932 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-snmp-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-snmp-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11770.html * https://www.suse.com/security/cve/CVE-2026-18355.html * https://www.suse.com/security/cve/CVE-2026-18453.html * https://www.suse.com/security/cve/CVE-2026-18922.html * https://www.suse.com/security/cve/CVE-2026-19843.html * https://www.suse.com/security/cve/CVE-2026-76560.html * https://www.suse.com/security/cve/CVE-2026-86344.html * https://www.suse.com/security/cve/CVE-2026-86345.html * https://bugzilla.suse.com/show_bug.cgi?id=1273133 * https://bugzilla.suse.com/show_bug.cgi?id=1279572 * https://bugzilla.suse.com/show_bug.cgi?id=1279864 * https://bugzilla.suse.com/show_bug.cgi?id=1279865 * https://bugzilla.suse.com/show_bug.cgi?id=1279866 * https://bugzilla.suse.com/show_bug.cgi?id=1279867 * https://bugzilla.suse.com/show_bug.cgi?id=1284028 * https://bugzilla.suse.com/show_bug.cgi?id=1284034 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:55 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:47:55 -0000 Subject: SUSE-SU-2026:4931-1: important: Security update for rust-keylime Message-ID: <179329247560.14553.9778916190256018426@8cb11e3fd1c0> # Security update for rust-keylime Announcement ID: SUSE-SU-2026:4931-1 Release Date: 2026-10-29T08:53:50Z Rating: important References: * bsc#1287921 Cross-References: * CVE-2026-115905 * CVE-2026-115906 * CVE-2026-115907 * CVE-2026-115908 * CVE-2026-115909 CVSS scores: * CVE-2026-115905 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-115905 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115905 ( NVD ): 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-115906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-115906 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-115907 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115907 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115908 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115908 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves five vulnerabilities can now be installed. ## Description: This update for rust-keylime fixes the following issue: * CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) * CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification (bsc#1287921) * CVE-2026-115907: zip: denial of service via unbounded memory allocation in legacy decoders (bsc#1287921) * CVE-2026-115908: zip: path traversal via lexical symlink validation during extraction (bsc#1287921) * CVE-2026-115909: zip: denial of service via uncontrolled memory allocation on symlink targets (bsc#1287921) Changes for rust-keylime: * Update to version 0.2.10+12: * log Agent UUID at push agent startup * Limit actix-web workers * Fix clippy needless_late_init warnings * Unwrap OCTET STRING wrapped EK certificates * build(deps): bump rand from 0.9.4 to 0.10.1 * build(deps): bump glob from 0.3.3 to 0.3.4 * build(deps): bump reqwest from 0.13.3 to 0.13.4 * Check shutdown marker inside ml_extend loop * Fix clippy useless_borrows_in_formatting warnings * build(deps): bump tokio from 1.52.2 to 1.53.1 * Fix payload key upgrade regression by falling back to mTLS key * Accept any RSA key size for payload encryption * Bump version to 0.2.10 * keylime: use runtime OpenSSL algorithm detection instead of compile-time symbols ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4931 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * rust-keylime-0.2.10+12-150500.3.22.1 * rust-keylime-debuginfo-0.2.10+12-150500.3.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-115905.html * https://www.suse.com/security/cve/CVE-2026-115906.html * https://www.suse.com/security/cve/CVE-2026-115907.html * https://www.suse.com/security/cve/CVE-2026-115908.html * https://www.suse.com/security/cve/CVE-2026-115909.html * https://bugzilla.suse.com/show_bug.cgi?id=1287921 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:03 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:48:03 -0000 Subject: SUSE-SU-2026:4930-1: important: Security update for rust-keylime Message-ID: <179329248388.14553.14484043806662524761@8cb11e3fd1c0> # Security update for rust-keylime Announcement ID: SUSE-SU-2026:4930-1 Release Date: 2026-10-29T08:53:35Z Rating: important References: * bsc#1287921 Cross-References: * CVE-2026-115905 * CVE-2026-115906 * CVE-2026-115907 * CVE-2026-115908 * CVE-2026-115909 CVSS scores: * CVE-2026-115905 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-115905 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115905 ( NVD ): 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-115906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-115906 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-115907 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115907 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115908 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115908 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves five vulnerabilities can now be installed. ## Description: This update for rust-keylime fixes the following issue: * CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) * CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification (bsc#1287921) * CVE-2026-115907: zip: denial of service via unbounded memory allocation in legacy decoders (bsc#1287921) * CVE-2026-115908: zip: path traversal via lexical symlink validation during extraction (bsc#1287921) * CVE-2026-115909: zip: denial of service via uncontrolled memory allocation on symlink targets (bsc#1287921) Changes for rust-keylime: * Update to version 0.2.10+12: * log Agent UUID at push agent startup * Limit actix-web workers * Fix clippy needless_late_init warnings * Unwrap OCTET STRING wrapped EK certificates * build(deps): bump rand from 0.9.4 to 0.10.1 * build(deps): bump glob from 0.3.3 to 0.3.4 * build(deps): bump reqwest from 0.13.3 to 0.13.4 * Check shutdown marker inside ml_extend loop * Fix clippy useless_borrows_in_formatting warnings * build(deps): bump tokio from 1.52.2 to 1.53.1 * Fix payload key upgrade regression by falling back to mTLS key * Accept any RSA key size for payload encryption * Bump version to 0.2.10 * keylime: use runtime OpenSSL algorithm detection instead of compile-time symbols ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4930 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4930 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rust-keylime-debuginfo-0.2.10+12-150400.3.22.1 * rust-keylime-0.2.10+12-150400.3.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rust-keylime-debuginfo-0.2.10+12-150400.3.22.1 * rust-keylime-0.2.10+12-150400.3.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-115905.html * https://www.suse.com/security/cve/CVE-2026-115906.html * https://www.suse.com/security/cve/CVE-2026-115907.html * https://www.suse.com/security/cve/CVE-2026-115908.html * https://www.suse.com/security/cve/CVE-2026-115909.html * https://bugzilla.suse.com/show_bug.cgi?id=1287921 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:19 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:48:19 -0000 Subject: SUSE-SU-2026:4929-1: critical: Security update for 389-ds Message-ID: <179329249968.14553.4449169043959993251@8cb11e3fd1c0> # Security update for 389-ds Announcement ID: SUSE-SU-2026:4929-1 Release Date: 2026-10-29T08:52:52Z Rating: critical References: * bsc#1273133 * bsc#1279572 * bsc#1279864 * bsc#1279865 * bsc#1279866 * bsc#1279867 * bsc#1284028 * bsc#1284034 Cross-References: * CVE-2026-11770 * CVE-2026-18355 * CVE-2026-18453 * CVE-2026-18922 * CVE-2026-19843 * CVE-2026-76560 * CVE-2026-86344 * CVE-2026-86345 CVSS scores: * CVE-2026-11770 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-11770 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18355 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18355 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18355 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18453 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18453 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18453 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18922 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18922 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-19843 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19843 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19843 ( NVD ): 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2026-76560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76560 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-76560 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-86344 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86344 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86345 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86345 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86345 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves eight vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). * CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864). * CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572). * CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865). * CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866). * CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867). * CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028). * CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034). Update to version 2.2.11~git12.1e612cde2: * Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS) * Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947) Update to version 2.2.11~git10.1f26fcebd: * Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913) * Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909) * Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849) * Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838) * Issue 6270 - heap-use-after-free with pwp dictionary path (#7791) * Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854) * iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826) * Migrate pwdchan to base64 0.23 Engine API * Update rust-dependencies Update to version 2.2.11~git1.98ee3aac7: * Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759) * Bump version to 2.2.11 * Security fix for CVE-2026-76560 * Security fix for CVE-2026-19843 * Security fix for CVE-2026-18922 * Security fix for CVE-2026-18453 * Security fix for CVE-2026-18355 * Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs * Fix expiration time check (#7718) * Issue 7774 - Add backport action (#7775) * Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771) * Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768) * CVE-2026-11770 - Fix StartReplicationRequest auth gate response format * Security fix for CVE-2026-11770 * Issue 3082 - Add test389.topologies compatibility shim for backports (#7725) * Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755) * Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730) * Issue 7723 - Range search returns an empty result when its start key is removed (#7724) * Issue 7735 - Heap overflow when parsing objectclass superior (#7736) * Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734) * Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4929 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4929 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4929 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-snmp-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-snmp-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11770.html * https://www.suse.com/security/cve/CVE-2026-18355.html * https://www.suse.com/security/cve/CVE-2026-18453.html * https://www.suse.com/security/cve/CVE-2026-18922.html * https://www.suse.com/security/cve/CVE-2026-19843.html * https://www.suse.com/security/cve/CVE-2026-76560.html * https://www.suse.com/security/cve/CVE-2026-86344.html * https://www.suse.com/security/cve/CVE-2026-86345.html * https://bugzilla.suse.com/show_bug.cgi?id=1273133 * https://bugzilla.suse.com/show_bug.cgi?id=1279572 * https://bugzilla.suse.com/show_bug.cgi?id=1279864 * https://bugzilla.suse.com/show_bug.cgi?id=1279865 * https://bugzilla.suse.com/show_bug.cgi?id=1279866 * https://bugzilla.suse.com/show_bug.cgi?id=1279867 * https://bugzilla.suse.com/show_bug.cgi?id=1284028 * https://bugzilla.suse.com/show_bug.cgi?id=1284034 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:31 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:48:31 -0000 Subject: SUSE-SU-2026:4928-1: important: Security update for MozillaFirefox Message-ID: <179329251181.14553.12695153667148235842@8cb11e3fd1c0> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4928-1 Release Date: 2026-10-29T08:52:28Z Rating: important References: * bsc#1286261 * bsc#1286385 * bsc#1286955 * bsc#1287809 Cross-References: * CVE-2026-100801 * CVE-2026-111497 * CVE-2026-113470 * CVE-2026-117860 * CVE-2026-117861 * CVE-2026-117862 * CVE-2026-117863 * CVE-2026-117864 * CVE-2026-117865 * CVE-2026-117866 * CVE-2026-117867 * CVE-2026-117868 * CVE-2026-117869 * CVE-2026-117870 * CVE-2026-117871 * CVE-2026-117872 * CVE-2026-117873 * CVE-2026-117874 * CVE-2026-117875 * CVE-2026-117876 * CVE-2026-117877 * CVE-2026-117878 * CVE-2026-117879 * CVE-2026-117880 * CVE-2026-117881 * CVE-2026-117882 * CVE-2026-117883 * CVE-2026-117884 * CVE-2026-117885 * CVE-2026-117886 * CVE-2026-117887 * CVE-2026-117888 * CVE-2026-117889 * CVE-2026-117890 * CVE-2026-117891 * CVE-2026-117892 * CVE-2026-117893 * CVE-2026-117894 * CVE-2026-117895 * CVE-2026-117896 * CVE-2026-117897 * CVE-2026-117898 * CVE-2026-117899 * CVE-2026-117900 * CVE-2026-117901 * CVE-2026-117902 * CVE-2026-117903 * CVE-2026-117904 * CVE-2026-117905 * CVE-2026-117906 * CVE-2026-117907 * CVE-2026-117908 * CVE-2026-117909 * CVE-2026-117910 * CVE-2026-117911 * CVE-2026-117912 * CVE-2026-117913 * CVE-2026-117914 * CVE-2026-117915 * CVE-2026-117916 * CVE-2026-117917 * CVE-2026-117918 * CVE-2026-117919 * CVE-2026-117920 * CVE-2026-117921 * CVE-2026-117922 * CVE-2026-117923 * CVE-2026-117924 * CVE-2026-117925 * CVE-2026-117926 * CVE-2026-117927 * CVE-2026-117928 * CVE-2026-117929 * CVE-2026-117930 * CVE-2026-117931 * CVE-2026-117932 * CVE-2026-117933 * CVE-2026-117934 * CVE-2026-117935 * CVE-2026-117936 * CVE-2026-117937 * CVE-2026-117938 * CVE-2026-117939 * CVE-2026-117940 * CVE-2026-117941 * CVE-2026-117942 * CVE-2026-117943 * CVE-2026-117944 * CVE-2026-117945 * CVE-2026-117946 * CVE-2026-117947 * CVE-2026-117948 * CVE-2026-117949 * CVE-2026-117950 * CVE-2026-117951 * CVE-2026-117952 * CVE-2026-117953 * CVE-2026-117954 * CVE-2026-117955 * CVE-2026-117956 * CVE-2026-117957 * CVE-2026-117958 * CVE-2026-117959 * CVE-2026-117960 * CVE-2026-117961 * CVE-2026-117962 * CVE-2026-117963 * CVE-2026-117964 * CVE-2026-117965 * CVE-2026-117966 * CVE-2026-117967 * CVE-2026-117968 * CVE-2026-117969 * CVE-2026-117970 * CVE-2026-117971 * CVE-2026-117972 * CVE-2026-117973 * CVE-2026-117974 * CVE-2026-117975 * CVE-2026-117976 * CVE-2026-117977 * CVE-2026-117978 * CVE-2026-117979 * CVE-2026-117980 * CVE-2026-117981 * CVE-2026-117982 * CVE-2026-117983 * CVE-2026-117984 * CVE-2026-117985 * CVE-2026-117986 * CVE-2026-117987 * CVE-2026-117988 * CVE-2026-117989 * CVE-2026-117990 * CVE-2026-117991 * CVE-2026-117992 * CVE-2026-117993 * CVE-2026-117994 * CVE-2026-117995 * CVE-2026-117996 * CVE-2026-117997 * CVE-2026-117998 * CVE-2026-117999 * CVE-2026-118000 * CVE-2026-118002 * CVE-2026-118003 * CVE-2026-118004 CVSS scores: * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-111497 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-111497 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-113470 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-113470 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 147 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow- lists, and other State component (bsc#1286261). * CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component. * CVE-2026-117861: Sandbox escape in the DOM: Navigation component. * CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component. * CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component. * CVE-2026-117864: Sandbox escape in the Form Manager component. * CVE-2026-117865: Use-after-free in the JavaScript: GC component. * CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component. * CVE-2026-117867: Use-after-free in the Layout component. * CVE-2026-117868: Sandbox escape in the DOM: Networking component. * CVE-2026-117869: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117870: Use-after-free in the JavaScript Engine component. * CVE-2026-117871: Invalid pointer in the Graphics component. * CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component. * CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-117874: Use-after-free in the Internationalization component. * CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component. * CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component. * CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component. * CVE-2026-117880: Use-after-free in the XML component. * CVE-2026-117881: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117882: Use-after-free in the Layout component. * CVE-2026-117883: Use-after-free in the DOM: HTML Parser component. * CVE-2026-117884: Use-after-free in the Networking component. * CVE-2026-117885: Use-after-free in the Layout: Grid component. * CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component. * CVE-2026-117887: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component. * CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component. * CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component. * CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component. * CVE-2026-117895: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117896: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component. * CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-117899: Use-after-free in the Networking: HTTP component. * CVE-2026-117900: Use-after-free in the DOM: Editor component. * CVE-2026-117901: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117903: Use-after-free in the Audio/Video component. * CVE-2026-117904: Use-after-free in the JavaScript: GC component. * CVE-2026-117905: Use-after-free in the Audio/Video: Playback component. * CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-117907: Use-after-free in the Networking component. * CVE-2026-117908: Use-after-free in the Graphics: ImageLib component. * CVE-2026-117909: Use-after-free in the JavaScript: GC component. * CVE-2026-117910: Invalid pointer in the JavaScript Engine component. * CVE-2026-117911: Use-after-free in the Audio/Video: Playback component. * CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component. * CVE-2026-117913: Use-after-free in the SVG component. * CVE-2026-117914: Use-after-free in the SVG component. * CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component. * CVE-2026-117916: Use-after-free in the XSLT component. * CVE-2026-117917: Invalid pointer in the Graphics: WebRender component. * CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-117919: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117920: Use-after-free in the DOM: HTML Parser component. * CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-117922: Use-after-free in the Networking: WebSockets component. * CVE-2026-117923: Use-after-free in the Audio/Video component. * CVE-2026-117924: Use-after-free in the XSLT component. * CVE-2026-117925: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117926: Incorrect boundary conditions in the SVG component. * CVE-2026-117927: Use-after-free in the SVG component. * CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component. * CVE-2026-117929: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-117931: Use-after-free in the DOM: Events component. * CVE-2026-117932: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component. * CVE-2026-117934: Use-after-free in the Layout component. * CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-117936: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117937: Invalid pointer in the JavaScript Engine component. * CVE-2026-117938: Use-after-free in the Layout component. * CVE-2026-117939: Use-after-free in the XML component. * CVE-2026-117940: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component. * CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-117943: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117944: Use-after-free in the Layout component. * CVE-2026-117945: Incorrect boundary conditions in the XML component. * CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-117947: Use-after-free in the XML component. * CVE-2026-117948: Use-after-free in the SVG component. * CVE-2026-117949: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component. * CVE-2026-117951: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117952: Uninitialized memory in the Networking component. * CVE-2026-117953: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117954: Use-after-free in the Layout: Positioned component. * CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component. * CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component. * CVE-2026-117958: Site isolation issue in the Networking: HTTP component. * CVE-2026-117959: Site isolation issue in the DOM: Service Workers component. * CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component. * CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component. * CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. * CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component. * CVE-2026-117964: Use-after-free in the Panning and Zooming component. * CVE-2026-117965: Same-origin policy bypass in the Address Bar component. * CVE-2026-117966: Site isolation issue in the Networking: HTTP component. * CVE-2026-117967: Mitigation bypass in the DOM: Security component. * CVE-2026-117968: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component. * CVE-2026-117970: Race condition in the Disability Access APIs component. * CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component. * CVE-2026-117972: Use-after-free in the Graphics component. * CVE-2026-117973: Use-after-free in the Networking: DNS component. * CVE-2026-117974: Use-after-free in the XML component. * CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component. * CVE-2026-117976: Site isolation issue in the DOM: Navigation component. * CVE-2026-117977: Other issue in the Console component. * CVE-2026-117978: Incorrect boundary conditions in the Graphics component. * CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-117980: Use-after-free in the Graphics component. * CVE-2026-117981: Privilege escalation in the Toolkit component. * CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component. * CVE-2026-117983: Use-after-free in the Graphics component. * CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component. * CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-117986: Use-after-free in the Graphics component. * CVE-2026-117987: Use-after-free in the Graphics component. * CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-117989: Use-after-free in the Graphics component. * CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component. * CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component. * CVE-2026-117993: Integer overflow in the Graphics: Text component. * CVE-2026-117994: Use-after-free in the JavaScript: GC component. * CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component. * CVE-2026-117996: Incorrect boundary conditions in the WebRTC component. * CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component. * CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component. * CVE-2026-117999: Race condition in the IPC component. * CVE-2026-118000: Information disclosure in the Networking: HTTP component. * CVE-2026-118002: Information disclosure due to race condition in the Networking component. * CVE-2026-118003: Information disclosure in the Networking: DNS component. * CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4928 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4928 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-153.6.0-118.19.2 * MozillaFirefox-translations-common-153.6.0-118.19.2 * MozillaFirefox-153.6.0-118.19.2 * MozillaFirefox-debugsource-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-debuginfo-153.6.0-118.19.2 * MozillaFirefox-translations-common-153.6.0-118.19.2 * MozillaFirefox-153.6.0-118.19.2 * MozillaFirefox-debugsource-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.6.0-118.19.2 ## References: * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-111497.html * https://www.suse.com/security/cve/CVE-2026-113470.html * https://www.suse.com/security/cve/CVE-2026-117860.html * https://www.suse.com/security/cve/CVE-2026-117861.html * https://www.suse.com/security/cve/CVE-2026-117862.html * https://www.suse.com/security/cve/CVE-2026-117863.html * https://www.suse.com/security/cve/CVE-2026-117864.html * https://www.suse.com/security/cve/CVE-2026-117865.html * https://www.suse.com/security/cve/CVE-2026-117866.html * https://www.suse.com/security/cve/CVE-2026-117867.html * https://www.suse.com/security/cve/CVE-2026-117868.html * https://www.suse.com/security/cve/CVE-2026-117869.html * https://www.suse.com/security/cve/CVE-2026-117870.html * https://www.suse.com/security/cve/CVE-2026-117871.html * https://www.suse.com/security/cve/CVE-2026-117872.html * https://www.suse.com/security/cve/CVE-2026-117873.html * https://www.suse.com/security/cve/CVE-2026-117874.html * https://www.suse.com/security/cve/CVE-2026-117875.html * https://www.suse.com/security/cve/CVE-2026-117876.html * https://www.suse.com/security/cve/CVE-2026-117877.html * https://www.suse.com/security/cve/CVE-2026-117878.html * https://www.suse.com/security/cve/CVE-2026-117879.html * https://www.suse.com/security/cve/CVE-2026-117880.html * https://www.suse.com/security/cve/CVE-2026-117881.html * https://www.suse.com/security/cve/CVE-2026-117882.html * https://www.suse.com/security/cve/CVE-2026-117883.html * https://www.suse.com/security/cve/CVE-2026-117884.html * https://www.suse.com/security/cve/CVE-2026-117885.html * https://www.suse.com/security/cve/CVE-2026-117886.html * https://www.suse.com/security/cve/CVE-2026-117887.html * https://www.suse.com/security/cve/CVE-2026-117888.html * https://www.suse.com/security/cve/CVE-2026-117889.html * https://www.suse.com/security/cve/CVE-2026-117890.html * https://www.suse.com/security/cve/CVE-2026-117891.html * https://www.suse.com/security/cve/CVE-2026-117892.html * https://www.suse.com/security/cve/CVE-2026-117893.html * https://www.suse.com/security/cve/CVE-2026-117894.html * https://www.suse.com/security/cve/CVE-2026-117895.html * https://www.suse.com/security/cve/CVE-2026-117896.html * https://www.suse.com/security/cve/CVE-2026-117897.html * https://www.suse.com/security/cve/CVE-2026-117898.html * https://www.suse.com/security/cve/CVE-2026-117899.html * https://www.suse.com/security/cve/CVE-2026-117900.html * https://www.suse.com/security/cve/CVE-2026-117901.html * https://www.suse.com/security/cve/CVE-2026-117902.html * https://www.suse.com/security/cve/CVE-2026-117903.html * https://www.suse.com/security/cve/CVE-2026-117904.html * https://www.suse.com/security/cve/CVE-2026-117905.html * https://www.suse.com/security/cve/CVE-2026-117906.html * https://www.suse.com/security/cve/CVE-2026-117907.html * https://www.suse.com/security/cve/CVE-2026-117908.html * https://www.suse.com/security/cve/CVE-2026-117909.html * https://www.suse.com/security/cve/CVE-2026-117910.html * https://www.suse.com/security/cve/CVE-2026-117911.html * https://www.suse.com/security/cve/CVE-2026-117912.html * https://www.suse.com/security/cve/CVE-2026-117913.html * https://www.suse.com/security/cve/CVE-2026-117914.html * https://www.suse.com/security/cve/CVE-2026-117915.html * https://www.suse.com/security/cve/CVE-2026-117916.html * https://www.suse.com/security/cve/CVE-2026-117917.html * https://www.suse.com/security/cve/CVE-2026-117918.html * https://www.suse.com/security/cve/CVE-2026-117919.html * https://www.suse.com/security/cve/CVE-2026-117920.html * https://www.suse.com/security/cve/CVE-2026-117921.html * https://www.suse.com/security/cve/CVE-2026-117922.html * https://www.suse.com/security/cve/CVE-2026-117923.html * https://www.suse.com/security/cve/CVE-2026-117924.html * https://www.suse.com/security/cve/CVE-2026-117925.html * https://www.suse.com/security/cve/CVE-2026-117926.html * https://www.suse.com/security/cve/CVE-2026-117927.html * https://www.suse.com/security/cve/CVE-2026-117928.html * https://www.suse.com/security/cve/CVE-2026-117929.html * https://www.suse.com/security/cve/CVE-2026-117930.html * https://www.suse.com/security/cve/CVE-2026-117931.html * https://www.suse.com/security/cve/CVE-2026-117932.html * https://www.suse.com/security/cve/CVE-2026-117933.html * https://www.suse.com/security/cve/CVE-2026-117934.html * https://www.suse.com/security/cve/CVE-2026-117935.html * https://www.suse.com/security/cve/CVE-2026-117936.html * https://www.suse.com/security/cve/CVE-2026-117937.html * https://www.suse.com/security/cve/CVE-2026-117938.html * https://www.suse.com/security/cve/CVE-2026-117939.html * https://www.suse.com/security/cve/CVE-2026-117940.html * https://www.suse.com/security/cve/CVE-2026-117941.html * https://www.suse.com/security/cve/CVE-2026-117942.html * https://www.suse.com/security/cve/CVE-2026-117943.html * https://www.suse.com/security/cve/CVE-2026-117944.html * https://www.suse.com/security/cve/CVE-2026-117945.html * https://www.suse.com/security/cve/CVE-2026-117946.html * https://www.suse.com/security/cve/CVE-2026-117947.html * https://www.suse.com/security/cve/CVE-2026-117948.html * https://www.suse.com/security/cve/CVE-2026-117949.html * https://www.suse.com/security/cve/CVE-2026-117950.html * https://www.suse.com/security/cve/CVE-2026-117951.html * https://www.suse.com/security/cve/CVE-2026-117952.html * https://www.suse.com/security/cve/CVE-2026-117953.html * https://www.suse.com/security/cve/CVE-2026-117954.html * https://www.suse.com/security/cve/CVE-2026-117955.html * https://www.suse.com/security/cve/CVE-2026-117956.html * https://www.suse.com/security/cve/CVE-2026-117957.html * https://www.suse.com/security/cve/CVE-2026-117958.html * https://www.suse.com/security/cve/CVE-2026-117959.html * https://www.suse.com/security/cve/CVE-2026-117960.html * https://www.suse.com/security/cve/CVE-2026-117961.html * https://www.suse.com/security/cve/CVE-2026-117962.html * https://www.suse.com/security/cve/CVE-2026-117963.html * https://www.suse.com/security/cve/CVE-2026-117964.html * https://www.suse.com/security/cve/CVE-2026-117965.html * https://www.suse.com/security/cve/CVE-2026-117966.html * https://www.suse.com/security/cve/CVE-2026-117967.html * https://www.suse.com/security/cve/CVE-2026-117968.html * https://www.suse.com/security/cve/CVE-2026-117969.html * https://www.suse.com/security/cve/CVE-2026-117970.html * https://www.suse.com/security/cve/CVE-2026-117971.html * https://www.suse.com/security/cve/CVE-2026-117972.html * https://www.suse.com/security/cve/CVE-2026-117973.html * https://www.suse.com/security/cve/CVE-2026-117974.html * https://www.suse.com/security/cve/CVE-2026-117975.html * https://www.suse.com/security/cve/CVE-2026-117976.html * https://www.suse.com/security/cve/CVE-2026-117977.html * https://www.suse.com/security/cve/CVE-2026-117978.html * https://www.suse.com/security/cve/CVE-2026-117979.html * https://www.suse.com/security/cve/CVE-2026-117980.html * https://www.suse.com/security/cve/CVE-2026-117981.html * https://www.suse.com/security/cve/CVE-2026-117982.html * https://www.suse.com/security/cve/CVE-2026-117983.html * https://www.suse.com/security/cve/CVE-2026-117984.html * https://www.suse.com/security/cve/CVE-2026-117985.html * https://www.suse.com/security/cve/CVE-2026-117986.html * https://www.suse.com/security/cve/CVE-2026-117987.html * https://www.suse.com/security/cve/CVE-2026-117988.html * https://www.suse.com/security/cve/CVE-2026-117989.html * https://www.suse.com/security/cve/CVE-2026-117990.html * https://www.suse.com/security/cve/CVE-2026-117991.html * https://www.suse.com/security/cve/CVE-2026-117992.html * https://www.suse.com/security/cve/CVE-2026-117993.html * https://www.suse.com/security/cve/CVE-2026-117994.html * https://www.suse.com/security/cve/CVE-2026-117995.html * https://www.suse.com/security/cve/CVE-2026-117996.html * https://www.suse.com/security/cve/CVE-2026-117997.html * https://www.suse.com/security/cve/CVE-2026-117998.html * https://www.suse.com/security/cve/CVE-2026-117999.html * https://www.suse.com/security/cve/CVE-2026-118000.html * https://www.suse.com/security/cve/CVE-2026-118002.html * https://www.suse.com/security/cve/CVE-2026-118003.html * https://www.suse.com/security/cve/CVE-2026-118004.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286385 * https://bugzilla.suse.com/show_bug.cgi?id=1286955 * https://bugzilla.suse.com/show_bug.cgi?id=1287809 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:49:11 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 16:49:11 -0000 Subject: SUSE-SU-2026:4927-1: critical: Security update for libapr1, libtcnative-1-0, tomcat Message-ID: <179329255122.14553.7468618203334561558@8cb11e3fd1c0> # Security update for libapr1, libtcnative-1-0, tomcat Announcement ID: SUSE-SU-2026:4927-1 Release Date: 2026-10-29T08:51:54Z Rating: critical References: * bsc#1130843 * bsc#1151059 * bsc#1199170 * bsc#1260322 * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#1286361 * bsc#1286362 * bsc#1286502 * bsc#1286555 * bsc#1286559 * bsc#1286571 * bsc#1286902 Cross-References: * CVE-2017-12613 * CVE-2023-49582 * CVE-2026-101296 * CVE-2026-101356 * CVE-2026-41293 * CVE-2026-73581 * CVE-2026-74048 * CVE-2026-74049 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-80353 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 * CVE-2026-88041 * CVE-2026-93446 CVSS scores: * CVE-2017-12613 ( SUSE ): 3.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L * CVE-2017-12613 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2017-12613 ( NVD ): 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-49582 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2023-49582 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49582 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49582 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-101296 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-101296 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-101296 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101356 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-101356 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-101356 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41293 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-41293 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41293 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-74048 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-74048 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-74049 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74049 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80353 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80353 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-88041 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88041 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93446 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93446 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 25 vulnerabilities and has one security fix can now be installed. ## Description: This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). * CVE-2026-74049: Jasper JSTL plug-in implementation omits page abort (bsc#1286555). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-80353: TOCTOU when creating unix domain sockets for the APR/Native connector allows an unauthorized local user to access the unix domain socket (bsc#1286902). * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). * CVE-2026-88041: Information disclosure via incomplete HTTP trailer cleanup (bsc#1286559). * CVE-2026-93446: Possible TLS 1.3 connection failures (bsc#1286571). * CVE-2026-101296: Authentication bypass via non-GSSAPI SASL in JNDI realm (bsc#1286361). * CVE-2026-101356: Information disclosure via incorrect object recycling in HTTP/2 processing (bsc#1286362). Non security issue fixed: * Tomcat TLS Broken - Tomcat 9.0.14 update incompatible with tomcat-native (bsc#1130843). Changes for libapr1: Update to 1.6.5: * Fix Win32 build breakage in apr_os_exp_time_put() in 1.6.4 * Fix apr_parse_addr_port() regression in scope_id parsing introduced in 1.6.3 * Numerous corrections to APR poll behavior * apr_file_trunc: Truncating a buffered file could add unexpected data after the truncate position * apr_file_trunc: Fix an issue where reading from a buffered file after truncate could return stale data from the buffer * apr_ipsubnet_create() now fails for an empty input string * Fix CVE-2017-12613, out-of-bounds read in apr_time_exp*() * Export build files find_apr.m4 and apr_common.m4 * apr_proc_mutex-pthread: Refcount shared mutexes usage to avoid destruction while still in use by some process(es) * New APIs: apr_allocator_align(), apr_os_proc_mutex_put_ex(), apr_os_proc_mutex_get_ex(), apr_os_proc_mutex_set_ex(), apr_file_pipe_create_pools(), apr_pollcb_wakeup(), apr_pollcb_method_name(), apr_cstr__(), apr_skiplist_addne_(), apr_skiplist_size(), apr_skiplist_height(), apr_skiplist_preheight(), apr_skiplist_set_preheight(), apr_skiplist_add(), apr_sockaddr_info_copy(), apr_shm_delete(), apr_escape_ldap() and apr_pescape_ldap() * Add APR_OVERLAP_TABLES_ADD, APR_SO_FREEBIND and the APR_PERMS_SET macros * Add Unix domain socket support * New configure options --enable-allocator-guard-pages and \--enable-pool- concurrency-check Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method * restore openssl 1.1.1 support * Update to 1.3.8 * Fix a memory leak when parsing certificates * Fix two potential memory leaks on error paths identified by Copilot * Fix post handshake authentication when Tomcat is configured with a trust store using JSSE style configuration * Correct expected size of tickets when calling SSLContext.setSessionTicketKeys * Update to 1.3.7: [bsc#1260322] 1.3.7 * Code: Refactor access to ASN1_OCTET_STRING to use setters to fix errors when building against the latest OpenSSL 4.0.x code. (markt) * Fix: Fix the handling of OCSP requests with multiple responder URIs. (jfclere) * Fix: Fix the handling of TRY_AGAIN responses to OCSP requests when soft fail is disabled. (jfclere) 1.3.6 * Code: Refactor the SSL_CONF_CTX clean-up to align it with SSL and SSL_CTX clean-up. (markt) * Fix: Fix unnecessarily large buffer allocation when filtering out NULL and export ciphers. Pull requests #35 and #37 provided by chenjp. (markt) * Fix: Fix a potential memory leak if an invalid OpenSSLConf is provided. Pull request #36 provided by chenjp. (markt) * Fix: Refactor setting of OCSP configuration defaults as they were only applied if the SSL_CONF_CTX was used. While one was always used with Tomcat versions aware of the OCSP configuration options, one was not always used with Tomcat versions unaware of the OCSP configuration options leading to OCSP verification being enabled by default when the expected behaviour was disabled by default. (markt) * Code: Improve performance for the rare case of handling large OCSP responses. (markt) 1.3.5 * Fix: Remove group write permissions from the files in the tar.gz source archive. (markt) * Fix: Clear an additional error in OCSP processing that was preventing OCSP soft fail working with Tomcat's APR/native connector. (markt) 1.3.4 * Fix: Correct logic error that prevented the configuration of TLS 1.3 cipher suites. (markt) 1.3.3 * Fix: Refactor the addition of TLS 1.3 cipher suite configuration to avoid a regression when running a version of Tomcat that pre-dates this change. (markt) 1.3.2 * Update: Rename configure.in to modern autotools style configure.ac. (rjung) * Update: Fix incomplete updates for autotools generated files during "buildconf" execution. (rjung) * Update: Improve quoting in tcnative.m4. (rjung) * Update: Update the minimum version of autoconf for releasing to 2.68. * Fix: Fix the autoconf warnings when creating a release. (markt) * Update: The Windows binaries are now built with OCSP support enabled by default. (markt) * Add: Include a nonce with OCSP requests and check the nonce, if any, in the OCSP response. (markt) * Add: Expand verification of OCSP responses. (markt) * Add: Add the ability to configure the OCSP checks to soft-fail - i.e. if the responder cannot be contacted or fails to respond in a timely manner the OCSP check will not fail. (markt) * Add: Add a configurable timeout to the writing of OCSP requests and reading of OCSP responses. (markt) * Add: Add the ability to control the OCSP verification flags. (markt) * Add: Configure TLS 1.3 connections from the provided ciphers list as well as connections using TLS 1.2 and earlier. Pull request provided by gastush. (markt) * Update: Update the Windows build environment to use Visual Studio * (markt) 1.3.1 * Fix: Fix a crash on Windows when SSLContext.setCACertificate() is invoked with a null value for caCertificateFile and a non-null value for caCertificatePath until properly addressed with https://github.com/openssl/openssl/issues/24416. (michaelo) * Add: Use ERR_error_string_n with a definite buffer length as a named constant. (schultz) * Add: Ensure local reference capacity is available when creating new arrays and Strings. (schultz) * Update: Update the recommended minimum version of OpenSSL to 3.0.14. 1.3.0 * Update: Drop useless compile.optimize option. (michaelo) * Update: Align Java source compile configuration with Tomcat. (michaelo) * Fix: Fix version set in DLL header on Windows. (michaelo) * Update: Remove an unreachable if condition around CRLs in sslcontext.c. (michaelo) * Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(), the default verify paths are no longer set. Only the explicitly configured trust store, if any, will be used. (michaelo) * Update: Update the minimum supported version of LibreSSL to 3.5.2. * Design: Remove NPN support as NPN was never standardised and browser support was removed in 2019. (markt) * Update: Update the recommended minimum version of OpenSSL to 3.0.13. * Fix build after removal of the default %%{java_home} define * Update to 1.2.39: * Fix: 67061: If the insecure optionalNoCA certificate verification mode is used, disable OCSP if enabled else client certificates from unknown certificate authorities will be rejected. * Update: Update the recommended minimum version of OpenSSL to 3.0.11. * Change the hardcoded libopenssl-1_1-devel to libopenssl-devel for distributions that have the right version * Version update to version 1.2.38: * Align default pass phrase prompt with HTTPd. * # 66669: Fix memory leak in SNI processing. * Update the recommended minimum version of OpenSSL to 1.1.1v. * Update the recommended minimum version of APR to 1.7.4. * Document the TLS rengotiation behaviour. * Add HOWTO-RELEASE.txt that describes the release process. * Refactor library initialization so it is compatible with Tomcat 10.1.x onwards where a number of Java classes have been removed. * Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to allow clients to determine if the FIPS provider is being used when Tomcat Native is compiled against OpenSSL 3.x. * # 66035: Fix crash when attempting to read TLS session ID after a handshake failure. * Enable download_deps.sh to be called from any directory. * Fix release script so it works with the current git layout. * # 65441: Correct previous fix that enabled building to continue with OpenSSL 3.x. * # 65659: Remove remaining reference to pkg-config which is no longer included in the Tomcat Native distribution. * # 65181: Additional changes required to provided support for using OpenSSL Engines that use proprietary key formats. * # 65329: Correct handling of WINVER in make file to use correct constant for Windows 7. Add constants for Windows 8, Windows 8.1 and Windows 10. Rename WINNT to WIN2k as it is used for Windows 2000 upwards, not Windows NT upwards. * Add a patch for APR that fixes an issue where some Windows systems in some configurations would only listen on IPv6 addresses on dual stack systems even though configured to listen on both IPv6 and IPv4 addresses. * Correct a regression in the fix for 65181 that prevented an error message from being displayed if an invalid key file was provided and no OpenSSL Engine was configured. * # 65181: Improve support for using OpenSSL Engines that use proprietary key formats. * Enable building to continue against OpenSSL 3.x and 1.1.1. * Incomplete name mangling fix for C++ compilers in tcn_api.h. * Improve OS-specific header include for native thread id. * Disable keylog callback support for LibreSSL. * Add support for SSLContext.addChainCertificateRaw() with LibreSSL 2.9.1 and up. * Add support for HP-UX's _lwp_self() in our ssl_thread_id(void). * Remove default option passed for rpath to linker on HP-UX. * Add an option to allow the OCSP responder check to be bypassed. Note that if OCSP is enabled, a missing responder is now treated as an error. * # 64429: Fix compilation with LibreSSL. * # 63671: libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support. * Correct configure message for OpenSSL libdir. * # 64260: Clean up install target. * # 64315: configure output for OpenSSL wrong/incomplete sometimes. * Drop obsolete build time workarounds for HP-UX. * Add support for FreeBSD's pthread_getthreadid_np() in our ssl_thread_id(void). * # 64316: Introduce tcn_get_thread_id(void) to reduce code duplication. * Fix linking against OpenSSL in non-standard locations on FreeBSD. * Add GPG keyring. * Version update to version 1.2.23: * See changelog.html for in-depth upstream changes * Version update to version 1.2.21: * Fix incompatibility with Tomcat (bsc#1130843) * Version update to version 1.2.16: * Fixes build breakage with newer version of openssl * Version update to version 1.2.4: * This connector to properly work requires openssl 1.0.2 or newer so do not backport to other codestreams. * Remove keyring file as there is new keyring and I didn't find it on the web * Update to version 1.1.32 * Fix: 53952: Add support for TLSv1.2 and TLSv1.1. * Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries. * Update: Use APR 1.5.1 with Windows binaries * version 1.1.30 * Fixed double-free in ssl_ocsp_request. Patch provided by Aristotelis. * Other minor bugfixes. Changes for tomcat: Update to Tomcat 9.0.123 * Catalina * Fix: When starting a web application, don't try and use the web application class loader until after the web application class loader has started. (markt) * Fix: various concurrency issues around adding and removing Realms from a CombinedRealm, in particular doing so while the CombinedRealm is in use. Note that once a Realm instance has been removed from a CombinedRealm instance at run-time, the removed Realm instance may not be reused apart from re-adding it to the same CombinedRealm. (markt) * Update: When StoreConfig re-writes an existing server.xml or context configuration file, preserve the layout of the existing file (comments, blank lines and attribute order) on a best effort basis. (remm) * Fix: Track in StandardContext whether the context was deployed from a Context element in server.xml. Use it to have StoreConfig save to a new config file. (remm) * Fix: Improve error handling on start-up. (markt) * Fix: byte range responses generated by DefaultServlet so a short resource stream read does not truncate the response. Treat a premature end of stream as an I/O error. Based on pull request #1067 by aoto-tech. (markt) * Fix: Align OpenSSLLifecycleListener with AprLifecycleListener and throw an Error when FIPS is requested but not available. (markt) * Fix: Ensure that, as per the documentation, a simple bind is always used when the JNDI realm binds using the user provided name and password to authenticate the user. (markt) * Update: Optimize Accept-Language header processing and use of resource budles for localization. (remm) * Coyote * Fix: 70236: Fix a stalled TLS handshake with the OpenSSL based implementations of SSLEngine when the first flight of handshake messages sent by the server is too large to fit in the buffer used by the BIO pair. Patch submitted by Lukas Hellebrandt. (remm) * Fix: #1073: Fix possible corruption when using HTTP/2 and async IO on uploads. Submitted by Tim Burke. (remm) * Fix: Avoid very rare race between async write notification and completion. Skip the write notification in these cases since it would be useless. (remm) * Fix: a timing issue that could cause large non-blocking writes to stall for AJP connections. (markt) * Fix: Ensure that the non-blocking write buffer is empty before sending an AJP end response message. (markt) * Fix: CharChunk.indexOf(char) so that it searches from the start of the chunk rather than from twice the chunk's start offset when the chunk does not begin at the start of its buffer. (breken-ai) * Fix: 70247: Fix a leak in the HTTP/2 connection flow control window when part of the HTTP request body is received but not read. Based on a patch provided by Guillaume Darmont. (markt) * Fix: 70251: Avoid closing a JarFile in CloseableURLConnection unless it is certain the JAR is not shared. (remm) * Fix: possible corruption of HTTP/1.1 chunked response bodies if a previous write to a chunked body fails. (markt) * Fix: Align cipher order with the results produced by OpenSSL if the cipher specification adds, removes and then re-adds ciphers. (markt) * Add: new attributes (unixDomainSocketParentPermissions and unixDomainSocketParentOwner) to the APR/Native connector to provide additional control over the security of Unix Domain Sockets. Additional checks (enabled by default) have also been added for the directory where the Unix Domain Socket will be created.(markt) * Fix: Correct a narrow race condition when processing HTTP/2 headers. * Fix: possible TLS connections failures caused by one of the flags Tomcat uses to track TLS handshake progress not being correctly reset. (markt) * Fix: Allow for absolute host names in SNI checks. (markt) * Fix: Correct a gap in asynchronous error handling that could lead to unexpected IllegalStateExceptions for some error conditions. (markt) * Add: Harden HTTP/2 against applications that do not correctly handle asynchronous errors. (markt) * Jasper * Fix: Route JspC servlet context logging through Ant when used as an Ant task. (sainadh777) * Fix: the tag plugin for the JSTL tag so that page processing ends with the redirect. (markt) * Web applications * Add: Documentation: Explicitly state that virtual host matching via the HTTP host header and TLS configuration matching via SNI are completely separate processes. (markt) * Fix: Examples: Draw axis-aligned rectangles and ellipses as lines in the WebSocket drawboard. (sainadh777) * Other * Update: the internal fork of Apache Commons BCEL to 6.13.0. (markt) * Update: to NSIS 3.13. (markt) * Update: to Byte Buddy 1.18.14. (markt) * Update: to Bouncy Castle 1.8.6. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji. (markt) * Cluster * Fix: Replicate SSO session key set changes made by removeSession() and sessionChangedId() in ClusterSingleSignOn so that SSO entries are correctly deregistered and removed from all nodes when the last associated session expires, even when the sessions expire on different cluster nodes. (remm) * Fix: Move context attributes that were set while the web application was still starting into the replicated attribute map when it is installed in ReplicatedContext, so that they are replicated to the other nodes like attributes set later on rather than remaining local to the node that started the application. (remm) * Fix: a possible deadlock in DeltaSession.expire(): the final session delta is now captured and sent to the cluster before the session monitor is acquired, because obtaining the delta takes the delta lock and code that runs while the delta lock is held, such as session attribute listener notifications, may in turn wait for the session monitor. (remm) * Fix: Fire the documented send_message_failure lifecycle event with the message, destination and exception when a SimpleTcpCluster message send fails and notifyLifecycleListenerOnFailure is enabled. The event was previously declared but never fired. (remm) * Fix: a possible deadlock in DeltaSession: session attribute listeners are no longer called while the delta lock is held when attributes are set or removed. The delta lock is only held while the change is recorded. (markt) * Fix: a possible deadlock in DeltaSession: received session deltas are now read into a separate DeltaRequest from the one the session uses to record local changes. This avoids having to hold the delta lock while processing received changes. (markt) * Fix: an issue replicating SessionListener additions and removals that meant some modification were not replicated leading to inconsistent listener configurations across the cluster. (markt) * Tribes * Docs: Document Tribes channel, membership, transport and replication status available through JMX. Based on pull request #1071 by sainadh777. * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4927 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4927 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libapr1-debuginfo-1.6.5-4.13.1 * libtcnative-1-0-debuginfo-1.3.9-3.9.1 * libtcnative-1-0-debugsource-1.3.9-3.9.1 * libtcnative-1-0-1.3.9-3.9.1 * libtcnative-1-0-devel-1.3.9-3.9.1 * libapr1-devel-1.6.5-4.13.1 * libapr1-debugsource-1.6.5-4.13.1 * libapr1-1.6.5-4.13.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * tomcat-webapps-9.0.123-3.182.2 * tomcat-el-3_0-api-9.0.123-3.182.2 * tomcat-docs-webapp-9.0.123-3.182.2 * tomcat-jsp-2_3-api-9.0.123-3.182.2 * tomcat-admin-webapps-9.0.123-3.182.2 * tomcat-lib-9.0.123-3.182.2 * tomcat-9.0.123-3.182.2 * tomcat-servlet-4_0-api-9.0.123-3.182.2 * tomcat-javadoc-9.0.123-3.182.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libapr1-debuginfo-1.6.5-4.13.1 * libtcnative-1-0-debuginfo-1.3.9-3.9.1 * libtcnative-1-0-debugsource-1.3.9-3.9.1 * libtcnative-1-0-1.3.9-3.9.1 * libtcnative-1-0-devel-1.3.9-3.9.1 * libapr1-devel-1.6.5-4.13.1 * libapr1-debugsource-1.6.5-4.13.1 * libapr1-1.6.5-4.13.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * tomcat-webapps-9.0.123-3.182.2 * tomcat-el-3_0-api-9.0.123-3.182.2 * tomcat-docs-webapp-9.0.123-3.182.2 * tomcat-jsp-2_3-api-9.0.123-3.182.2 * tomcat-admin-webapps-9.0.123-3.182.2 * tomcat-lib-9.0.123-3.182.2 * tomcat-9.0.123-3.182.2 * tomcat-servlet-4_0-api-9.0.123-3.182.2 * tomcat-javadoc-9.0.123-3.182.2 ## References: * https://www.suse.com/security/cve/CVE-2017-12613.html * https://www.suse.com/security/cve/CVE-2023-49582.html * https://www.suse.com/security/cve/CVE-2026-101296.html * https://www.suse.com/security/cve/CVE-2026-101356.html * https://www.suse.com/security/cve/CVE-2026-41293.html * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-74048.html * https://www.suse.com/security/cve/CVE-2026-74049.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-80353.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://www.suse.com/security/cve/CVE-2026-88041.html * https://www.suse.com/security/cve/CVE-2026-93446.html * https://bugzilla.suse.com/show_bug.cgi?id=1130843 * https://bugzilla.suse.com/show_bug.cgi?id=1151059 * https://bugzilla.suse.com/show_bug.cgi?id=1199170 * https://bugzilla.suse.com/show_bug.cgi?id=1260322 * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=1286361 * https://bugzilla.suse.com/show_bug.cgi?id=1286362 * https://bugzilla.suse.com/show_bug.cgi?id=1286502 * https://bugzilla.suse.com/show_bug.cgi?id=1286555 * https://bugzilla.suse.com/show_bug.cgi?id=1286559 * https://bugzilla.suse.com/show_bug.cgi?id=1286571 * https://bugzilla.suse.com/show_bug.cgi?id=1286902 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:32:52 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 20:32:52 -0000 Subject: SUSE-SU-2026:4940-1: important: Security update for the Linux Kernel Message-ID: <179330597257.14826.1265415314609883802@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4940-1 Release Date: 2026-10-29T13:42:24Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264295 * bsc#1264614 * bsc#1264622 * bsc#1264851 * bsc#1265000 * bsc#1266694 * bsc#1266730 * bsc#1266757 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275518 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1281991 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283795 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283945 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284429 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285880 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43132 * CVE-2026-43184 * CVE-2026-43283 * CVE-2026-43299 * CVE-2026-43457 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-46034 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-90430 * CVE-2026-92488 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97571 * CVE-2026-97574 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43132 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43132 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43184 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-43184 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-43184 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43283 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46034 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Real Time Module 15-SP7 An update that solves 108 vulnerabilities, contains two features and has six security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). * CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). * CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283945). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * s390/cio: Purge based on the cdev's online status (bsc#1284429). * s390/topology: Use zero-based numbering for containing (bsc#1275518). * selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4940 * SUSE Real Time Module 15-SP7 zypper in -t patch SUSE-SLE-Module-RT-15-SP7-2026-4940 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_81-rt-1-150700.1.3.1 * kernel-livepatch-SLE15-SP7-RT_Update_22-debugsource-1-150700.1.3.1 * kernel-livepatch-6_4_0-150700_7_81-rt-debuginfo-1-150700.1.3.1 * SUSE Real Time Module 15-SP7 (x86_64) * kernel-rt-devel-6.4.0-150700.7.81.1 * gfs2-kmp-rt-6.4.0-150700.7.81.1 * ocfs2-kmp-rt-6.4.0-150700.7.81.1 * kernel-rt-debugsource-6.4.0-150700.7.81.1 * dlm-kmp-rt-6.4.0-150700.7.81.1 * kernel-rt-devel-debuginfo-6.4.0-150700.7.81.1 * cluster-md-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * ocfs2-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * kernel-rt-debuginfo-6.4.0-150700.7.81.1 * cluster-md-kmp-rt-6.4.0-150700.7.81.1 * gfs2-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * kernel-syms-rt-6.4.0-150700.7.81.1 * dlm-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * SUSE Real Time Module 15-SP7 (noarch) * kernel-devel-rt-6.4.0-150700.7.81.1 * kernel-source-rt-6.4.0-150700.7.81.1 * SUSE Real Time Module 15-SP7 (nosrc x86_64) * kernel-rt-6.4.0-150700.7.81.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43132.html * https://www.suse.com/security/cve/CVE-2026-43184.html * https://www.suse.com/security/cve/CVE-2026-43283.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-43457.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-46034.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264295 * https://bugzilla.suse.com/show_bug.cgi?id=1264614 * https://bugzilla.suse.com/show_bug.cgi?id=1264622 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1265000 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1266757 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275518 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284429 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285880 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:33:07 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 20:33:07 -0000 Subject: SUSE-SU-2026:4941-1: important: Security update for python313 Message-ID: <179330598785.14826.7007018353730638379@f5dd93353bb2> # Security update for python313 Announcement ID: SUSE-SU-2026:4941-1 Release Date: 2026-10-29T14:06:00Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves seven vulnerabilities and has one security fix can now be installed. ## Description: This update for python313 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python313: * Updated to version 3.13.16. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4941 ## Package List: * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python313-curses-debuginfo-3.13.16-150700.4.61.1 * libpython3_13-1_0-debuginfo-3.13.16-150700.4.61.1 * python313-curses-3.13.16-150700.4.61.1 * python313-3.13.16-150700.4.61.1 * python313-core-debugsource-3.13.16-150700.4.61.1 * python313-tk-3.13.16-150700.4.61.1 * libpython3_13-1_0-3.13.16-150700.4.61.1 * python313-base-3.13.16-150700.4.61.1 * python313-base-debuginfo-3.13.16-150700.4.61.1 * python313-idle-3.13.16-150700.4.61.1 * python313-tk-debuginfo-3.13.16-150700.4.61.1 * python313-debuginfo-3.13.16-150700.4.61.1 * python313-dbm-3.13.16-150700.4.61.1 * python313-devel-3.13.16-150700.4.61.1 * python313-tools-3.13.16-150700.4.61.1 * python313-dbm-debuginfo-3.13.16-150700.4.61.1 * python313-debugsource-3.13.16-150700.4.61.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:33:48 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 20:33:48 -0000 Subject: SUSE-SU-2026:4939-1: important: Security update for the Linux Kernel Message-ID: <179330602890.14826.656219380558491843@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4939-1 Release Date: 2026-10-29T13:40:42Z Rating: important References: * bsc#1227103 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277821 * bsc#1280176 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2024-39468 * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2024-39468 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves 27 vulnerabilities and has one security fix can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issue was fixed: * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4939 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4939 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.192.2 * kernel-rt-debugsource-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.192.2 * kernel-rt-debugsource-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.192.2 ## References: * https://www.suse.com/security/cve/CVE-2024-39468.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1227103 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280176 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:34:28 2026 From: null at suse.de (SLE-UPDATES) Date: Thu, 29 Oct 2026 20:34:28 -0000 Subject: SUSE-SU-2026:4938-1: important: Security update for the Linux Kernel Message-ID: <179330606831.14826.5042873165314294150@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4938-1 Release Date: 2026-10-29T13:39:41Z Rating: important References: * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277742 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72301 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves 27 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issue was fixed: * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4938 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4938 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-devel-5.14.21-150500.13.167.2 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * cluster-md-kmp-rt-5.14.21-150500.13.167.2 * kernel-syms-rt-5.14.21-150500.13.167.1 * kernel-rt-devel-5.14.21-150500.13.167.2 * kselftests-kmp-rt-5.14.21-150500.13.167.2 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * reiserfs-kmp-rt-5.14.21-150500.13.167.2 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-debugsource-5.14.21-150500.13.167.2 * kernel-rt-livepatch-devel-5.14.21-150500.13.167.2 * kernel-rt-vdso-5.14.21-150500.13.167.2 * kernel-rt-optional-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-devel-debuginfo-5.14.21-150500.13.167.2 * dlm-kmp-rt-5.14.21-150500.13.167.2 * kernel-rt-extra-5.14.21-150500.13.167.2 * kernel-rt-livepatch-5.14.21-150500.13.167.2 * kernel-rt_debug-debugsource-5.14.21-150500.13.167.2 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-vdso-5.14.21-150500.13.167.2 * kernel-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-extra-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.167.2 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * gfs2-kmp-rt-5.14.21-150500.13.167.2 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * ocfs2-kmp-rt-5.14.21-150500.13.167.2 * kernel-rt-optional-5.14.21-150500.13.167.2 * kernel-rt_debug-debuginfo-5.14.21-150500.13.167.2 * openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.167.2 * kernel-source-rt-5.14.21-150500.13.167.2 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.167.2 * kernel-rt_debug-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.167.2 * kernel-source-rt-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-debugsource-5.14.21-150500.13.167.2 ## References: * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:30:35 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 08:30:35 -0000 Subject: SUSE-SU-2026:4946-1: important: Security update for python311 Message-ID: <179334903536.17944.2774784367381499158@8cb11e3fd1c0> # Security update for python311 Announcement ID: SUSE-SU-2026:4946-1 Release Date: 2026-10-29T19:05:19Z Rating: important References: * bsc#1267974 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to version 3.11.17. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4946 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4946 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4946 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4946 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4946 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * python311-testsuite-debuginfo-3.11.17-150600.3.74.1 * python311-doc-devhelp-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-testsuite-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-doc-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (x86_64) * python311-base-32bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-32bit-debuginfo-3.11.17-150600.3.74.1 * python311-32bit-3.11.17-150600.3.74.1 * python311-base-32bit-3.11.17-150600.3.74.1 * libpython3_11-1_0-32bit-3.11.17-150600.3.74.1 * python311-32bit-debuginfo-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python311-64bit-3.11.17-150600.3.74.1 * python311-base-64bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-64bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-64bit-3.11.17-150600.3.74.1 * python311-64bit-debuginfo-3.11.17-150600.3.74.1 * python311-base-64bit-3.11.17-150600.3.74.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:30:42 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 08:30:42 -0000 Subject: SUSE-SU-2026:4945-1: important: Security update for brotli Message-ID: <179334904208.17944.3480692231008459679@8cb11e3fd1c0> # Security update for brotli Announcement ID: SUSE-SU-2026:4945-1 Release Date: 2026-10-29T16:31:59Z Rating: important References: * bsc#1287778 Cross-References: * CVE-2026-111497 CVSS scores: * CVE-2026-111497 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-111497 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for brotli fixes the following issue: * CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4945 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4945 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4945 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4945 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4945 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4945 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4945 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4945 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4945 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4945 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4945 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4945 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4945 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4945 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * Basesystem Module 15-SP7 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111497.html * https://bugzilla.suse.com/show_bug.cgi?id=1287778 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:04 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 08:31:04 -0000 Subject: SUSE-SU-2026:4944-1: important: Security update for flatpak Message-ID: <179334906455.17944.7766064765250266057@8cb11e3fd1c0> # Security update for flatpak Announcement ID: SUSE-SU-2026:4944-1 Release Date: 2026-10-29T16:29:48Z Rating: important References: * bsc#1280236 * bsc#1282514 * bsc#1282515 * bsc#1282516 * bsc#1282518 * bsc#1282519 * bsc#1282520 * bsc#1282523 * bsc#1282524 * jsc#PED-17048 Cross-References: * CVE-2026-90616 * CVE-2026-92162 * CVE-2026-96275 * CVE-2026-96276 * CVE-2026-96280 * CVE-2026-96281 * CVE-2026-96282 * CVE-2026-96807 * CVE-2026-96808 CVSS scores: * CVE-2026-90616 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-90616 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90616 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92162 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-92162 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-92162 ( NVD ): 7.2 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96275 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96275 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96275 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96276 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-96276 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96280 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96280 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96280 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96281 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-96281 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-96281 ( NVD ): 6.2 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:N * CVE-2026-96282 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N * CVE-2026-96282 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-96807 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:L * CVE-2026-96807 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L * CVE-2026-96807 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-96808 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96808 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96808 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves nine vulnerabilities and contains one feature can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236). * CVE-2026-92162: path traversal via unvalidated `arch` parameter in `DeployAppstream` (bsc#1282514). * CVE-2026-96275: arbitrary write access as root via extra-data extraction (bsc#1282515). * CVE-2026-96276: arbitrary write in host context via `flatpak build-init` (bsc#1282516). * CVE-2026-96280: buffer overflow in OCI delta stream path names (bsc#1282518). * CVE-2026-96281: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes (bsc#1282519). * CVE-2026-96282: extension metadata path traversal file existence oracle (bsc#1282520). * CVE-2026-96807: fixed-filename writes to arbitrary locations via symlink attack on `.ld.so` (bsc#1282523). * CVE-2026-96808: `revokefs` symlink path traversal allows local privilege escalation via commit tampering (bsc#1282524). Changes for flatpak: * Update to version 1.16.6 (jsc#PED-17048): * Fix file descriptor leaks affecting Chromium-based browsers. * Fix installing extra-data without a runtime, including openh264. * Fix unusable sandbox-expose paths affecting Epiphany. * Fix installed tests and handling of file descriptor arguments. * Changes from version 1.16.5: * Fix regressions from the sandbox escape security fix affecting browsers, browser-based apps and Steam. * Expand test coverage of flatpak-run features used by the portal. * Changes from version 1.16.4: * Prevent arbitrary file reads in the system-helper context (GHSA-2fxp-43j9-pwvc). * Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg). * Changes from version 1.16.3: * Be selective about mapping font-dirs.xml in flatpak build. * Changes from version 1.16.2: * Support reinstalling bundle installations and Intel Xe VA-API. * Add cancellation support for curl downloads. * Fix font configuration, mask and pin configuration reloads, unintended home directory access, flatpak kill, OCI support, memory leaks and crashes. * Changes from version 1.16.1: * Allow updating existing apps under parental controls by default. * Use instance IDs for systemd scopes and include /dev/udmabuf with --device=dri. * Speed up prune --dry-run and permission-reset. * Support TLS certificates in /etc/containers/certs.d for OCI. * Fix portal crashes, sandbox environment handling, accessibility bus discovery, error reporting and shell completion. * Update documentation and translations. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4944 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4944 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4944 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4944 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * openSUSE Leap 15.6 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * Desktop Applications Module 15-SP7 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-90616.html * https://www.suse.com/security/cve/CVE-2026-92162.html * https://www.suse.com/security/cve/CVE-2026-96275.html * https://www.suse.com/security/cve/CVE-2026-96276.html * https://www.suse.com/security/cve/CVE-2026-96280.html * https://www.suse.com/security/cve/CVE-2026-96281.html * https://www.suse.com/security/cve/CVE-2026-96282.html * https://www.suse.com/security/cve/CVE-2026-96807.html * https://www.suse.com/security/cve/CVE-2026-96808.html * https://bugzilla.suse.com/show_bug.cgi?id=1280236 * https://bugzilla.suse.com/show_bug.cgi?id=1282514 * https://bugzilla.suse.com/show_bug.cgi?id=1282515 * https://bugzilla.suse.com/show_bug.cgi?id=1282516 * https://bugzilla.suse.com/show_bug.cgi?id=1282518 * https://bugzilla.suse.com/show_bug.cgi?id=1282519 * https://bugzilla.suse.com/show_bug.cgi?id=1282520 * https://bugzilla.suse.com/show_bug.cgi?id=1282523 * https://bugzilla.suse.com/show_bug.cgi?id=1282524 * https://jira.suse.com/browse/PED-17048 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:11 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 08:31:11 -0000 Subject: SUSE-SU-2026:4943-1: moderate: Security update for gnutls Message-ID: <179334907181.17944.8218203539605969675@8cb11e3fd1c0> # Security update for gnutls Announcement ID: SUSE-SU-2026:4943-1 Release Date: 2026-10-29T16:29:18Z Rating: moderate References: * bsc#1257960 Cross-References: * CVE-2025-14831 CVSS scores: * CVE-2025-14831 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-14831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-14831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gnutls fixes the following issue: * CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4943 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * gnutls-debuginfo-3.3.27-3.24.1 * libgnutls28-debuginfo-3.3.27-3.24.1 * gnutls-debugsource-3.3.27-3.24.1 * libgnutls28-32bit-3.3.27-3.24.1 * libgnutls-openssl-devel-3.3.27-3.24.1 * libgnutls28-3.3.27-3.24.1 * libgnutls28-debuginfo-32bit-3.3.27-3.24.1 * libgnutls-devel-3.3.27-3.24.1 * libgnutls-openssl27-3.3.27-3.24.1 * libgnutlsxx-devel-3.3.27-3.24.1 * libgnutls-openssl27-debuginfo-3.3.27-3.24.1 * gnutls-3.3.27-3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14831.html * https://bugzilla.suse.com/show_bug.cgi?id=1257960 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:23 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 08:31:23 -0000 Subject: SUSE-SU-2026:4942-1: important: Security update for xen Message-ID: <179334908378.17944.13625270412793844676@8cb11e3fd1c0> # Security update for xen Announcement ID: SUSE-SU-2026:4942-1 Release Date: 2026-10-29T16:29:03Z Rating: important References: * bsc#1283317 * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79608 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102700 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79608 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79608 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79609 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79611 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround (bsc#1283317). * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4942 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4942 ## Package List: * Basesystem Module 15-SP7 (x86_64) * xen-tools-domU-debuginfo-4.20.4_06-150700.3.49.2 * xen-tools-domU-4.20.4_06-150700.3.49.2 * xen-debugsource-4.20.4_06-150700.3.49.2 * xen-libs-4.20.4_06-150700.3.49.2 * xen-libs-debuginfo-4.20.4_06-150700.3.49.2 * Server Applications Module 15-SP7 (x86_64) * xen-4.20.4_06-150700.3.49.2 * xen-debugsource-4.20.4_06-150700.3.49.2 * xen-devel-4.20.4_06-150700.3.49.2 * xen-tools-4.20.4_06-150700.3.49.2 * xen-tools-debuginfo-4.20.4_06-150700.3.49.2 * Server Applications Module 15-SP7 (noarch) * xen-tools-xendomains-wait-disk-4.20.4_06-150700.3.49.2 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79608.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283317 * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 12:30:16 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 12:30:16 -0000 Subject: SUSE-RU-2026:4947-1: important: Recommended update for sapstartsrv-resource-agents Message-ID: <179336341682.19350.11766596909136437507@9bf698548bc1> # Recommended update for sapstartsrv-resource-agents Announcement ID: SUSE-RU-2026:4947-1 Release Date: 2026-10-30T06:43:54Z Rating: important References: * bsc#1221641 Affected Products: * SAP Applications Module 15-SP4 * SAP Applications Module 15-SP5 * SAP Applications Module 15-SP6 * SAP Applications Module 15-SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for sapstartsrv-resource-agents fixes the following issues: * Update to version 0.9.6: * Removed misleading interval-value for the monitor-operation and move init to probe only. (bsc#1221641) * Add an alert agent that can react on cluster resources timeout alerts: SAPStartSrv-alert-timeout and SAPStartSrv-Helper * New man pages: * SAPStartSrv-alert-timeout.8 and SAPStartSrv-helper.8 for the new alert agent feature * SAPStartSrv_upgrade_from_Filesystem.7: Describes the upgrade of an HA cluster for SAP central service instances from the Filesystem resource based setup to the simple-mount setup. * SAPStartSrv_upgrade_from_Filesystem_disk.7: Describes the upgrade of an HA cluster for SAP central service instances from the Filesystem resource based setup with shared disk to the simple-mount setup. * Changed man pages: * ocf_suse_SAPStartSrv.7 * SAPStartSrv_basic_cluster.7 * SAPStartSrv_maintenance_examples.7 * SAPStartSrv_maintenance_procedures.7 * sapping.7 * sapservices-move.8 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SAP Applications Module 15-SP4 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP4-2026-4947 * SAP Applications Module 15-SP5 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP5-2026-4947 * SAP Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP6-2026-4947 * SAP Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2026-4947 ## Package List: * SAP Applications Module 15-SP4 (noarch) * sapstartsrv-resource-agents-0.9.6+git.1791548114.2a86b96-150000.1.27.1 * SAP Applications Module 15-SP5 (noarch) * sapstartsrv-resource-agents-0.9.6+git.1791548114.2a86b96-150000.1.27.1 * SAP Applications Module 15-SP6 (noarch) * sapstartsrv-resource-agents-0.9.6+git.1791548114.2a86b96-150000.1.27.1 * SAP Applications Module 15-SP7 (noarch) * sapstartsrv-resource-agents-0.9.6+git.1791548114.2a86b96-150000.1.27.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1221641 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:19 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:19 -0000 Subject: SUSE-SU-2026:24460-1: important: Security update for expat Message-ID: <179337781915.19946.1313054273553154302@3c67540d6a94> # Security update for expat Announcement ID: SUSE-SU-2026:24460-1 Release Date: 2026-10-27T16:06:39Z Rating: important References: * bsc#1275115 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2026-102633 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1996 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * expat-debugsource-2.8.5-160000.1.1 * libexpat1-debuginfo-2.8.5-160000.1.1 * libexpat1-2.8.5-160000.1.1 * expat-debuginfo-2.8.5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:25 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:25 -0000 Subject: SUSE-RU-2026:24459-1: important: Recommended update for libnvme Message-ID: <179337782536.19946.1109136772674752052@3c67540d6a94> # Recommended update for libnvme Announcement ID: SUSE-RU-2026:24459-1 Release Date: 2026-10-26T20:34:36Z Rating: important References: * bsc#1283955 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for libnvme fixes the following issues: Changes in libnvme: * fabrics: Fix NULL dereference in nvmf_update_tls_concat (bsc#1283955) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1989 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libnvme1-debuginfo-1.11+29.gef3ef5b9-160000.1.1 * libnvme-mi1-debuginfo-1.11+29.gef3ef5b9-160000.1.1 * libnvme-debuginfo-1.11+29.gef3ef5b9-160000.1.1 * libnvme-mi1-1.11+29.gef3ef5b9-160000.1.1 * libnvme1-1.11+29.gef3ef5b9-160000.1.1 * libnvme-debugsource-1.11+29.gef3ef5b9-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1283955 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:32 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:32 -0000 Subject: SUSE-RU-2026:4952-1: moderate: Recommended update for suse-migration-services Message-ID: <179337783266.19946.13624546095320115016@3c67540d6a94> # Recommended update for suse-migration-services Announcement ID: SUSE-RU-2026:4952-1 Release Date: 2026-10-30T11:30:05Z Rating: moderate References: * bsc#1261038 Affected Products: * Basesystem Module 15-SP7 * SAP Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one fix can now be installed. ## Description: This update for suse-migration-services fixes the following issues: * New Version: 2.1.38 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4952 * SAP Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-SAP-Applications-15-SP7-2026-4952 ## Package List: * Basesystem Module 15-SP7 (noarch) * suse-migration-scripts-2.1.38-150700.15.30.4 * python3-migration-2.1.38-150700.15.30.4 * suse-migration-pre-checks-2.1.38-150700.15.30.4 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * SLES16-Migration-2.1.38-15.41.1 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150700.15.22.4 * SAP Applications Module 15-SP7 (ppc64le x86_64) * SLES16-SAP_Migration-2.1.38-15.33.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261038 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:38 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:38 -0000 Subject: SUSE-RU-2026:4951-1: moderate: Recommended update for suse-migration-services Message-ID: <179337783864.19946.14957529405968813927@3c67540d6a94> # Recommended update for suse-migration-services Announcement ID: SUSE-RU-2026:4951-1 Release Date: 2026-10-30T11:28:45Z Rating: moderate References: * bsc#1261038 Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one fix can now be installed. ## Description: This update for suse-migration-services fixes the following issues: * New version: 2.1.38 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4951 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4951 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4951 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4951 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4951 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * suse-migration-scripts-2.1.38-150500.12.7.1 * suse-migration-pre-checks-2.1.38-150500.12.7.1 * python3-migration-2.1.38-150500.12.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150500.11.6.1 * openSUSE Leap 15.5 (noarch) * suse-migration-scripts-2.1.38-150500.12.7.1 * suse-migration-2.1.38-150500.12.7.1 * suse-migration-services-2.1.38-150500.12.7.1 * suse-migration-pre-checks-2.1.38-150500.12.7.1 * python3-migration-2.1.38-150500.12.7.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * suse-migration-rpm-1.0.1-150500.12.7.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150500.11.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * suse-migration-scripts-2.1.38-150500.12.7.1 * suse-migration-pre-checks-2.1.38-150500.12.7.1 * python3-migration-2.1.38-150500.12.7.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150500.11.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * suse-migration-scripts-2.1.38-150500.12.7.1 * suse-migration-pre-checks-2.1.38-150500.12.7.1 * python3-migration-2.1.38-150500.12.7.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150500.11.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * suse-migration-scripts-2.1.38-150500.12.7.1 * suse-migration-pre-checks-2.1.38-150500.12.7.1 * python3-migration-2.1.38-150500.12.7.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * suse-migration-sle16-activation-2.1.38-150500.11.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1261038 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:43 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:43 -0000 Subject: SUSE-SU-2026:4950-1: important: Security update for suseconnect-ng Message-ID: <179337784345.19946.996141224271406506@3c67540d6a94> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:4950-1 Release Date: 2026-10-30T11:20:20Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for suseconnect-ng rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4950 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4950 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4950 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4950 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4950 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4950 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4950 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4950 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4950 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * mcp-server-suseconnect-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:52 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:30:52 -0000 Subject: SUSE-SU-2026:4949-1: important: Security update for python-CairoSVG Message-ID: <179337785251.19946.10852819874107461776@3c67540d6a94> # Security update for python-CairoSVG Announcement ID: SUSE-SU-2026:4949-1 Release Date: 2026-10-30T09:58:04Z Rating: important References: * bsc#1284832 Cross-References: * CVE-2026-107378 CVSS scores: * CVE-2026-107378 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-107378 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107378 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-CairoSVG fixes the following issue: * CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4949 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4949 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4949 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4949 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4949 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4949 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4949 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4949 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4949 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4949 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4949 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4949 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * openSUSE Leap 15.4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * Python 3 Module 15-SP7 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107378.html * https://bugzilla.suse.com/show_bug.cgi?id=1284832 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:31:04 2026 From: null at suse.de (SLE-UPDATES) Date: Fri, 30 Oct 2026 16:31:04 -0000 Subject: SUSE-SU-2026:4948-1: important: Security update for python-urllib3_1 Message-ID: <179337786468.19946.4656937404515172058@3c67540d6a94> # Security update for python-urllib3_1 Announcement ID: SUSE-SU-2026:4948-1 Release Date: 2026-10-30T09:56:02Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3_1 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4948 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4948 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4948 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4948 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * openSUSE Leap 15.6 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * Python 3 Module 15-SP7 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: